Harshita Chandra

About Harshita Chandra

As an experienced Cloud Security Engineer, I have a proven track record of success in deploying and managing AWS infrastructure for various development and integration environments. My expertise lies in using Terraform to automate provisioning of servers, migrating on-prem services to the cloud, and deploying any services of any code change or hot fix done in the environment. I have extensive experience in deploying Route53 and NLB for various different application environments, as well as building the base code for infrastructure deployment. I have implemented IAC best practices in Terraform by modularizing the components and integrating Terraform enterprise with VCS to create a workflow for an infrastructure pipeline. In addition, I have created Jenkins CI/CD pipelines for continuous build and deployment, and integrated SonarQube plugins in Jenkins for automated testing and Code Quality checks. I am also experienced in creating and sending cross account VPC flow logs and storing it in S3 Bucket, deploying Palo Alto Next Gen Firewall with Gateway Load Balancer in Networking Account under AWS organization, and integrating WAF with ALB and sending logs to replicated S3 bucket. Moreover, I have deployed Tower Post Processor through CDK, IAM Deployment Solution through CDK, and created Run Books for the Operations Team. I have also deployed MDE, QCP in the servers and suggested Security Controls based on NIST Framework. I have deployed Permission Sets for multiple AWS Accounts, enabled and utilized AWS Trusted Advisor to inspect accounts, and maintained and managed WAF policies and rules. As a responsible AWS Infrastructure Engineer, I have been responsible for Application Build and Release using AWS DevOps which includes Code Compilation, Security Scanning, and Code Quality Scanning. I have created IAM roles and attached policies to them, modified an IAM role, created IAM users, and edited a permission policy attached to a user. I have also worked on non-compliant resources according to frameworks recommended security standards making them compliant. Furthermore, I have integrated CloudTrail to CloudWatch, set metrics for CloudWatch and SNS, and implemented and managed ArcSight ESM and Connectors at multiple locations. I have created and managed encrypted S3 buckets for all Cloud trail logs. Overall, my technical expertise in AWS infrastructure and DevOps, combined with my ability to work effectively both independently and as part of a team, makes me an ideal candidate for any organization looking to deploy and manage AWS infrastructure.

Experience

1. Cloud Security Analyst

   Accenture

   Feb 2022 — Present · Hyderabad, IN

   Deployed AWS Infrastructure on various development and integration environments using Terraform. • Migrating On-prem services to AWS Cloud. • Automated provisioning of servers with different security groups and sg rules attached in prod and non-prod environments. • Worked on automating root volume and EBS encryption. • Working on deployment of any services of any code change or hot fix done in the environment by pushing the code to GitHub/code-commit repo. • Single handedly built Terraform base code for infra deployment to help application migrate from on-prem to AWS. • Worked on DR region infrastructure setup using EC2 snapshot from primary region.[Active/Passive]. • Working on Route53 and NLB deployment for various different application environments. • Implemented IAC best practices in Terraform by modularizing the components. • Integrated Terraform enterprise with VCS to created workflow for an infrastructure pipeline. • Restoration of EC2 instances through AWS Backup using Terraform. • Implemented Ansible to manage all existing servers and automate the build of Oracle and SQl in the database servers. • Creating and sending cross account VPC flow logs and storing it in S3 Bucket. • Deploying Palo Alto Next Gen Firewall with Gateway Load Balancer in Networking Account under AWS organization. • Integrating WAF with ALB and sending logs to replicated S3 bucket. • Deploying Palo Alto Next-Gen Firewall with GWLB in Networking Account with GWLB Endpoint1 • Integrated Twistcli (Prisma Cloud) in CI/CD for build time and runtime vulnerability scanning and working with vendors and developers to remediate both base image and application related vulnerabilities. • Integrated Checkov in the Gitlab Pipeline to scan Terraform files and Terraform Plan. • On-boarded AWS Organization to generate compliance reports based on CIS Controls V8. • Performed SAST, DAST, SCA and IAC security testing on applications and performed False positive analysis

Education

• Shri Shankaracharya Institute of Professional Management and Technology

  Bachelor of Engineering - BE, computer science engineering

  2013 — 2017