Mark Waldo

About Mark Waldo

Highly accomplished AWS Cloud Security Engineer / Solutions Architect with 8+ years of experience designing, securing, and optimizing enterprise-scale cloud environments across financial and technology domains. Proven expertise in AWS architecture, cloud security frameworks, and DevSecOps practices, with a strong focus on Zero Trust, identity and access management, and threat detection. Skilled in implementing secure, scalable, and highly available solutions using AWS services, Infrastructure as Code (Terraform, CloudFormation), and CI/CD automation. Extensive experience in SIEM integration, incident response, vulnerability management, and compliance with industry standards including NIST, ISO 27001, PCI-DSS, and HIPAA. Adept at leading cloud migrations, improving security posture, and collaborating with cross-functional teams to deliver secure, cost-optimized, and resilient cloud solutions.

Experience

1. Aws Cloud Security Engineer Solutions Architect

   Cisco

   Jul 2023 — Present

   Designed, deployed, and managed scalable AWS cloud infrastructure for over 25+ enterprise-grade applications, ensuring 99.99% system uptime.• Architected and secured AWS cloud environments (EC2, S3, RDS, VPC) for 50+ enterprise workloads, improving system availability by 30% and enforcing secure-by-design principles • Implemented IAM policies, roles, and least-privilege access controls, reducing unauthorized access risks by 45% and strengthening identity governance • Designed and deployed Zero Trust security architecture across multi-account AWS environments, enhancing overall security posture and reducing attack surface by 35% • Automated infrastructure provisioning using Terraform and AWS CloudFormation, accelerating deployment cycles by 60% and eliminating manual configuration errors • Led cloud security assessments and vulnerability management programs, identifying and remediating critical vulnerabilities, improving compliance by 40% • Engineered SIEM integrations (Splunk / Sentinel) for log aggregation and correlation, reducing incident response time (MTTR) by 50% • Established DevSecOps practices by embedding security controls into CI/CD pipelines (Jenkins, GitHub Actions), decreasing deployment vulnerabilities by 38% • Implemented data protection strategies including encryption (KMS), tokenization, and secure key management, ensuring 100% compliance with regulatory standards (PCI-DSS, HIPAA) • Optimized cloud cost and security posture using AWS Trusted Advisor and FinOps practices, reducing monthly cloud spend by 25% while maintaining security benchmarks • Led incident response and forensic investigations for cloud security events, successfully containing threats within <30 minutes and improving incident resolution efficiency by 45% • Collaborated with cross-functional teams and stakeholders to design secure, scalable cloud architectures, enabling 20+ successful cloud migrations with zero critical security incidents

Education

• University of Buea

  Bachelor's degree, Computer Science