Naresh S

About Naresh S

I’m a Cloud Architect passionate about building the future of enterprise infrastructure — secure, automated, and designed to scale. My focus is on creating cloud platforms that balance performance, cost efficiency, and zero-trust security, while enabling innovation in AI, HPC, and data-driven workloads. I believe the next generation of cloud will be fully automated, compliance-aware, and resilient by design -and that’s exactly what I build. Infrastructure Design at Scale – Architected and operated AWS environments across accounts using Control Tower, SCPs, and AWS Organizations. Designed multi-region, highly available architectures with VPC, Transit Gateway, and zero-trust networking strategies that eliminate public exposure while enabling secure workload isolation. Security & Compliance – Built enterprise-grade guardrails with IAM Identity Center, SCPs, GuardDuty, Security Hub, and centralized logging via CloudTrail and AWS Config. Delivered HIPAA, GDPR, and GxP-aligned cloud architectures. Implemented zero-trust access models, SSO-integrated bastion access, and automated patch compliance across 9,500+ Linux and 1,400 Windows servers. Cost Optimization – Engineered cost-aware storage and compute platforms with FSx ONTAP, FSx Lustre, S3 Intelligent Tiering, and Graviton-based HPC clusters. Automated idle asset detection, chargeback reporting, and right-sizing strategies across 300+ accounts using Trusted Advisor, Lambda, and Cost Explorer integrations. High Performance & Reliability – Delivered HPC/ML platforms using ParallelCluster, SageMaker, and Bedrock, cutting training costs while improving performance for genomics and life sciences workloads. Designed resilient DR/BCP strategies with AWS Backup, Route 53 health checks, and cross-region replication, meeting strict RPO/RTO. Built hybrid cloud models integrating VMware, Oracle, and on-prem with AWS via Direct Connect and VPN.

Experience

1. Cloud Architect

   Amgen

   Sep 2023 — Present · Thousand Oaks, CA, US

   Cloud Architect with deep expertise in designing and operating secure, scalable, multi-account AWS environments accounts). Led enterprise implementations using AWS Control Tower, Organizations, and SCPs for zero-trust security, automated governance, and compliance (HIPAA, GDPR). Drove account setup, architecture design, and cross-account networking strategies using Transit Gateway, VPC Lattice, and shared VPC patterns to eliminate internet exposure and enable secure workload isolation.Delivered automation at scale through IaC with Terraform, OpenTofu, AWS CDK, CloudFormation, and SAM. Built GitLab OIDC-integrated CI/CD pipelines, embedding security, compliance, and drift detection. Automated deployments of VPCs, EKS clusters, FSx, and patch baselines using reusable modules and CloudFormation StackSets. Operated SSM Systems Manager and Ansible for patch orchestration, software deployment, and compliance across 9,500+ Linux and 1400 Windows servers.Designed hybrid cloud strategies integrating VMware, OCI, and on-premises workloads with AWS via Direct Connect and VPN. Migrated enterprise applications using CloudEndure, Application Migration Service, and DMS to resilient RDS, S3, and FSx architectures. Delivered HPC and ML/AI platforms using AWS ParallelCluster, Graviton, SageMaker, and Bedrock for genomics and life sciences workloads.Established observability with CloudWatch, OpenSearch, X-Ray, and Grafana dashboards, integrating GuardDuty, Security Hub, and IAM Access Analyzer for centralized detection and response. Engineered DR strategies with Route 53 health checks, multi-region replication, and AWS Backup to meet strict RPO/RTO. Optimized cost and performance with Trusted Advisor, S3 Intelligent Tiering, and automated chargeback.Proven record architecting automation-driven, secure, zero-trust, and compliant AWS platforms supporting thousands of accounts, workloads, and users across global regions.

Education

• Hult International Business School

  Master's degree, MS in Business Analytics

• Shobhit University

  Bachelor of Science - BS, Computer Science