Rob Troke

About Rob Troke

I believe the best security is the kind people don\'t notice.Not because it\'s hidden — but because it\'s been designed in from the start.Over 20 years working in technology across the UK and US, I\'ve moved from managing firewalls to architecting enterprise security programs to building secure cloud infrastructure at AWS. What\'s stayed constant is the same core challenge: understanding what a business actually needs, then building something that keeps it secure without slowing it down.These days I spend most of my time working with AWS strategic customers across the US — helping them migrate sensitive workloads to the cloud, design DevSecOps pipelines with security baked into every stage, and manage cloud security posture using tools like Wiz, AWS Security Hub, and AWS Config. I also build — writing Python, Boto3, and IaC daily, and recently designed a proof-of-concept multi-agent AI system on AWS Bedrock, applying secure design principles to agentic workloads including access control, data isolation, and LLM threat vector mitigation.I\'m at my best as an individual contributor working on technically complex problems — threat modeling, secure architecture, automation, and the kind of DevSecOps pipeline work where security stops being a gate and starts being a feature.20+ years in. Still building.

Experience

1. Sr Security Consultant

   Amazon Web Services (AWS)

   Mar 2022 — Present · FL, US

   Trusted security advisor to AWS strategic customers — helping enterprises migrate sensitive workloads to the cloud securely, and building the architecture and automation that keeps them there.I work across the full security lifecycle: from threat modeling and secure design in the earliest stages of a project, through to hands-on implementation using Python, Boto3, Bash, and infrastructure as code (CloudFormation, Terraform, AWS CDK). I don\'t just design — I build.What I focus on: Secure cloud architecture for regulated industries — designing compliant workloads that balance security requirements with business velocity DevSecOps pipelines — integrating security scanning gates (Checkov, Bandit, cfn-nag, Semgrep, pre-commit hooks) directly into CI/CD workflows so security is a feature, not a gate Cloud security posture management — continuous compliance visibility using Wiz (including Admission Controller), Prisma Cloud, AWS Security Hub, and AWS Config AI and agentic workload security — designed and deployed a production multi-agent system on AWS Bedrock, applying secure design principles to LLM architectures including least-privilege access, data isolation, and mitigation of prompt injection and data exfiltration risks AWS Security services — Security Hub, GuardDuty, WAF, Shield, Firewall Manager, IAM, KMS, CloudTrail, Config Customer enablement — reference architectures, runbooks, automation tools, and skills transfer workshops that leave customers self-sufficient

Education

• Shelfield

  GCSE, GCSE

  1994 — 1999

• University of Bradford

  Cybernetics with Transportation Systems, Information Technology

  2001 — 2005

• Sutton Coldfield College

  BTEC National Diploma in Applied Computing, Computers in Control

  1999 — 2001