Shubham Shah

Cloud Security Engineer, Iam Cloudsec Team @Credit Karma

Mountain View, CA, US

Key Areas of Focus & Accomplishments- AI Access Control: Leading the efforts for comprehensive access control framework and requirements for critical AI components, including Managed Control Plane (MCP) and Agentic AI clients/services, with a focus on identity management- Multi-Cloud IAM & Trust: Engineered and enforced stringent security controls for both Human and Non-Human Identities across AWS and GCP, successfully implementing least-privilege principles. I also serve as the lead for the AWS IAM infrastructure- Cloud Policy and Posture Hardening: Led strategic Cloud Organization Policy initiatives to enforce baseline security controls, ensuring continuous risk reduction and compliance throughout the different cloud environment- Centralized Tagging Governance: Defined and implemented a fully automated process for centralized Tags management, ownership, and binding to cloud resources to enhance IAM access and Deny controls using conditions- Risk Mitigation: Identified systemic vulnerabilities and engineered permanent mitigations for non-human cloud identities, leading to a significant improvement in the organization\'s security posture- Security Automation & Efficiency: Built tooling and automation to significantly increase the reliability and efficiency of existing security processes, substantially reducing manual operational burden on the OnCall.

North Carolina State University

Master of Science - MS, Computer Systems Networking and Telecommunications

University of Mumbai

Bachelor of Engineering - BE, Electronics Engineering