Paul Zedeck

About Paul Zedeck

As a Cloud Security Architect and Cybersecurity Leader, I specialize in designing and implementing scalable, enterprise-grade security frameworks that protect cloud environments and drive operational resilience. With expertise in multi-cloud security, AI governance, risk management, and Zero Trust architectures, I help organizations strengthen their security posture while aligning with industry best practices and regulatory requirements.I have extensive experience developing cloud security strategies across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP), integrating compliance, risk assessment, and security automation to enhance cloud operations. My work focuses on proactive threat management, generative AI security governance, and secure cloud adoption strategies that reduce risk while optimizing cost and operational efficiency.Most recently, I have led enterprise cloud security initiatives for federal agencies, developing AI risk governance foundations, FedRAMP-continuous monitoring program development, and DevSecOps-driven security automation proposals. I have also designed Zero Trust architectures and Secure Access Service Edge (SASE) strategies to ensure secure access management and data protection across hybrid and cloud-native environments.As a CISSP-certified professional, I am passionate about bridging security, business objectives, and emerging technologies to help organizations move beyond checkbox compliance to true risk-informed decision-making. I excel in collaborating across IT, security, and leadership teams to drive strategic cloud security programs that not only meet compliance but also strengthen enterprise resilience while ensuring cost-effective risk management.I am always eager to engage in discussions on cloud security, AI governance, and cybersecurity strategy—let’s connect!

Experience

1. Cloud Security Architect

   Usda

   Dec 2023 — Present · Denver, CO, US

   As a Cloud Security Architect, I drive cloud security strategies, risk management initiatives, and compliance frameworks to enhance multi-cloud security postures. My focus is on scalable security solutions, AI governance, and cloud risk management to ensure operational resilience and regulatory compliance.Generative AI Security Governance- Established AI governance focused on AI risk tolerance, sovereignty, model integrity, adversarial ML risks, and AI-generated output monitoring, ensuring responsible AI adoption enabling leadership to move beyond checkbox compliance to risk-informed decisions and explainable AI.Multi-Cloud Security- Delivered multi-cloud security audit strategies under the AgCloud Agile Release Train (ART) framework, improving compliance and governance- Designed an AWS Elastic Kubernetes Service (EKS) shared security model, strengthening container security governance- Developed a disaster recovery plan for AWS & Azure workloads, enhancing resilience and compliance- Led continuous monitoring of vendors to assess security controls, vendor risks, and mitigation strategies.Security Automation & DevSecOps- Developed a security automation strategy to streamline SIEM, SOAR, and CSPM for cloud workloads- Designed secure CI/CD pipeline standards, reducing software supply chain risks, and enforcing DevSecOps best practices- Proposed integrated security controls into Infrastructure as Code (IaC) deployments for secure cloud configurations.Zero Trust & Network Security- Spearheaded Secure Access Service Edge (SASE) analysis & implementation proposal for Zero Trust adoption and cloud access control- Developed IAM, least privilege, and just-in-time (JIT) access policies to strengthen cloud security.Risk Management & Strategic Leadership- Engaged with internal and external stakeholders to tailor security strategies with business needs.

Education

• Purdue University

  BS, Aerospace Technology

Skills

• Information Security Management
• Vulnerability Assessment
• Policy
• Governance
• Vulnerability Management
• Computer Security
• Business Process Engineering
• Risk Assessment
• Program Management
• Incident Response
• Ids
• Physical and Environmental Protections
• Business Process Re-Engineering
• Security Operations Center Management
• Security+
• Networking
• Computer Program
• Cissp
• Security Authorization (Formerly C&a)
• Security Operations Center
• Federal Information Security Regulations
• Intrusion Detection
• Security Test and Evaluation (St&E)
• Federal Law
• Dod
• Physical Security
• Penetration Testing
• Computer Forensics
• Audit and Accountability Assessment
• Information Security
• Security
• Management
• Information Assurance
• C&a
• Fisma
• Program Policy Development
• Information Technology
• Security Clearance