Enterprise Cloud Architecture, IaC & Multi-Layer Security

Architected and deployed enterprise cloud infrastructure on AWS for mission-critical SAP HANA (S/4HANA) systems, fully aligned with SAP security regulations and best practices. Automated deployment using Terraform and AWS CloudFormation on the Infrastructure as Code (IaC) platform. Implemented advanced AWS networking (Transit Gateway, VPC Peering, Route Tables, NAT Gateways, Internet Gateways, and Load Balancers) alongside redundant Site-to-Site VPN tunnels to on-premises datacenters. Enforced multi-layered infrastructure defense across network and OS layers—including Check Point and FortiGate Next-Gen Firewalls, NSG, NACL, AWS GuardDuty, IAM with MFA, AWS Shield, WAF, Inspector, CloudTrail, Trend Micro Deep Security across all VMs, and regular monthly security patching and audits.

Built using AWS, SAP HANA, Terraform, CloudFormation, Transit Gateway, Check Point, FortiGate, Trend Micro Deep Security, Site-to-Site VPN, AWS Shield & WAF

• Infrastructure as Code (IaC): Automated deployment using Terraform & AWS CloudFormation
• Advanced AWS Networking: Deployed Route tables, VPC Peering, Transit Gateway, NAT Gateway, IGW, and Load Balancers
• Hybrid Cloud Connectivity: Configured and maintained resilient Site-to-Site VPN tunnels between AWS and on-premises datacenters
• Multi-Layer Security: Implemented Check Point & FortiGate FW, NSG, NACL, GuardDuty, IAM with MFA, AWS Shield, WAF, Inspector, and CloudTrail
• Workload & OS Protection: Deployed Trend Micro Deep Security Solution for all EC2/VM instances across the infrastructure
• Patching & Compliance: Executed monthly security patching, system audits, and vulnerability remediation on AWS Cloud
• Client Advisory: Consulted and presented infrastructure security architectures directly to enterprise clients and stakeholders

If you're curious, feel free to explore: