• Design, implement, and maintain security controls across cloud infrastructure (AWS/GCP), CI/CD pipelines, and internal systems • Lead application security efforts: threat modeling, secure code review, and integrating SAST/DAST tooling into the development lifecycle • Own vulnerability management — triage, prioritize, and drive remediation of findings from scans, pen tests, and bug bounty reports • Monitor for and respond to security incidents; build and maintain incident response runbooks • Manage identity and access controls (SSO, RBAC, least-privilege enforcement) across internal and customer-facing systems • Support customer security questionnaires, audits, and certifications (e.g., SOC 2, ISO 27001) • Partner with engineering teams to embed secure-by-design practices into new features and services • Evaluate and implement security tooling (secrets management, endpoint protection, cloud security posture management) • Educate the broader team on security best practices and champion a security-first culture

• Lead Product Security and Cloud Security initiatives from design through operation • Influence architecture and product decisions, embedding security from development through production • Protect applications, APIs, and AWS environments, balancing security, performance, and availability • Proactively identify and mitigate risks, prioritizing automation and scalability • Serve as a technical reference for engineering teams, promoting best practices and reducing friction in the SDLC • Continuously evolve the security posture for cloud, applications, and generative AI • Define and operate protection strategies for applications and APIs using WAF/WAAP (preferably Azion) • Lead API security efforts, mitigating risks described in the OWASP API Security Top 10 • Improve AWS security posture using CSPM/CNAPP (Wiz or similar), Security Hub, GuardDuty, Inspector, and other native services • Develop automations for vulnerability remediation and security processes • Integrate security into the SDLC through threat modeling, security reviews, and AppSec practices • Define controls for the safe use of AI in engineering and products • Support incident response, technical documentation, and risk indicators

• Deliver the full lifecycle of physical and electronic security elements within data centre and critical infrastructure projects. • Oversee technical installation quality, system integration accuracy, device placement, panel wiring, and alignment to global standards. • Serve as the on‑site embedded security representative, collaborating closely with construction, MEP, and infrastructure teams. • Lead functional testing of ACS, VMS, IDS, intercoms, sensors, physical hardware, and failover behaviour. • Verify installation and integration of physical security infrastructure.

• Design, implement, and operate identity, credential, and access management (ICAM) and public key infrastructure (PKI) capabilities • Engineering and operating ICAM services, including authentication, authorization, federation, and single sign-on for platform applications • Implementing and maintaining PKI, including certificate issuance, renewal, revocation, and key lifecycle management • Integrating Personal Identity Verification (PIV) card-based authentication in accordance with HSPD-12 and FIPS 201 • Configuring and managing cloud identity and access management (AWS IAM), including roles, policies, and least-privilege access • Applying federal identity standards and frameworks to platform design and operations • Advancing zero-trust principles across identity and access controls • Automating identity and access provisioning through infrastructure as code (Terraform) • Producing technical documentation and translating complex identity and security concepts for stakeholders • Working with government partners and application teams to meet security, compliance, and access requirements