IT Perimeter Security Team Lead

I own access-control and perimeter-security capabilities supporting a SaaS platform used by investment banks and private equity firms for M&A transactions. My work covers permissions, authentication systems, VPN gateways, audit controls, and security requirements for sensitive deal data.

I translate ambiguous product mandates into documented security requirements and production-ready policies. I identified data-quality and access-pattern issues before a large migration, repaired incorrect configurations, and introduced structural controls including transactional audit history, API-level validation, and save-time permission checks.

I also evaluated an LLM-based judge for access decisions that could not be handled by a rules engine, measuring 92.5% precision and preventing unsafe auto-approval. I mentor engineers to review code against underlying security principles and threat models.

I delivered perimeter-security infrastructure for enterprise, travel, automotive, and analytics clients. I designed firewall rules, load balancing, traffic controls, configuration versioning, and failover capabilities for client-facing systems and high-volume data workloads.

As Senior Security Infrastructure Engineer, I led security infrastructure for a travel price-comparison product, supporting terabyte-scale Kafka traffic, aiohttp consumers, and PySpark jobs. I designed monitoring and resiliency controls and established traceable security configuration practices for an automotive AI product.

Earlier as an IT Security Engineer, I operated firewall and load-balancer infrastructure, optimized redundant rules and resource use, and reduced deployment cycles by more than 50%. I established CI/CD, configuration validation, ephemeral test environments, and Git-based deployment standards for the security team.

I built security infrastructure and analytics capabilities for enterprise NLP and AI clients, including regulated environments. My responsibilities included perimeter design, firewall configuration, access-control systems, audit logging, security monitoring, and CI/CD validation.

I moved client networks to PostgreSQL-backed access control and BigQuery-backed audit logging orchestrated with Airflow, reducing manual security review by approximately 35%. I designed firewall controls around operational security requirements and used Elasticsearch to improve permission retrieval.

I implemented configuration validation and schema checks in CI/CD pipelines to detect security regressions before they reached clients.

I supported perimeter controls, access infrastructure, audit tooling, and security analytics for an enterprise conversational AI platform. I worked on firewall rules, access-log ingestion, transformation workflows, and monitoring used to demonstrate platform compliance to clients.

I improved security-monitoring responsiveness as client data volumes grew through PostgreSQL and MySQL query optimization and schema design. I also implemented deployment-time security checks and schema validation to prevent invalid configurations from reaching production.

Bachelor's degree in Computer Science.

Minor degree in Business Administration.