Rohan Bhagat
Rohan Bhagat

Cloud Security Engineer

Open to offers · Member since 27 Jul 2026
Message
Location
Hamburg, Germany
Desired salary
Unspecified
Work preference
Hybrid / Full Time
Experience level
Senior

About

Professional summary

I am a Cloud Security Engineer with 18+ years of experience across platform engineering, infrastructure, DevOps, and cloud security. My work focuses on designing secure, compliant, and scalable architectures across AWS and Azure, with a strong emphasis on Zero Trust, CSPM, and security-by-design principles.

I have deep hands-on experience with Kubernetes, Terraform, Ansible, and multi-cloud automation, and I regularly translate regulatory and governance requirements into practical controls and reference architectures. My background allows me to bridge engineering and security concerns while keeping delivery teams moving.

In my recent roles, I have led security architecture reviews, built multi-account governance models, implemented IAM guardrails, and improved incident response and detection capabilities across cloud environments. I also work closely with product and security stakeholders to ensure infrastructure decisions are aligned with compliance, reliability, and operational needs.

Earlier in my career, I built a broad foundation in systems engineering, DevOps, operations, clustering, virtualization, and Linux administration. That experience continues to shape how I approach cloud security: with a strong understanding of how platforms behave, where risks emerge, and how to harden systems without sacrificing usability.

I am comfortable working across infrastructure, security tooling, CI/CD, observability, identity, and compliance frameworks. I also have practical experience with AI/GenAI tooling and infrastructure, including secure self-hosted and agentic workflows.

I am based in Hamburg, Germany, and hold permanent residency. I am open to opportunities where I can contribute to cloud security architecture, governance, and secure platform engineering in complex environments.

Skills

43 capabilities

Tech stack & tools

Working toolkit

Experience

Career history

Cloud Security Engineer RWE Supply & Trading GmbH

Led security architecture reviews for new cloud deployments, translating compliance and reliability requirements into concrete infrastructure decisions aligned with NIST CSF 2.0, GDPR/DSGVO, and internal standards.

Designed multi-account governance on AWS Organizations, including Service Control Policies and IAM guardrails to enforce least privilege and Zero Trust principles across the estate.

Built incident response architecture for AWS cloud-native environments and established centralized CSPM using AWS Security Hub and Orca Security. Also embedded security-by-design controls into Terraform modules and CI/CD pipelines, reducing vulnerability detection time and lowering false positives.

Senior Systems Engineer Smaato

Designed hardened VPC architectures and network segmentation for high-traffic ad-tech workloads on AWS.

Architected Kubernetes security controls including namespace-level RBAC, Network Policies, and automated image scanning. Automated EKS version upgrades through CI/CD, significantly reducing upgrade windows and manual error.

Defined CIS-based hardening baselines for Linux fleets and served as primary incident responder for production and security events, improving MTTR through runbooks and root-cause analysis.

Senior DevOps Engineer Vattenfall Energy Trading GmbH

Established architectural guardrails for engineering teams to support scalable, cost-efficient, and compliant AWS-based platforms.

Automated cloud and Kubernetes lifecycle management with Terraform and Ansible, reducing configuration drift and errors.

Partnered with product owners to align infrastructure decisions with long-term cloud and reliability strategy.

Senior DevOps Engineer Bigpoint GmbH

Migrated legacy gaming platforms to a Kubernetes-based microservices architecture with automated monitoring and logging.

Mentored engineers on container security, CI/CD security, and immutable infrastructure principles.

Site Operations Consultant Pythian

Designed and administered large-scale, highly available clusters for enterprise clients with a focus on resilience and disaster recovery.

Achieved high levels of IaaS automation through CI/CD and delivered containerized microservices that improved operational efficiency and reduced client costs.

Technical Support Specialist IBM

Managed Red Hat and Veritas clustering and disaster recovery sites to ensure high availability and data integrity for mission-critical systems.

Automated routine maintenance, reducing ticket volume while maintaining compliance with internal standards.

Application Specialist CSS Corporation

Led bare-metal to managed data-center migrations using VMware virtualization and orchestrated deployment pipelines.

Supported infrastructure modernization efforts across enterprise environments.

Network Administrator / Engineer Precision3D, Anar SoftCom, Essar Steel & Syscon

Designed secure production environments, deployed open-source IDS solutions, and implemented network segmentation across enterprise sites.

Built a broad foundation in networking, systems administration, and infrastructure operations that later supported cloud and security architecture work.

Education

Learning history

Veer Narmad South Gujarat University

Bachelor of Science, Chemistry

Completed a Bachelor of Science in Chemistry.

This professional hasn’t added portfolio projects yet.

This professional hasn’t listed any services yet.

Jobs Talent Salaries
Menu