![Rohan Bhagat](https://jobicy.com/react/themes/app/images/avatar.jpg) Rohan Bhagat # Cloud Security Engineer Open to offers · Member since 27 Jul 2026 [Message](https://jobicy.com/dashboard-page.md) ShareLocationHamburg, GermanyDesired salaryUnspecifiedWork preferenceHybrid / Full TimeExperience levelSenior * [Overview](#overview) * [Portfolio 0](#portfolio) * [Services 0](#services) ## About Professional summaryI am a Cloud Security Engineer with 18+ years of experience across platform engineering, infrastructure, DevOps, and cloud security. My work focuses on designing secure, compliant, and scalable architectures across AWS and Azure, with a strong emphasis on Zero Trust, CSPM, and security-by-design principles. I have deep hands-on experience with Kubernetes, Terraform, Ansible, and multi-cloud automation, and I regularly translate regulatory and governance requirements into practical controls and reference architectures. My background allows me to bridge engineering and security concerns while keeping delivery teams moving. In my recent roles, I have led security architecture reviews, built multi-account governance models, implemented IAM guardrails, and improved incident response and detection capabilities across cloud environments. I also work closely with product and security stakeholders to ensure infrastructure decisions are aligned with compliance, reliability, and operational needs. Earlier in my career, I built a broad foundation in systems engineering, DevOps, operations, clustering, virtualization, and Linux administration. That experience continues to shape how I approach cloud security: with a strong understanding of how platforms behave, where risks emerge, and how to harden systems without sacrificing usability. I am comfortable working across infrastructure, security tooling, CI/CD, observability, identity, and compliance frameworks. I also have practical experience with AI/GenAI tooling and infrastructure, including secure self-hosted and agentic workflows. I am based in Hamburg, Germany, and hold permanent residency. I am open to opportunities where I can contribute to cloud security architecture, governance, and secure platform engineering in complex environments. ## Skills 43 capabilities[Active Directory](https://jobicy.com/talent/active-directory.md)[Ansible](https://jobicy.com/talent/ansible.md)[ArgoCD](https://jobicy.com/talent/argocd.md)[AWS](https://jobicy.com/talent/aws.md)[Azure](https://jobicy.com/talent/azure.md)[Azure DevOps](https://jobicy.com/talent/azure-devops.md)[BASH](https://jobicy.com/talent/bash.md)[Checkov](https://jobicy.com/talent/checkov.md)[Chef](https://jobicy.com/talent/chef.md)[Cloud Security](https://jobicy.com/talent/cloud-security.md)[Compliance](https://jobicy.com/talent/compliance.md)[DAST](https://jobicy.com/talent/dast.md)[Datadog](https://jobicy.com/talent/datadog.md)[GDPR](https://jobicy.com/talent/gdpr.md)[Gitlab CI](https://jobicy.com/talent/gitlab-ci.md)[GitOps](https://jobicy.com/talent/gitops.md)[Grafana](https://jobicy.com/talent/grafana.md)[GuardDuty](https://jobicy.com/talent/guardduty.md)[IAM](https://jobicy.com/talent/iam.md)[Incident Response](https://jobicy.com/talent/incident-response.md)[ITIL](https://jobicy.com/talent/itil.md)[Jenkins](https://jobicy.com/talent/jenkins.md)[Kerberos](https://jobicy.com/talent/kerberos.md)[Keycloak](https://jobicy.com/talent/keycloak.md)[Kubernetes](https://jobicy.com/talent/kubernetes.md)[Linux](https://jobicy.com/talent/linux.md)[Loki](https://jobicy.com/talent/loki.md)[MITRE ATTCK](https://jobicy.com/talent/mitre-attck.md)[OpenSSL](https://jobicy.com/talent/openssl.md)[OWASP Top 10](https://jobicy.com/talent/owasp-top-10.md)[PKI](https://jobicy.com/talent/pki.md)[Prometheus](https://jobicy.com/talent/prometheus.md)[Prompt Engineering](https://jobicy.com/talent/prompt-engineering.md)[Python](https://jobicy.com/talent/python.md)[RBAC](https://jobicy.com/talent/rbac.md)[SAST](https://jobicy.com/talent/sast.md)[Security Architecture](https://jobicy.com/talent/security-architecture.md)[Security Hub](https://jobicy.com/talent/security-hub.md)[Splunk](https://jobicy.com/talent/splunk.md)[Terraform](https://jobicy.com/talent/terraform.md)[Threat Modeling](https://jobicy.com/talent/threat-modeling.md)[Vulnerability Management](https://jobicy.com/talent/vulnerability-management.md)[YAML](https://jobicy.com/talent/yaml.md) ## Tech stack & tools Working toolkit ### Analytics [![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/grafana/grafana-original.svg) Grafana](https://jobicy.com/talent?tool=grafana.md) ### Application Hosting [![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/apache/apache-original.svg) Apache](https://jobicy.com/talent?tool=apache.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/azure/azure-original.svg) Azure](https://jobicy.com/talent?tool=azure.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/jenkins/jenkins-original.svg) Jenkins](https://jobicy.com/talent?tool=jenkins.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/nginx/nginx-original.svg) Nginx](https://jobicy.com/talent?tool=nginx.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/openstack/openstack-original.svg) OpenStack](https://jobicy.com/talent?tool=openstack.md) ### Development [![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/ansible/ansible-original.svg) Ansible](https://jobicy.com/talent?tool=ansible.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/argocd/argocd-original.svg) Argocd](https://jobicy.com/talent?tool=argocd.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/docker/docker-original.svg) Docker](https://jobicy.com/talent?tool=docker.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/dovecot/dovecot-original.svg) Dovecot](https://jobicy.com/talent?tool=dovecot.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/helm/helm-original.svg) Helm](https://jobicy.com/talent?tool=helm.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/kubernetes/kubernetes-original.svg) Kubernetes](https://jobicy.com/talent?tool=kubernetes.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/terraform/terraform-original.svg) Terraform](https://jobicy.com/talent?tool=terraform.md) ### Monitoring [![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/datadog/datadog-original.svg) DataDog](https://jobicy.com/talent?tool=datadog.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/prometheus/prometheus-original.svg) Prometheus](https://jobicy.com/talent?tool=prometheus.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/splunk/splunk-original.svg) Splunk](https://jobicy.com/talent?tool=splunk.md) ## Experience Career history ### Cloud Security Engineer · RWE Supply & Trading GmbH Jan 2024 – PresentLed security architecture reviews for new cloud deployments, translating compliance and reliability requirements into concrete infrastructure decisions aligned with NIST CSF 2.0, GDPR/DSGVO, and internal standards. Designed multi-account governance on AWS Organizations, including Service Control Policies and IAM guardrails to enforce least privilege and Zero Trust principles across the estate. Built incident response architecture for AWS cloud-native environments and established centralized CSPM using AWS Security Hub and Orca Security. Also embedded security-by-design controls into Terraform modules and CI/CD pipelines, reducing vulnerability detection time and lowering false positives. ### Senior Systems Engineer · Smaato Jun 2021 – Dec 2023Designed hardened VPC architectures and network segmentation for high-traffic ad-tech workloads on AWS. Architected Kubernetes security controls including namespace-level RBAC, Network Policies, and automated image scanning. Automated EKS version upgrades through CI/CD, significantly reducing upgrade windows and manual error. Defined CIS-based hardening baselines for Linux fleets and served as primary incident responder for production and security events, improving MTTR through runbooks and root-cause analysis. ### Senior DevOps Engineer · Vattenfall Energy Trading GmbH Apr 2019 – May 2021Established architectural guardrails for engineering teams to support scalable, cost-efficient, and compliant AWS-based platforms. Automated cloud and Kubernetes lifecycle management with Terraform and Ansible, reducing configuration drift and errors. Partnered with product owners to align infrastructure decisions with long-term cloud and reliability strategy. ### Senior DevOps Engineer · Bigpoint GmbH Apr 2017 – Mar 2019Migrated legacy gaming platforms to a Kubernetes-based microservices architecture with automated monitoring and logging. Mentored engineers on container security, CI/CD security, and immutable infrastructure principles. ### Site Operations Consultant · Pythian Nov 2013 – Dec 2016Designed and administered large-scale, highly available clusters for enterprise clients with a focus on resilience and disaster recovery. Achieved high levels of IaaS automation through CI/CD and delivered containerized microservices that improved operational efficiency and reduced client costs. ### Technical Support Specialist · IBM May 2011 – Oct 2013Managed Red Hat and Veritas clustering and disaster recovery sites to ensure high availability and data integrity for mission-critical systems. Automated routine maintenance, reducing ticket volume while maintaining compliance with internal standards. ### Application Specialist · CSS Corporation Dec 2009 – May 2011Led bare-metal to managed data-center migrations using VMware virtualization and orchestrated deployment pipelines. Supported infrastructure modernization efforts across enterprise environments. ### Network Administrator / Engineer · Precision3D, Anar SoftCom, Essar Steel & Syscon Jan 2004 – Dec 2009Designed secure production environments, deployed open-source IDS solutions, and implemented network segmentation across enterprise sites. Built a broad foundation in networking, systems administration, and infrastructure operations that later supported cloud and security architecture work. ## Education Learning history ### Veer Narmad South Gujarat University Mar 2004Bachelor of Science, Chemistry Completed a Bachelor of Science in Chemistry. This professional hasn’t added portfolio projects yet. This professional hasn’t listed any services yet.