Terraform · Python · DevSecOps · AWS Cloud Architecture

Cloud & DevSecOps Engineer | Cybersecurity-Focused Infrastructure Automation Expert

I am a Cloud Security Engineer with 2+ years of professional experience designing, securing, and automating AWS cloud environments. Skilled in troubleshooting complex cloud-native infrastructures, codifying infrastructure with Terraform, and securing distributed systems through IAM least-privilege governance, Policy-as-Code, and automated rollback pipelines.

Certified as an AWS Solutions Architect – Associate, AWS Security Specialist, and CompTIA Security+, I specialize in building scalable, secure systems with a strong emphasis on cloud security, DevSecOps, and CI/CD pipeline automation.

Currently seeking challenging roles in Cloud Engineering, DevSecOps, or Cloud Security Engineering to drive impactful cloud and security solutions.

• Cloud & DevOps: AWS (ECS Fargate, ECR, ALB, Lambda, API Gateway, DynamoDB, S3, VPC, CloudFront, Route53), Terraform, Kubernetes, Docker, GitHub Actions, CI/CD, Linux/Unix, Bash, Ansible.
• Security & Governance: IAM Least Privilege, CIS AWS Foundations Benchmark, OPA Rego Policies, Trivy, Hadolint, Gitleaks, Bandit SAST, Splunk, Snort, Wireshark.
• Programming & Scripting: Python, Bash, PowerShell, SQL.
• Networking: VPC Peering, Transit Gateway, Route Tables, NAT Gateways, VPC Flow Logs, Wireshark, Nmap, TCP/IP.

Engineered an enterprise security-focused CI/CD pipeline integrating shift-left source validation (SAST, secret scanning, dependency audit), CIS AWS-compliant Terraform IaC, environment approval gates, and an automated canary rollback controller restoring service stability in < 2.0s.

Automated AWS IAM governance platform performing continuous drift detection, unused credential pruning, least-privilege analysis, and self-healing automated remediation against CIS AWS benchmarks.

Architected a cloud-native healthcare ecosystem with Docker, secure REST APIs, role-based access control (RBAC), AI-powered wellness guidance, and healthcare data protection aligned with HIPAA and DPDP principles. Live platform at samya.online.

High-throughput serverless malware scanning pipeline using AWS Lambda, ClamAV virus definitions, Amazon S3 event notifications, and DynamoDB audit logging with automated SNS alerts.

Automated CIS Linux server hardening and bastionless infrastructure provisioning using Ansible and Terraform over AWS Systems Manager (SSM) VPC Endpoints.

• 📍 Location: New York, USA
• 💼 Portfolio: koshag0hil.github.io/Portfolio
• 📧 Email: gohilkosha19@gmail.com
• 🔗 LinkedIn: linkedin.com/in/koshagohil
• 🐙 GitHub: @KoshaG0hil

Passionate about driving cloud security and infrastructure excellence in high-impact environments.