First-line infrastructure security engineering focused on IAM and cloud controls. Built JIT access and 90-day maximum entitlements across AWS, Stripe, and high-risk platforms, removing four major UARs without slowing operations. Authors Python, Terraform, and YAML mapped to Workday data; operates ConductorOne workflows backed by in-house Terraform; wrote a ConductorOne-to-Okta reconciliation that reduced a week-long task to about an hour; uses OPA for policy checks; deploys Wiz-driven Lambda remediation and Terraformed Datadog monitoring; patched an AWS Terraform provider to resolve drift; and defends the resulting controls to auditors.

Built reusable, audit-defensible control architecture across applications and infrastructure during Instacart’s transition from private to public. Drove IT SOX, SOC 2, ISO 27001, HIPAA, and security compliance mapping across roughly 30 systems; automated evidence for around 200,000 GitHub pull requests; and consolidated secrets reviews. Helped grow compliance engineering from two to seven and established entity models, requirements, and runbooks.

Led SOC 1, SOC 2, PCI, and ISO 27001/27017/27018 certifications across five audit firms, published assurance reports, mentored GRC staff, and standardized controls to reduce engineering workload.

Oversaw IT audits for more than 80 systems in a cloud-first environment, remediated a significant change-management deficiency, documented compensating controls, and reported outcomes to executive leadership.

Built self-service evidence tools that saved about 170 engineering hours annually, completed audits for seven SaaS subsidiaries, and reviewed approximately 130 control and interface workpapers.

Improved testing methods with audit and IT teams, reduced audit budgets by 20%, mentored junior auditors, and strengthened testing across interfaces, key reports, general controls, and automated controls.