◆ Portfolio / 2025 —Hyderabad → Dubai

CloudSecurityEngineer.

— 7.5 years / 3 clouds / 0 compromised keys

I secure and operate multi-cloud environments across AWS, Azure and GCP — with a specialism in enterprise IAM & identity governance.

Open to relocation — UAE
Download résuméContact me
Madan Aritakula, Cloud Security Engineer
AWS SA — Professional
AWS✦
Azure✦
GCP✦
Terraform✦
Kubernetes✦
Entra ID✦
IAM✦
Rapid7✦
Vanta✦
GitHub Enterprise✦
Lambda✦
Control Tower✦
SSO / SAML✦
SCIM✦
GuardDuty✦
SIEM✦
Ansible✦
CloudFormation✦
AWS✦
Azure✦
GCP✦
Terraform✦
Kubernetes✦
Entra ID✦
IAM✦
Rapid7✦
Vanta✦
GitHub Enterprise✦
Lambda✦
Control Tower✦
SSO / SAML✦
SCIM✦
GuardDuty✦
SIEM✦
Ansible✦
CloudFormation✦
AWS✦
Azure✦
GCP✦
Terraform✦
Kubernetes✦
Entra ID✦
IAM✦
Rapid7✦
Vanta✦
GitHub Enterprise✦
Lambda✦
Control Tower✦
SSO / SAML✦
SCIM✦
GuardDuty✦
SIEM✦
Ansible✦
CloudFormation✦
AWS✦
Azure✦
GCP✦
Terraform✦
Kubernetes✦
Entra ID✦
IAM✦
Rapid7✦
Vanta✦
GitHub Enterprise✦
Lambda✦
Control Tower✦
SSO / SAML✦
SCIM✦
GuardDuty✦
SIEM✦
Ansible✦
CloudFormation✦
01.
About

Who is
Madan.

I secure and operate enterprise cloud platforms end-to-end — across AWS, Microsoft Entra ID and Google Cloud — with a specialism in identity governance and posture management.

The differentiator is range: I move fluently between IAM design (SSO / SAML / SCIM, Conditional Access) and the infrastructure layer that IAM ultimately protects — landing zones, Terraform, incident automation, certificate lifecycle.

I replace manual review with scripted controls. Real examples: an access-governance audit across 30+ GitHub orgs, a multi-region SNS→Lambda→Jira incident pipeline, org-level GCP deny policies.

AWS Solutions Architect — Professional. Currently pursuing CKA, AWS DevOps Professional and Terraform Associate. Available for on-site interviews in the UAE.

7.5+
Years
3
Clouds
30+
GitHub orgs audited
3
AWS regions automated
02.
Stack

The
Toolkit.

01 / 05

Cloud Platforms

AWSIAMEC2 / VPCLambdaECS / FargateACMOrganizationsControl TowerMicrosoft AzureEntra IDGoogle CloudGKEOrg PoliciesAudit Logs
02 / 05

IAM & Access

SSO / SAMLSCIM provisioningConditional AccessMFA enforcementLeast-privilege reviewsEnterprise IAM governanceCross-account roles
03 / 05

Security & Compliance

Rapid7 InsightCloudSecVantaDevo SIEMAWS Security HubGuardDutyAWS ConfigSSL / TLS lifecyclePKCS#7 / ACM DNSSOC 2 support
04 / 05

Automation & IaC

TerraformOpenTofuSpaceliftAnsibleCloudFormationGitHub ActionsJenkinsPowerShellBash
05 / 05

Containers & DevOps

DockerKubernetesGKEECS / FargateCI/CD pipelinesDrift detectionObserve OPAL
03.
Credentials

Certified
& proven.

AWS-SAP
Professional

AWS Certified Solutions Architect

Amazon Web Services
AWS-SAA
Associate

AWS Certified Solutions Architect

Amazon Web Services
In progress
CKACertified Kubernetes Administrator
DOP-PAWS DevOps Engineer — Professional
TF-AHashiCorp Terraform Associate
04.
Timeline

Where I’ve
shipped.

05 /May 2025 — Present

Jaggaer

Cloud Security Engineer — Cloud Security Architecture & Engineering (CSAE)
Hyderabad, India
  • Led an enterprise-wide GitHub access-governance audit across 30+ organizations using PowerShell and the GitHub CLI, removing dormant accounts and tightening least-privilege posture.
  • Owned enterprise SSO/SAML lifecycle with Microsoft Entra ID for multiple SaaS platforms; repaired expired SCIM provisioning for Atlassian Cloud and resolved Conditional Access conflicts.
  • Engineered an end-to-end production incident pipeline (SNS → Lambda → Jira webhooks) linking Aurora CloudWatch alarms to Jira across three AWS regions, cutting manual triage.
  • Designed and enforced GCP deny-org policies restricting service-quota increases, paired with a custom service-account audit script for ongoing governance.
  • Managed SSL/TLS certificate lifecycle end-to-end — CSR generation, ACM DNS validation, PKCS#7/P7B conversions, and customer-facing renewal coordination.
04 /Jul 2024 — May 2025

Insight Direct India

Cloud Engineer III
  • Implemented AWS Landing Zone and Control Tower for enterprise customers, including Service Control Policies across the Control Tower estate.
  • Delivered security baselines using AWS Security Hub, GuardDuty and Config across customer environments.
  • Automated provisioning and drift detection with Terraform, CloudFormation and Ansible — including reverse-engineering existing resources into IaC.
03 /Jan 2022 — Jul 2024

Minfy Technologies

Cloud Ops Engineer
  • Provided 24/7 L1/L2/L3 oversight for cloud incident response, owning support end-to-end from client through every escalation level.
  • Managed, configured and resolved AWS security alerts across production and non-production environments.
  • Drove modern DevOps practices through automation and infrastructure-as-code.
  • Built out Azure infrastructure for internal environments as part of operational acceptance.
Service operations
Core Service Management — change, incident, problem, monitoring & maintenance for 3 core applications/Platform, application and network monitoring/OS patching, backup monitoring/restoration and regular DR / application-recovery testing/Process documentation, monitoring and high-availability solutions
Recognition & Awards
Recognized by Minfy Co-Founder for outstanding contribution to customer success and exemplifying core cultural values — Jan 2024
Awarded for exceptional performance, enduring commitment, and consistently going the extra mile — by Minfy Co-Founder & Sr. Director
02 /Aug 2021 — Dec 2021

TechGrit

Software Engineer
  • Provided 24/7 production support across AWS and Linux environments.
  • Managed AWS EC2 — instances, EBS volumes, AMI backups, volume snapshots and resizing.
  • Configured Security Groups and ELBs for high availability and controlled inbound/outbound traffic.
  • Managed IAM users/policies and S3 bucket access controls.
  • Administered Linux — LVM partitioning, disk management and scheduled automation.
01 /Jul 2019 — Aug 2021

NTT Cloud

IOC Analyst
  • Provided 24/7 production support for Linux and virtualization environments.
  • Implemented online backup and restore using snapshot technology; scheduled daily / weekly / monthly backups.
  • Administered and monitored system performance, disk space and memory.
  • Managed users, groups and access levels.
  • Troubleshot issues across support teams for rapid resolution.
05.
Selected work

Signal
over noise.

GitHub Access-Governance Audit
P.01
30+ organizations · PowerShell + GitHub CLI

GitHub Access-Governance Audit

Enterprise-wide audit of user access across 30+ GitHub organizations. Automated dormant-account detection and remediation; established a repeatable access-review process for ongoing governance.

IAMPowerShellGitHub
Multi-Region Incident Automation
P.02
AWS · SNS → Lambda → Jira

Multi-Region Incident Automation

Designed and deployed an SNS → Lambda → Jira webhook pipeline across three AWS regions to convert Aurora production alarms into tracked incidents automatically — replacing manual triage.

AWSLambdaObservability
GCP Org-Level Governance
P.03
Google Cloud · Deny-Org policies

GCP Org-Level Governance

Rolled out organization-level deny policies restricting service-quota increases, backed by a custom audit script that continuously reviews service-account posture across the estate.

GCPGovernanceAudit
06.
Let’s talk

Available
for Dubai.

01 /Name
02 /Email
03 /Company (optional)
04 /Message
Reply within 24h · IST
Madan.Aritakula
Cloud Security Engineer · Multi-Cloud
© 2026 — Designed & engineered by Madan.
Built with React · Tailwind · Framer Motion · Lenis