Tezom Boris

Seasoned Cloud Security Engineer / Cloud Architect with over 7 years of experience designing, securing, and optimizing cloud environments across AWS, Azure, and Google Cloud Platform. Expertise in building secure, scalable, and compliant architectures aligned with GDPR, HIPAA, PCI DSS, and industry security frameworks. Strong background in IAM, cloud automation, Infrastructure as Code (Terraform, CloudFormation), security operations (SIEM, threat detection, incident response), and cloud cost optimization.

Proven ability to reduce risk, improve cloud posture, and drive operational efficiency using modern cloud security and observability platforms including Datadog, Wiz, Cloud Custodian, Turbonomic, and Fastly

Cloud Engineer / Security Cloud Architect - Sysco - Houston, TX

(2024-11)

• Designed and deployed secure, scalable AWS infrastructure supporting enterprise applications and business-critical workloads with high availability and reliability.
• Architected multi-account AWS security frameworks implementing IAM, MFA, and STS, enabling zero-trust access control and secure federated authentication across environments.
• Implemented Infrastructure as Code using Terraform and CloudFormation, reducing deployment time, improving consistency, and minimizing configuration drift and human error.
• Built end-to-end observability solutions using Datadog integrated with AWS services (EC2, RDS, Lambda, ALB, S3), centralizing logs, metrics, and APM traces for improved system visibility.
• Designed Datadog dashboards and automated alerting pipelines, improving anomaly detection and reducing mean time to detect and respond to incidents.
• Integrated Fastly CDN to enhance application performance, reduce latency, and strengthen edge security through WAF rules and bot protection mechanisms.
• Leveraged IBM Turbonomic to optimize workload performance and cost efficiency through automated rightsizing of compute, storage, and container resources.
• Used CloudPark for cloud cost optimization, identifying idle and underutilized resources and reducing overall AWS operational expenses.
• Implemented policy-as-code governance using Cloud Custodian, automating compliance enforcement and remediation of non-compliant cloud resources.
• Integrated Wiz CSPM to continuously monitor cloud environments for misconfigurations, vulnerabilities, and security risks across multi-account AWS setups.
• Developed Security Risk Management Dashboards (SRMD) in Wiz, providing real-time executive visibility into cloud security posture and risk prioritization.
• Enforced IAM security best practices including least privilege access, role-based access control (RBAC), MFA, and automated credential rotation policies.
• Performed vulnerability assessments using AWS Config, AWS Inspector, and third-party security tools to identify and remediate security gaps at scale.
• Secured AWS workloads (S3, EC2, and applications) using encryption with AWS KMS, hardened security groups, and strict access control policies.
• Collaborated with DevOps teams to embed security into CI/CD pipelines, improving secure deployment practices and reducing security risks in releases.
• Implemented end-to-end encryption strategies using AWS KMS, SSE-S3, and TLS/SSL, ensuring strong data protection and compliance for sensitive workloads.

Cloud Security Engineer - Western National Insurance Group - Edina, MN

(2019-03 - 2024-03)

• Architected and enforced enterprise IAM solutions using AWS IAM, STS, and MFA, ensuring least-privilege access across critical cloud workloads and reducing over-permissioned access risks.
• Automated security governance and compliance enforcement using Cloud Custodian, enabling continuous policy remediation and improving compliance adherence across AWS environments.
• Integrated Wiz CSPM to continuously monitor multi-account AWS environments, improving real-time risk detection and reducing security blind spots.
• Developed security dashboards and SRMD reporting pipelines to track vulnerabilities, misconfigurations, and compliance gaps, improving visibility into security posture.
• Performed large-scale security audits across cloud environments, identifying and remediating exposed resources, unencrypted storage, and misconfigured IAM roles.
• Managed continuous compliance monitoring using AWS Config and CloudTrail, processing 500+ security and audit checks weekly to ensure regulatory alignment.
• Designed layered network security architecture using Security Groups, NACLs, AWS WAF, Shield, and Firewall Manager, strengthening perimeter and application-level protection.
• Implemented centralized logging and real-time monitoring using CloudWatch with automated alerting workflows to improve incident detection and response time.
• Secured sensitive enterprise data using AWS KMS, Secrets Manager, and Parameter Store, ensuring encryption at rest and in transit across applications.
• Mentored junior engineers, developed standard operating procedures (SOPs), and enforced CIS security benchmarks across 1,000+ cloud assets to improve security maturity.
• Migrated legacy disaster recovery systems to AWS Backup and snapshot-based strategies, achieving improved resilience and compliance with HIPAA and GLBA standards.
• Defined and enforced IAM role-based policies and SCP guardrails to standardize security controls and prevent unauthorized access at scale.
• Optimized cloud cost management through tagging strategies, cost allocation models, and reserved instance planning, reducing AWS spend by 30% within six months.
• Partnered with compliance and audit teams to align cloud security controls with ISO 27001 requirements and ensure audit readiness across environments.

Higher National Diploma - Business Management - HIMS (2015-05)

Bachelor's degree - Business Administration