Lunga T.

• Experienced in administering Mimecast Email Security Cloud Gateway policies including Targeted Threat Protection, DNS Authentication (SPF/DKIM/DMARC), DLP - Content Examination, and Internal Email Protect.

Results-driven AWS Cloud and Email Security Support Engineer with hands-on experience delivering advanced technical support across AWS Cloud Infrastructure and enterprise email security platforms.

Proficient in troubleshooting and resolving complex issues across AWS services including CloudFront, EC2, S3,VPC, IAM, Elastic Load Balancing, Web Application Firewall, AWS Key Management System, and AWS Simple Email Service, utilising Amazon CloudWatch, Amazon CloudTrail, VPC Flow Logs, and the AWS CLI for root cause analysis.

• Skilled in incident triage and escalation management, log analysis, network troubleshooting (DNS, TCP/IP, TLS/SSL), and security policy configuration, with the ability to translate complex technical issues into clear solutions for both technical and non-technical stakeholders.
• Adept at working within SLA-driven environments with strong documentation and cross-team collaboration skills.
• Results-driven AWS Cloud and Email Security Support Engineer with hands-on experience delivering advanced technical support across AWS Cloud Infrastructure and enterprise email security platforms.

Email Security Cloud Gateway Specialist - Technical Support Engineer - Associate at Mimecast (2023-12 – Present)

• Provide advanced technical support for Mimecast Email Security Cloud Gateway, diagnosing and resolving complex security configurations across multiple policy layers.
• Provide advanced technical support for Mimecast Email Security Cloud Gateway, diagnosing and resolving complex security configurations across multiple policy layers including Targeted Threat Protection (TTP) — URL Protection (rewriting rules, click-time scanning behavior, bypass configurations, and allow/block list tuning)
• TTP Attachment Protection (sandbox detonation policies, file type handling, and pre-emptive sandboxing configurations)
• TTP Impersonation Protection (header anomaly detection, domain similarity rules, and internal/external impersonation policy tuning)
• Internal Email Protect (IEP) (lateral phishing detection, internal policy enforcement, and journaling configurations)
• Content Examination Policies (keyword/dictionary rule building, regex pattern matching, and data leakage prevention triggers)
• Perform deep email message log analysis on MTA servers using CrowdStrike Falcon LogScale
• Working knowledge of ticketing systems such as ZenDesk and Jira

Cloud Support Engineer Associate at Amazon Web Services (2022-02 – 2023-07)

• Provided technical support for AWS cloud infrastructure services and email security solutions.
• CloudFront (cache invalidation, origin failover, and distribution misconfigurations)
• Amazon SES (SMTP authentication, bounce/complaint handling, and DKIM/SPF record validation)
• Amazon EC2 (instance reachability, security group rules, and networking diagnostics)
• Elastic Load Balancing (listener rules, target group health checks, and SSL/TLS termination)
• AWS WAF (rule group tuning, rate-based rule adjustments, and false positive mitigation)

Software Development Intern at RLabs, Younglings Africa, Project CodeX (2019 – 2021)

Software development internships across multiple organizations.

• From RLabs to Younglings Africa and Project CodeX respectively

National Diploma in Applications Development – Cape Peninsula University of Technology