Suggestions
Shreyas Damle
Security Engineer at Amazon
Shreyas Damle is a highly experienced Application and Cloud Security Engineer with a strong background in the computer software industry.
He is proficient in Typescript, Rust, and Python, specializing in security tooling and secure defaults.
Shreyas holds a Master's Degree in Cybersecurity from New York University, where he also served as a Graduate Teaching Assistant in Applied Cryptography.
With a Bachelor of Technology in Electronics and Telecommunications Engineering from the University of Pune, Shreyas has a solid academic foundation to complement his practical skills.
His professional journey includes roles such as Security Engineer at Amazon, Senior Security Engineer at MobileIron, and various other positions in renowned organizations like Shape Security, CipherTechs, and AllianceBernstein.
Shreyas Damle has a diverse array of internship experiences, from Information Security to Infrastructure Engineering, demonstrating his versatility and eagerness to learn.
Throughout his career, Shreyas has showcased a commitment to enhancing cybersecurity practices and staying abreast of the latest technological developments.
His combination of academic achievements and hands-on experience positions him as a proficient and knowledgeable professional in the cybersecurity and software engineering domains.
Highlights
One of the things that I love the most about working at Rippling is the scale of the problems that I have to deal with. One recent challenge forced me out of my comfort zone and to think about the perfect end-to-end strategy for human access in AWS. I had to figure out how I can minimize human access while scaling a solution in a hyper growth environment 🚀🚀🚀
In the Cloud Security realm, access management stands as the main defense against Threat Actors. Attackers often target organizations that have improper access control configurations. This holds especially true for complex environments, such as our multifaceted systems at Rippling, where we manage a range of products like IT Management, Benefits, Travel, Payroll, and HR. It's important to ensure that access is tightly controlled and we minimize access to sensitive data to those that need access. If you don't require access to Payroll or HR systems, you simply won't get it. Given the complexity of our operations and the sensitive data we handle, directing our security efforts here isn't just a choice; it's an absolute necessity.
Again, the scale of Rippling is challenging when implementing role-based access controls. I had to find way to manage access controls for 34 AWS accounts, servicing 100+ teams, and facilitating secure access for over 1,000 users daily such that individuals are granted access only to the resources essential for their roles, minimizing potential internal risks and enhancing our security posture.🤯🤯🤯
So how did I tackle this challenge? 1️⃣ Just in Time Access - grant permissions precisely when needed, striking the balance between security and operational flexibility 2️⃣ IAM Identity Center federation with Rippling - go ensure reliable identity verification 3️⃣ Data-driven phased team onboarding - to streamline the onboarding of teams without impacting business processes and team productivity 4️⃣ Monitoring & logging systems - augmented with proactive controls for a fortified security posture
If you are interested in reading more, you can dive into our complete strategy and explore the decisions that I made to shape our approach to AWS security and productivity in our latest blog post.
👉 https://lnkd.in/eVM9y7xt
#AWS #CloudSecurity #DevSecOps
