Maya Okonkwo

• Architected cloud security posture across AWS and GCP environments serving 200+ enterprise customers.
• Designed and implemented a centralized secrets management system using HashiCorp Vault, reducing secret sprawl by 80%.
• Led incident response for 6 major security events, coordinating across engineering, legal, and executive teams.
• Built automated compliance monitoring pipelines (SOC 2, ISO 27001) that cut audit preparation time from weeks to days.

• Managed IAM policies, network segmentation, and encryption standards across a HIPAA-compliant infrastructure.
• Developed internal security tooling in Python to automate vulnerability scanning across 1,200+ cloud resources.
• Conducted penetration testing on web applications and internal services, identifying and remediating 40+ critical findings.
• Delivered security awareness training to 300+ engineers, reducing phishing susceptibility by 62%.

• Monitored and triaged SIEM alerts, investigating an average of 80 security events per week.
• Assisted in PCI DSS Level 1 compliance audits, documenting control implementations and evidence collection.
• Built dashboards and alerting rules in Splunk that improved mean time to detection by 45%.

Open-source tool written in Go that enumerates cloud assets across AWS, GCP, and Azure, scores them against CIS benchmarks, and generates prioritized remediation reports. 800+ GitHub stars.

Internal service that parses cloud IAM policies, visualizes permission graphs, and flags over-privileged roles. Integrated into the CI/CD pipeline to block deployments that introduce excessive permissions.