Cloud Security Engineer II
Sony Interactive Entertainment, LLC
- Collaborated with InfoSec teams across North America, Europe, Oceania, and Asia, including regular coordination with partners on the JP Security Engineering team, to align security standards and practices globally.
- Drove cloud security initiatives across cross-cultural, distributed teams, ensuring consistent policy application across regions while accommodating local compliance and operational requirements.
- Enhanced cloud security posture across 1,000+ AWS, Azure, and GCP accounts; led the transition from PrismaCloud to Wiz as the primary CNAPP tool and managed Wiz configuration, custom RBAC roles, projects, and policy frameworks entirely in Terraform.
- Partnered with multiple first-party studios and internal organizations to advance shift-left security adoption by deploying Wiz brokers to connect Wiz Code with studio development environments, enabling earlier identification and remediation of vulnerabilities in the SDLC.
- Implemented and tuned Wiz Code policies aligned to Sony Security Standards.
- Automated IAM role and other infrastructure deployments, as well as cloud account tagging across the entire AWS footprint, ensuring consistent metadata for governance, cost allocation, and policy enforcement.
- Helped build a source-of-truth repository for AWS account CloudFormation template configurations and account-level tags, enabling centralized infrastructure-as-code management and auditability.
- Built automation to deploy security-managed IAM roles across SIE’s entire AWS environment and automated the AWS cloud account lifecycle end to end.
- Partnered with Global Security Architecture and Governance, Risk, and Compliance teams to develop a fully automated account provisioning process using CloudFormation, later migrating to Terraform.
- Created and maintained Service Control Policies for multiple OUs across PSN and enterprise accounts.
- Contributed significantly to AWS Identity Center adoption for cloud account access across multiple first-party studios.
- Deployed and managed Wiz Sensor across SIE’s entire Kubernetes infrastructure, including EKS, AKS, and GKE.
- Collaborated with SOC and Incident Response teams to fine-tune Wiz Defend threat detections, improving MTTD/MTTR.
- Supported PCI DSS auditing and compliance.