Expertise
Security & Compliance
Cloud infrastructure for regulated industries where security controls are built into the platform, enforced as code and ready for the auditor before the audit begins.
The problem
Banks, payment companies and public institutions cannot treat security as a project that ends. Regulators expect evidence, customers expect their data to be safe, and a single misconfigured resource can undo years of trust. Yet many organisations still rely on manual checklists, one-off hardening and spreadsheets of exceptions. Controls drift as teams move fast, and the gap is discovered during an audit or, worse, during an incident. Leaders need security that keeps pace with delivery instead of slowing it down.
How I approach it
Treat controls as code. Network boundaries, encryption, identity and logging are defined in Terraform, so the secure configuration is the default and every change is reviewed.
Segment by design. Sensitive workloads such as cardholder data environments sit in clearly separated networks and accounts, with tenant isolation and least-privilege access enforced by the platform.
Check continuously, not annually. Pipelines scan infrastructure and dependencies before release, and drift from the approved baseline is detected and corrected quickly.
Make evidence a by-product. Version history, pipeline logs and policy checks provide the audit trail automatically, reducing the scramble before every assessment.
Plan for the bad day. Backup, recovery and incident runbooks are tested, so resilience is demonstrated rather than assumed.
Give leaders a clear risk picture. Findings are ranked by business impact and likelihood, with an owner and a date, so the board sees which exposures are closing and which still need investment.
Equip the teams who ship. Secure defaults, short reviews and shared runbooks help engineers make the safe choice by habit, so security does not depend on a single gatekeeper.
Outcomes
- Zero compliance violations across InfraLoka’s regulated engagements on PCI DSS infrastructure.
- Security grounded in certified practice, including CompTIA Security+ and Cisco DevNet Associate.
- In a separate fintech engagement, complex Amazon EKS networking challenges resolved so cluster changes became predictable again.
Technologies
- PCI DSS
- Terraform
- Kubernetes
- Amazon EKS
- AWS
- Microsoft Azure
- CI/CD security checks
Let’s talk about your next transformation
Tell me what you are trying to change. I reply personally to partnership and project enquiries.