Designs and automates security controls across AWS infrastructure, containers, CI/CD systems, and platform services. Builds hardened images, integrates security and compliance scanning, implements secrets and access controls, automates audit evidence and configuration validation, and drives remediation of infrastructure and delivery-system weaknesses. Partners with cybersecurity, infrastructure, build engineering, and product teams to create reusable security patterns and promote secure engineering practices across multiple teams.