Security Technical Program Manager
Security TPM
Amazon Web Services
10+
years
I drive AppSec migration, CI/CD security and cross-functional delivery across enterprise and cloud-native environments — turning security strategy into tracked, prioritized and shipped outcomes.
Experience at
Across enterprise and cloud-native programs the goal stays the same — security that's tracked, prioritized and delivered, not just defined. A snapshot of impact from recent initiatives.
Embedding secure-by-design into the SDLC.
Static analysis that finds flaws in source before it ships.
Dynamic testing that probes running apps like an attacker.
Hardening cloud-native estates at enterprise scale.
Automating security as code into every pipeline.
Securing the perimeter of distributed systems.
Turning security strategy into delivered outcomes.
Building guardrails for AI-driven and LLM-integrated systems.
Jan 2025 — Present
Current roleAmazon Web Services (AWS) · United States
Lead end-to-end delivery and security architecture for cloud-native, SaaS and AI-driven programs across AWS and Azure — running 8–10 concurrent initiatives from intake through execution while aligning technical work with compliance and business priorities.
Dec 2021 — Nov 2024
Tata Consultancy Services · Remote
Led application security and secure-design improvements across enterprise applications and cloud environments, embedding secure-by-design into the SDLC across Microsoft and Verizon engagements.
Nov 2019 — Nov 2021
AT&T · United States · Remote
Secured enterprise mobile applications and APIs, coordinating large-scale security assessments across globally distributed teams and clients.
Nov 2017 — Nov 2019
Xpress Payment Solutions Limited · Nigeria
Engineered modern applications on .NET and SQL Server, modernizing legacy systems and building reusable platform components.
Driving tiered application onboarding into a unified AppSec program with automated CI/CD gating.
Role redesign and policy enforcement program reducing over-privileged access across cloud accounts.
Embedded SAST, DAST and SCA gates into shared CI/CD pipelines for automated pre-deployment validation.
Secure-by-design review and guardrail program for AI/LLM-integrated services across the platform.
Open to collaborating on complex security transformations across enterprise and cloud-native environments.