VM Provisioning - IaC Automation (Security Implementation Lead)

Led security implementation for an enterprise self-service VM provisioning platform spanning Azure, AWS, and VMware vSphere. Architected the end-to-end pipeline: ServiceNow tickets trigger Jenkins jobs that execute Terraform runs on Terraform Cloud, with post-provisioning handoff to Ansible AWX for configuration management. Built Golden Images using HCP Packer with CIS benchmarks baked in. Authored 21 Hashicorp Sentinel policies and OPA Rego rules to enforce security guardrails on Terraform plans—validating encryption requirements, network segmentation, tagging standards, and IAM configurations. Integrated OPA into GitHub Actions for Ansible playbook validation on every PR. Reduced VM provisioning time from 2 weeks (manual process) to under 2 hours while maintaining 100% policy compliance.