INNOCENT GODWIN

Integrated AWS Identity Center (SSO) with Microsoft Entra ID via OIDC federation for GitHub Actions using AWS STS, enabling zero-trust CI/CD authentication and eliminating long-lived IAM credentials. Contributed to ISO/IEC 27001:2022 alignment with risk assessments, control mapping, and remediation planning across AWS, Azure, and business/payment systems. Designed and initiated AWS Control Tower for centralized account management and access via AWS Identity Center. Migrated containerized backend services from Amazon EKS to ECS using Terraform, optimizing for cost, reliability, and high availability. Modernized frontend hosting by transitioning from legacy S3 + CloudFront to AWS Amplify with Route 53 and WAF, improving secure CI/CD automation and release cycles. Built internal tooling and automated processes to reduce operational overhead, and maintained accurate documentation across environments.

Led a 4-member technical team to deliver an enterprise-level security audit on schedule and to organizational standards. Performed vulnerability assessments using Nmap, Nessus, and Wireshark, documenting 15+ critical security gaps across routers, switches, and firewalls. Designed and implemented firewall reconfigurations, routing protocols, and ACLs to strengthen network security and mitigate unauthorized access. Developed remediation strategies and technical roadmaps for stakeholders, coordinating cross-team integration while minimizing operational disruption. Established best-practice protocols for network monitoring, threat detection, and incident response to improve resilience.

Engineered secure multi-account AWS and Azure environments using private subnets and least-privilege/zero-trust network segmentation to reduce attack surface. Replaced bastion/SSH access with AWS Systems Manager Session Manager for auditable, role-based instance management. Built and maintained Terraform modules with remote state for consistent automated multi-account deployments; developed Azure IaC pipelines aligned to best practices across non-production and production. Implemented continuous monitoring and threat detection with CloudWatch and GuardDuty and iterated on infrastructure security monitoring pipelines for governance alignment. Led infrastructure uplifts and project delivery across CI/CD, databases, IT operations, and metrics; performed code and architecture reviews and helped shape DevOps culture.