Sangita Satapathy

Skills

• Cloud & Platform Engineering: AWS (multi-account, EC2, IAM, VPC, EKS), Platform Engineering, Infrastructure Standardisation, Reusable Blueprints
• Compliance & Risk: Operating within ISO 27001 and SOC 2–aligned environments, risk analysis, architecture and design-review participation, integration-testing review for security implications
•
• Infrastructure as Code & CI/CD: Terraform, Ansible, GitOps, GitHub, Jenkins, Azure DevOps, CI/CD Pipeline, automation frameworks
• Agile Delivery & Collaboration: Agile Sprint Delivery, Scrum Ceremonies, Cross-functional Collaboration, Technical Documentation, Customer-focused Delivery, Mentoring & Knowledge Sharing
• Containers & Orchestration: Kubernetes (EKS), Helm, Docker, microservices architecture (cloud-native distributed systems)
• Monitoring & Reliability: Prometheus, Grafana, Dynatrace, ELK, CloudWatch, ITIL-aligned Operations
• Cloud Security & Vulnerability Management: Trivy, Checkov, Wiz, IAM/RBAC reviews, Vault, IaC security scanning, CSPM
• Networking & Security: VPC Design, Routing, DNS, VPN, Direct Connect, Load Balancing (ALB/NLB), IAM, RBAC, Vault, Network Policies
• Systems & scripting: Linux (Ubuntu), Windows Server, Python, Bash
• Kubernetes Security: OPA/Gatekeeper policy authoring (ConstraintTemplates, Constraints), network policies, workload identity, cluster-level risk assessment (networking, access, secrets, workloads)
• Cloud Security & Posture Management: Wiz (Cloud & security scanning), Trivy, Checkov, IaC security scanning, misconfiguration and attack-path identification
• AWS Security Services: GuardDuty, Inspector, Detective, Security Hub, Security Lake; multi-account architecture, IAM policy design, KMS
• Infrastructure as Code: Terraform (advanced, reusable modules), GitOps-based secure deployment validation, Ansible
• Identity & Access: IAM/RBAC design and evaluation, workload identity, Vault secrets management, zero-trust access patterns
• CI/CD & DevSecOps: Embedding security controls into CI/CD and GitOps pipelines, Jenkins, GitHub Actions, secure deployment pattern validation
• Compliance & Risk: Operating within ISO 27001 and SOC 2–aligned environments, risk analysis, architecture and design-review participation, integration-testing review for security implications
• Scripting & Multi-Cloud: Python, Bash; working exposure to GCP/GKE infrastructure management