Andrei Kovalenko

Own security architecture for large-scale cloud platforms (Azure primary, GCP secondary). Design end-to-end cloud security covering identity, networking, data protection, monitoring, and governance. Lead architecture reviews, threat modeling, and approvals. Integrate CI/CD security controls (SAST, DAST, CSPM). Architect IAM (Azure AD/Entra, MFA) and SOC integrations. Advise engineering and platform teams.

Technical lead and de-facto architect for cloud security (Azure & GCP). Designed secure landing zones, baselines, and compliance-driven architectures (PCI DSS, NIST). Led cloud assessments, policy-as-code (Azure Policy, Terraform), identity modernization (SSO, Zero Trust), and DevSecOps integration. Supported SOC ops and mentored engineers, collaborating with platform and DevOps teams.

Implemented and supported enterprise security platforms, focusing on PAM and identity security. Contributed to security architecture, led operations (upgrades, monitoring, integrations), and integrated platforms with SIEM, SSO, MFA, and infrastructure. Developed documentation, monitoring, BCP/DR processes, and supported onboarding and enablement of support and engineering teams.

Owned and managed the information security program with focus on PCI DSS and regulated financial environments. Led compliance initiatives (PCI DSS, SWIFT/CSP), risk and vulnerability assessments, and remediation. Designed security monitoring (SIEM, IDS/IPS), implemented endpoint, network, and database controls, developed policies, and acted as technical authority during audits, coordinating cross-functional teams and tool configuration.

Changing of settings and testing of services in case of subsystems updates (Billing products); Administration of rate-settings servers (Billing services); Administration of Windows,Unix servers; Database development (Oracle) - queries,procedures,functions,triggers etc.; Network Administration; Development of scripts for functional improvements of implemented services.

Software development; Software products testing; Implementation and administration of the developed products; Leading of education seminars on released software of the company.