Sutharsanan NRS
Principal Cloud Security Engineer
Chennai
Summary
Principal Cloud Security Engineer with 8+ years driving enterprise cloud security transformation across AWS and Azure. Expert in architecting automated security frameworks, implementing CSPM solutions, and enforcing zero-trust IAM policies that reduced security incidents while accelerating secure cloud adoption. Proven track record in threat modeling, DevSecOps automation, and establishing security guardrails for multi-cloud environments at scale. Recognized leader in mentoring high-performing security teams and delivering innovative solutions to complex cloud security challenges.
Overview
8
8
years of professional experience
7
7
Certifications
Work History
PRINCIPAL CLOUD SECURITY ENGINEER
FIDELITY INVESTMENTS
01.2025 - Current
- Led an enterprise-wide Cloud Security Posture Management (CSPM) initiative, orchestrating the automated discovery and remediation of over 500 security violations across a multi-cloud infrastructure, reducing security incidents by 40%.
- Architected and enforced Service Control Policies (SCPs) across a multi-account AWS organization, ensuring compliance and governance at scale.
- Owned an end-to-end Identity and Access Management (IAM) strategy for AWS cloud, managing over 1,000 roles, and enforcing least-privilege access across the enterprise.
- Architected and deployed reusable AWS service frameworks adopted by 15+ BUs, accelerating secure cloud deployment by 60% and ensuring consistent security standards organization-wide.
- Designed and implemented security controls and guardrails through comprehensive threat modeling of 20+ AWS services, proactively mitigating risks before production deployment.
- Established first-of-its-kind Generative AI security governance framework, defining guardrails and risk management protocols for emerging AI workloads.
- Mentored and upskilled over 100 junior engineers on cloud security operations and AWS best practices, building organizational security capability.
LEAD CLOUD SECURITY ENGINEER
FIDELITY INVESTMENTS
07.2022 - 12.2024
- Implemented and managed Rapid7 InsightCloudSec (cloud security posture management platform) for automated security prevention and detection across cloud infrastructure.
- Engineered CI/CD pipelines using Jenkins Core for IAM API automation, Splunk infrastructure deployment, and security orchestration, reducing deployment time by 50%.
- Architected and deployed enterprise Key Management Service (KMS) infrastructure using CloudFormation templates, enabling centralized encryption key management and data protection.
- Managed Splunk SIEM infrastructure and Datadog monitoring platform, ensuring 99.9% uptime for security monitoring and observability solutions.
- Defined and enforced IAM allow-list and deny-list policies across AWS, implementing least-privilege access controls for 1,800+ accounts organization-wide.
SOFTWARE ENGINEER
FIDELITY INVESTMENTS
03.2020 - 06.2022
- Developed reusable components that significantly reduced development effort on multiple projects.
- Refactored legacy codebases for improved maintainability, paving the way for easier future updates.
- Developed comprehensive documentation for software applications, enabling easier maintenance and user support.
- Streamlined deployment processes, significantly reducing deployment time and minimizing errors by using Concourse Pipelines
ASSOCIATE SOFTWARE ENGINEER
FIDELITY INVESTMENTS
08.2017 - 02.2020
- Developed applications for Brokerage Reconciliation using Java
- Developed automation using Jenkins and Concourse tools for Reconciliation jobs
- Developed automation for Reconciliation systems for Financial communications
Education
Master of Technology - DataScience And Engineering
Bits Pilani
04.2001 -
B.Tech - Information Technology
SSN College of Engineering
Chennai, India 04.2001 -
Skills
AWS
Certification
AWS Security Specialty
Timeline
PRINCIPAL CLOUD SECURITY ENGINEER
FIDELITY INVESTMENTS
01.2025 - Current
LEAD CLOUD SECURITY ENGINEER
FIDELITY INVESTMENTS
07.2022 - 12.2024
SOFTWARE ENGINEER
FIDELITY INVESTMENTS
03.2020 - 06.2022
ASSOCIATE SOFTWARE ENGINEER
FIDELITY INVESTMENTS
08.2017 - 02.2020
Master of Technology - DataScience And Engineering
Bits Pilani
04.2001 -
B.Tech - Information Technology
SSN College of Engineering
04.2001 -
SKILLS AND INTERPERSONAL SKILLS
- Active professional, always proactive to learn new technologies/skillset.
- Always a go-to person in case of critical deliveries/ critical support.
- Team player, helps and co-ordinates with all team members and keep things very professional.
- Takes in responsibilities when given and sees through it till closure.
- Ardent quizzer who has in-depth knowledge on current affairs and sports.
- Professional cricketer/coach.
LEADERSHIP ACTIVITES AND AWARDS
On-Spot award for the taking ownership of Mainframe project for abandon properties., “You Earned IT “ award from management for overall best performance for the year 2018/2021/2022/2024, Promoted to Software Engineer on Jan-2020., Promoted to Lead Cloud Security Engineer – Jul 2022, Promoted to Principal Cloud Security Engineer – Jan 2025