I work at the intersection of cloud security architecture, cloud security research, and emerging technologies, with a focus on securing large-scale cloud-native and AI-driven environments.<\/p>\n
Over the past 17+ years, I\u2019ve worked across the Aerospace, Healthcare, and Financial sectors, combining deep technical expertise with security architecture and technical leadership.<\/p>\n
At RBC, I lead the global Azure\/GCP and Kubernetes Security program, shaping security strategy and architecture for enterprise-scale cloud and cloud-native environments. My work spans cloud threat research, security architecture, threat modeling, risk assessment, and the development of security patterns and controls designed to operate at scale in highly regulated environments.<\/p>\n
A growing area of my research focuses on AI and agentic security. I explore the security implications of AI agents and agentic architectures, including identity and authorization, tool access, trust boundaries, emerging attack surfaces, and interactions with cloud and Kubernetes environments. I also investigate how AI can augment security engineering through threat modeling, architecture reviews, control analysis, and security automation.<\/p>\n
My approach is centered on bridging security research and real-world engineering: identifying emerging threats, experimenting with new security approaches, and translating research into practical architectures, controls, and engineering patterns.<\/p>\n
I collaborate with major cloud providers, including Microsoft and Google, as well as security startups and open source communities, to explore emerging technologies, challenge existing security models, and help shape new approaches to cloud-native and AI security.<\/p>\n
Beyond my day-to-day role, I actively contribute to the cloud-native and cybersecurity communities through open source, cloud security research, public speaking, and knowledge sharing.<\/p>\n
As a CNCF Ambassador and Microsoft MVP, I regularly speak at international conferences and community events, including KubeCon + CloudNativeCon, CloudNativeSecurityCon, Microsoft Ignite, OWASP, and CNCF events.<\/p>\n","protected":false},"featured_media":7651,"template":"","class_list":["post-7579","speaker","type-speaker","status-publish","has-post-thumbnail","hentry"],"yoast_head":"\n