Pedro Fernández De Córdoba

Cloud Security Architecture & Infrastructure Modernization.

Secure Cloud Transformation: Led the migration and re-architecture of legacy on-premise systems to AWS and Azure, ensuring Security by Design principles and compliance with industry standards.

Infrastructure & Compliance as Code: Designed scalable, auditable infrastructure using Terraform, integrating security controls directly into the CI/CD pipelines (DevSecOps) with ArgoCD and GoCD.

Container Security: Hardening and orchestration of Kubernetes clusters, implementing network policies and secure image management.

Resilience & Business Continuity: Defined and tested Disaster Recovery Plans (DRP) and backup strategies to ensure high availability and business continuity (aligned with ISO 22301 principles).

Observability & Incident Response: Implemented centralized monitoring and SIEM-like stacks (ELK, New Relic, Sophos Cloud Optix) for real-time threat detection and forensic analysis.

Perimeter & App Security: Managed WAF and CDN solutions (Imperva, Akamai) to protect critical assets against DDoS and web attacks.

Core Tech Stack:

Cloud & IaC: AWS, Azure, Terraform, Linux.

Security & Compliance: Sophos Cloud Optix, Imperva, SonarQube (Code Quality/Security).

DevSecOps: Kubernetes, ArgoCD, GitLab, Jenkins/GoCD.

Observability: ELK Stack (Elasticsearch, Logstash, Kibana), Prometheus, Grafana, New Relic.

Implementation of cloud projects and multi-client support in the Automation & Multicloud squad. Design of microservice and container architectures on AWS and Azure, CI/CD, IaC, monitoring and automation. Technologies: AWS, Azure, Azure DevOps, Jenkins, Terraform, Kubernetes, OpenShift, Istio, Rancher, Helm, Prometheus, Grafana, ELK, ServiceNow.

Technologies: AWS, Azure, Azure DevOps, Jenkins, Terraform, Kubernetes, Istio, Rancher, Prometheus, Grafana, Service Now.