JAMES OBENG
Germantown,MD
Summary
Seasoned Cybersecurity and Cloud Security Expert with over 12 years of experience in security governance and architecture. Delivers strategic risk management guidance to executives and implements security-by-design frameworks to enhance cyber resilience. Exhibits strong leadership in high-pressure environments while fostering continuous improvement and team collaboration.
Overview
15
15
years of professional experience
1
1
Certification
Work History
Senior Cybersecurity Engineer | Cloud Security Engineer | ISSO | ISSE | NASA
TELTRIUM INC
06.2025 - Current
- Lead cybersecurity, cloud security, ISSO, and ISSE functions for federally aligned mission systems, driving secure architecture, compliance execution, risk management, and operational resilience across cloud and hybrid environments.
- Oversee implementation and validation of NIST 800-53 security controls across administrative, technical, and operational domains, ensuring alignment with federal requirements, organizational standards, and mission needs.
- Collaborated with cloud, infrastructure, and engineering teams to embed security requirements into system design, build, deployment, and sustainment, enhancing overall security posture.
- Direct cybersecurity and cloud security operations for regulated mission environments, combining ISSO governance and ISSE engineering leadership to maintain secure, compliant, and audit-ready systems.
- Lead RMF and authorization efforts by managing SSPs, POA&Ms, SAR inputs, control implementation oversight, assessment support, and continuous monitoring activities.
- Provided senior security engineering guidance for cloud and hybrid architecture, ensuring secure implementation of IAM, encryption, logging, monitoring, segmentation, and boundary protections to maintain compliance.
- Advised leadership, system owners, and engineering teams on security posture and compliance risk, prioritizing remediation efforts and clarifying authorization impacts of architectural and operational changes.
- Entrusted with dual-hatted ISSO and ISSE authority, shaping organizational risk decisions.
- Led end-to-end RMF execution, materially strengthening authorization readiness and reducing compliance friction.
- Architected secure AWS and GovCloud environments (SPOC) aligned with NIST 800-53 and NASA NPR 2810.
- Served as primary advisor to Authorizing Officials, translating technical exposure into executive decision frameworks.
- Directed development of complete ATO artifact suites including SSP, SAR, POA&M, IRP, CP, and hardened baselines.
- Orchestrated control assessments and enterprise remediation strategy to accelerate authorization.
Senior Cloud Security Engineer
AMAZON WEB SERVICES (AWS)
Herndon, USA
02.2022 - 05.2025
- Operated as a senior security authority enabling regulated enterprises to adopt cloud securely at scale.
- Leveraged AWS Security Hub, Amazon GuardDuty, and Amazon Inspector to continuously monitor environments, investigate anomalies, and strengthen threat response posture.
- Engineered enterprise-grade audit visibility using AWS CloudTrail, AWS Config, and Amazon CloudWatch, improving detection capability and forensic readiness.
- Designed layered network defenses across VPC architectures, Security Groups, and NACLs to reduce attack surface and enforce segmentation.
- Governed permissions at scale with advanced IAM strategy, federation, and strict least privilege enforcement, enhancing security posture across cloud environments.
- Directed encryption strategy utilizing AWS KMS and CloudHSM, safeguarding sensitive workloads and regulatory data.
- Facilitated adherence to PCI DSS, HIPAA, and SOC 2 via automation and policy enforcement using AWS Audit Manager, AWS Organizations, Control Tower, and Systems Manager, ensuring regulatory compliance.
- Led secure architecture initiatives aligned with FedRAMP, FISMA, NIST, PCI, HIPAA, and FIPS.
- Guided organizations through boundary design, control inheritance, and advanced threat modeling.
- Acted as escalation authority for high-risk architectural decisions.
- Mentored engineers, measurably raising organizational security capability.
- Partnered with executives and solution architects to accelerate compliant cloud modernization.
- Conducted deep-dive hands-on training sessions to transfer knowledge to customers considering or already using AWS.
- Shared best-practice knowledge with AWS community and customers, fostering collaboration and improving cloud security practices.
- Authored or contributed to AWS customer-facing whitepapers and tutorials.
- Coordinated with internal service teams to address service issues and improve customer experience.
- Ensured security through effective use of IAM, KMS, AWS Shield, and other tools to safeguard cloud environments.
- Oversaw monitoring and audit processes using AWS CloudTrail, AWS Config, and Amazon CloudWatch for compliance.
- Strengthened network defenses by configuring Amazon VPC, Security Groups, and Network ACLs for secure access.
Solutions Architect
AMAZON WEB SERVICES (AWS)
01.2021 - 01.2022
- Designed resilient, fault-tolerant architectures with embedded security controls.
- Led secure migration strategies for enterprise workloads.
- Established trust with technical leadership by providing strategic guidance on cloud architecture and security best practices.
- Architected scalable, secure, and highly available AWS solutions to support business, application, and infrastructure requirements.
- Built and optimized secure network architectures using VPCs, subnets, route tables, NAT gateways, security groups, NACLs, Transit Gateway, VPN, and Direct Connect.
- Implemented identity and access management controls using AWS IAM, role-based access control, federation, and least privilege principles.
- Automated infrastructure deployment and provisioning using AWS CloudFormation, Terraform, and infrastructure-as-code best practices.
- Integrated monitoring, logging, and compliance visibility using Amazon CloudWatch, AWS CloudTrail, AWS Config, and AWS Security Hub.
Information Assurance Specialist / ISSO
AMAZON WEB SERVICES (AWS)
Herndon, Virginia
07.2018 - 08.2021
- Executed full ATO lifecycles across multiple regulated systems.
- Briefed Authorizing Officials on risk posture and outlined remediation strategies to enhance system security.
- Directed continuous monitoring programs.
- Coordinated remediation efforts protecting operational authorization.
- Developed, implemented, and maintained security policies, standard operating procedures, and system security plans.
- Conducted regular security audits, vulnerability scans, and system tests to monitor compliance.
- Conducted risk assessments to identify vulnerabilities and developed Plans of Action and Milestones (POA&M) for targeted remediation.
- Prepared risk assessments audits to ensure systems comply with legal and regulatory standards (NIST).
- Assessed security risks across AWS cloud environments and infrastructure.
- Developed and implemented security policies for data protection and compliance.
- Monitored security incidents and responded to threats in real-time.
- Developed and implemented security policies for IT systems, networks and applications.
- Responded promptly to security alerts generated by monitoring tools or reported through other channels such as user complaints or audit findings.
- Documented security incidents in detailed reports and recommended actionable remediation steps for risk mitigation.
- Implemented encryption solutions for data at rest and data in transit across the enterprise infrastructure.
- Performed risk assessments and identified areas of improvement in system security.
- Analyzed security procedure violations and developed plans to prevent recurrence.
- Updated computer security policies and procedures upon learning of new risks.
Information Security Analyst (ISSO Support-Part Time)
MILDEN SYSTEMS
11.2012 - 06.2018
- Implemented NIST 800-37 / 800-53 frameworks.
- Performed security control assessments to identify vulnerabilities and ensure compliance.
- Developed RMF expertise to enhance security posture of federal systems.
- Authored SSPs, SARs, and POA&Ms.
- Collaborated with auditors and system owners to facilitate successful security reviews.
Data Center Operations Technician
AMAZON WEB SERVICES (AWS)
01.2012 - 12.2012
- Installed, configured, and troubleshot server, network, and storage hardware in a high-availability data center environment.
- Executed break-fix activities on failed or degraded equipment, restoring service and ensuring operational uptime.
- Performed hands-on data center operations support including rack and stack, cabling, hardware installations, replacements, and decommissions.
- Facilitated deployment, maintenance, and lifecycle management of data center infrastructure and production hardware to support continuous operations.
- Conducted troubleshooting and diagnostics on hardware components including servers, drives, memory, power supplies, and network devices.
- Performed system and hardware inspections to identify faults, risks, and equipment health issues, preventing potential service impacts.
- Responded to operational tickets, service requests, and incident tasks within defined service level agreements.
- Used internal ticketing, asset tracking, and documentation systems to record work performed, update statuses, and maintain operational accuracy.
- Assisted with server provisioning, hardware swaps, parts replacement, and equipment validation during deployments and repairs.
- Supported network and infrastructure teams by preparing equipment, verifying physical connections, and assisting with implementation tasks.
- Maintained strict compliance with safety, security, and access control requirements in the data center environment.
Data Center Operations & Decommissioning Lead | Logistics Specialist / Area Lead
AMAZON WEB SERVICES (AWS)
01.2011 - 12.2011
- Led end-to-end decommissioning operations for assigned area, ensuring secure removal, documentation, and disposition of retired data center infrastructure.
- Directed technicians in decommissioning workflows and project milestones, ensuring adherence to operational, safety, and quality standards.
- Acted as the primary escalation point for decommissioning issues involving asset accountability, workflow delays, media handling, and stakeholder coordination.
- Drove operational excellence by enforcing process discipline, improving workflow efficiency, and maintaining audit-ready records for decommissioned assets.
- Collaborated cross-functionally to reclaim data center capacity and manage lifecycle of legacy hardware and cabling, reducing infrastructure clutter.
- Oversaw execution of decommissioning workflows, including equipment isolation, rack teardown, cable removal, and asset tracking, ensuring compliance with operational procedures.
- Ensured proper accountability, documentation, and chain of custody for decommissioned equipment throughout removal, staging, and disposition processes.
- Processed storage media securely to manage customer data in accordance with policy.
Logistics Specialist Area Lead
AMAZON WEB SERVICES (AWS)
01.2011 - 12.2011
- Served as area lead for logistics operations, driving team execution, inventory integrity, and material availability in support of mission-critical data center operations.
- Led daily logistics operations for assigned area, ensuring timely movement, tracking, and delivery of critical data center inventory, parts, and materials.
- Monitored material flow from receiving to storage to final delivery, improving efficiency, traceability, and process compliance.
- Supervised logistics specialists, directing tasks, delivering training, conducting quality checks, and providing performance guidance to enhance team effectiveness.
- Prioritized and allocated daily workload across team members to meet service level targets, urgent requests, and operational deadlines.
- Coordinated logistics, operations, procurement, and vendor teams to ensure seamless material flow and expedite issue resolution.
- Managed high-priority logistics escalations, ensuring timely fulfillment of critical infrastructure and maintenance requirements.
- Provided frontline leadership, coaching, and operational oversight to improve team productivity, process compliance, and service performance.
Education
Master of Science (MSc) - Computer & Information Systems Security
George Washington University
Washington, DCMaster of Science (MSc) - International Transport Management
SUNY Maritime College
New YorkBachelor of Science (BSc) - Nautical Science
Regional Maritime University
GhanaSkills
- Cloud security
- Cloud architecture and security
- Security architecture
- AWS expertise
- Secure hybrid infrastructure
- NIST compliance
- NIST RMF and 800-53
- FedRAMP and FISMA compliance
- FIPS 199 and 200 standards
- NASA security protocols
- Cybersecurity and compliance
- Risk management
- Cybersecurity risk assessment
- Threat analysis
- Incident response
- Incident oversight
- Threat detection
- Threat modeling techniques
- Security event monitoring
- Vulnerability assessment
- Continuous monitoring
- Data protection protocols
- Encryption technologies
- Infrastructure security measures
- Access management
- Access control management
- Identity management
- Security policy development
- Compliance frameworks
- Regulatory compliance
- Zero trust principles
- Security by design
- Business continuity planning
- Cybersecurity maturity model
- Critical security controls
- User awareness training
- Awareness training
- Effective communication
Certification
- Project Management Professional (PMP), PMI
- AWS Certified Security – Specialty
- AWS Certified Solutions Architect – Associate
- CompTIA Security+
Personal Information
Title: PMP
Leadership Brand
- Trusted by executives in high-consequence environments
- Decisive, risk-informed leader
- Converts regulatory pressure into strategic advantage
- Elevates the security maturity of every organization served
- Excellent communication skills
- High Integrity leader who maintains high ethical standards
- Adapts leadership style to the situation
- Empathetic Leader who prioritizes team well-being
- People first leader who can work under any conditions
- Very Collaborative Leader who promotes cross functional communication
Certifications In Progress
- CISSP
- CISA
- CISM
Work Preference
Salary Range
$120000/yr - $200000/yrTimeline
Senior Cybersecurity Engineer | Cloud Security Engineer | ISSO | ISSE | NASA
TELTRIUM INC
06.2025 - Current
Senior Cloud Security Engineer
AMAZON WEB SERVICES (AWS)
02.2022 - 05.2025
Solutions Architect
AMAZON WEB SERVICES (AWS)
01.2021 - 01.2022
Information Assurance Specialist / ISSO
AMAZON WEB SERVICES (AWS)
07.2018 - 08.2021
Information Security Analyst (ISSO Support-Part Time)
MILDEN SYSTEMS
11.2012 - 06.2018
Data Center Operations Technician
AMAZON WEB SERVICES (AWS)
01.2012 - 12.2012
Data Center Operations & Decommissioning Lead | Logistics Specialist / Area Lead
AMAZON WEB SERVICES (AWS)
01.2011 - 12.2011
Logistics Specialist Area Lead
AMAZON WEB SERVICES (AWS)
01.2011 - 12.2011
Master of Science (MSc) - Computer & Information Systems Security
George Washington University
Master of Science (MSc) - International Transport Management
SUNY Maritime College
Bachelor of Science (BSc) - Nautical Science
Regional Maritime University