Detail-oriented Cybersecurity Engineer with 15 years of experience securing enterprise platforms and multi-cloud environments. Expertise in gateway security, token-based identity systems, and policy engineering. Skilled in Axway Gateway, Envoy-based platforms, AWS, and Kubernetes. Strengthens cyber defenses through platform hardening, incident response, and risk mitigation, delivering secure solutions that protect critical applications and enhance organizational cybersecurity.
Work History
Principal System Engineer Enterprise Cybersecurity squad
1 Year 1 Month
Fidelity Investments | 09.2025 - Current
Lead engineering support for Fidelity’s enterprise authentication platform powered by Axway API Gateway, securing both internal and external customer traffic. Maintained the token minting infrastructure used across multiple business applications and enforced enterprise-wide authentication and authorization controls.
Manage and optimize Axway Gateway for secure, scalable, and highly available authentication services.
Design and maintain gateway security policies governing customer and application traffic.
Support token lifecycle management and identity validation across enterprise systems.
Use Splunk, Kibana, and Datadog for anomaly detection, incident troubleshooting, and operational visibility.
Lead product upgrades, OS patching, platform modernization, and infrastructure enhancements.
Ensure timely completion of mandatory security patches and compliance requirements.
Supported customer onboarding and resolved production issues, service requests, and critical incidents to ensure seamless operational continuity.
Drove resiliency improvements through system hardening, performance tuning, and enhancing disaster recovery readiness across the platform.
Provided technical support for a high-impact enterprise authentication platform powered by the Axway API Gateway, facilitating secure inbound traffic authentication for both internal and external clients.
Developed and maintained Axway Gateway policies with JavaScript and Groovy to ensure secure and efficient API traffic management.
Managed SSL/TLS certificates and Venafi integrations.
Utilized F5 GTM/LTM for traffic distribution and failover.
Built monitoring dashboards with Datadog, Splunk, and Kibana to enhance visibility into system performance and security incidents.
Built monitoring dashboards using Datadog, Splunk, and Kibana.
Executed product upgrades and server patching while maintaining operational documentation to ensure system reliability and compliance.
Performed API validation using Postman and Insomnia.