Open to opportunities Melbourne, AU

Architecting
Secure Clouds.

Defending enterprise networks. Building zero-trust architectures. Turning security into an enabler of business velocity.

AWS Splunk CrowdStrike Okta Check Point Python +more
View Experience

01 / About

Executive
Summary

A seasoned Network and Cybersecurity Architect with comprehensive expertise in enterprise-scale information security. I specialize in the end-to-end design, implementation, and operation of critical security infrastructure across hybrid cloud environments.

Core Mandate

Cloud security architecture (AWS, GCP, Azure), automated threat detection via SIEM engineering (Splunk, Datadog, LogRhythm), and robust perimeter defense.

Approach

Leveraging IaC to embed security guardrails directly into CI/CD pipelines, isolating critical assets, and filtering operational noise for zero-downtime operations.

0

Years Exp.

0

Certs

0

Clouds

02 / Expertise

Technical Arsenal

Cloud Security

Securing hybrid infrastructure through automated guardrails and scalable design.

AWS GCP Azure IaC VSEC

Threat Detection

Engineering high-fidelity SIEM alerts and operationalising SOC playbooks.

Splunk Datadog LogRhythm ArcSight Darktrace

Network Defense

Designing resilient perimeter security and high-availability traffic routing.

Check Point Cisco ASA F5 BIG-IP BGP/OSPF

Identity & Endpoint

Enforcing zero-trust principles and securing user perimeters.

Okta CrowdStrike CloudSOC MCAS

DevSecOps & Scripting

Baking security into the pipeline and automating repetitive processes.

CI/CD Python Bash Linux

Certifications

Industry-recognised credentials validating deep technical expertise.

AWS Sec AWS SA CCNP GSEC CCSA

03 / Career

Operational History

Senior Cyber Security Engineer

@ OFX

Jan 2022 - Present
  • Engineered security guardrails for cloud environments (AWS, GCP, Azure) using IaC for least-privilege models and ground-up security.
  • Integrated security validations into CI/CD pipelines, enabling secure product delivery without degrading development velocity.
  • Architected SOC playbooks with Splunk and Datadog for enhanced monitoring of complex on-prem and cloud security events.
  • Managed Netskope, CrowdStrike, and Okta deployments; primary escalation point for critical incidents.

Security Solution Architect

@ Latitude Finance

May 2021 - Nov 2021
  • Designed enterprise-wide DLP policies across O365, OneDrive, and SharePoint to prevent PII/PCI leakage.
  • Produced HLD documentation and led technical handover to the internal SOC.
  • Fine-tuned MCAS and CloudSOC for shadow IT tracking and M365 compliance.

Senior Cyber Security Engineer

@ Kmart Group Ltd

Mar 2020 - May 2021
  • Managed NGFWs, WAF, LogRhythm SIEM, and Darktrace UEBA for automated breach detection.
  • Directed VAPT initiatives and led remediation for internet-facing applications.
  • L3 escalation authority for firewall, proxy, and perimeter routing incidents.

Security Specialist

@ IAG (Insurance Australia Group)

Jul 2014 - Nov 2019
  • Pioneered greenfield AWS environment with Check Point VSEC as central security control.
  • Orchestrated zero-downtime firewall upgrades for 10,000+ employee enterprise.
  • Technical authority during PCI-DSS and APRA CPS234 compliance audits.

04 / Impact

High-Impact Initiatives

IAG

Greenfield AWS Security

Designed and deployed foundational security architecture for IAG's AWS migration. Check Point VSEC as central control for inbound/outbound traffic filtering.

AWS VPC Check Point VSEC Cloud Arch
Latitude

Enterprise DLP & Compliance

Architected comprehensive DLP policies across O365, OneDrive, and SharePoint. Mitigated critical PII and PCI leakage risks at a finance institution.

O365 CloudSOC PCI-DSS
Dell

Global MPLS Redesign

Asia Lead for Dell's massive MPLS redesign. Consolidated BGP routing across core and hub sites for a unified, highly-available global network.

BGP/OSPF MPLS Cisco Arch
OFX

DevSecOps Integration

Led security integration into CI/CD pipelines at OFX. Automated guardrails via IaC ensuring all cloud deployments meet strict security baselines.

CI/CD IaC Automation

05 / Contact

Let's Connect

Open for new challenges in Security Architecture and Cloud Defense. Whether you have a question or a potential opportunity - my inbox is open.

i@andyyap.me LinkedIn
Vermont South, VIC MBA, Nottingham Trent AEST (UTC+10)