Catriel Goodman

• Lead a team of developers and Cloud Ops engineers building and operating distributed backend systems on AWS, owning production infrastructure end to end.
• Own AWS Organizations governance and multi-account strategy across 100+ AWS accounts.
• Architect identity and authorization infrastructure: federated identity across Azure AD and Cognito, tenant and access isolation, and Cedar-based fine-grained authorization with AWS Verified Permissions.
• Design event-driven architecture — SQS fan-out with subscriber management, EventBridge-scheduled pipelines, and asynchronous processing across the backend.
• Maintain a CI/CD-integrated Terraform architecture reused across accounts and environments, with Git-based pipeline automation driving every deployment.
• Direct planning, estimation, and delivery across the platform's supporting services — Sofia, Quota, Cloud Hub, and ShareMe.

• Designed and operated production AWS environments for enterprise clients, focused on availability, security, and cost efficiency.
• Built Git-based CI/CD pipelines and ran container orchestration on ECS and EKS.
• Led cloud security hardening and cost optimization initiatives.
• Developed Python automation tooling integrating directly with AWS APIs.

• Managed company SaaS platforms and identity management across Azure AD and Office 365.
• Ran physical security systems and network/virtualization hardware and software — Aruba, VMware, Fortinet.

Built from scratch. Large-scale external-facing edge infrastructure with custom Cognito auth methods for complex tenant emulation. Serves 20+ production applications for 20+ external customers and 1,000+ users, at millions of requests per day. Handles tenant isolation, API key management, and identity federation across Azure AD and Cognito.

• CloudFront
• Lambda@Edge
• VPC Origins
• Cognito
• API Gateway
• DynamoDB
• WAF

Manages the platform Nexus serves: edits AWS WAF ACLs to update tenant IPs and domains, and enables, disables, and edits deployed applications and features across every tenant. Multi-persona access model backed by Cedar fine-grained authorization.

• Python
• Lambda
• DynamoDB
• WAF
• Cedar / Verified Permissions

Custom tooling bridging an on-prem HashiCorp Vault deployment with AWS. Grants fine-grained access across 100+ AWS accounts via OIDC-based Vault login and IAM roles with custom credential providers.

• Go
• Python
• HashiCorp Vault
• OIDC
• AWS IAM

Runs on Bedrock AgentCore with Bedrock Knowledge Bases, a data cleanup and sync ETL pipeline, and Guardrails for input/output validation to prevent misuse.

• Bedrock AgentCore
• Bedrock Knowledge Bases
• Guardrails
• Python

Modular Python framework triggering auto-remediation playbooks directly off security violation events from the Wiz platform — closing the loop between findings and infrastructure fixes.

• Python
• Wiz
• Terraform
• Lambda

SQS-based fan-out with subscriber management, serving the Nexus tenant estate.

• SQS
• EventBridge
• Lambda
• DynamoDB