Architecture Reference · Principal Engineering · All Nodes Linked to Official Docs

KEHINDE SAMSON OGUNLOWO

Principal Detection Engineer  ·  Multi-Cloud DevSecOps Architect  ·  AI-Driven Security Operations
Houston, TX  |  U.S. Citizen  |  Active Secret Clearance  |  11+ Years Enterprise Experience
↗ Every node links to official documentation — click any chip to open docs
01   Impact Metrics
55%
MTTR Reduction
99.95%
Detection Accuracy
500K+
Monthly Transactions
10TB+
Daily Telemetry
75%
Container Vuln Reduction
85%
Unauth Access Reduction
10K+
Req/Mo Blocked
99.99%
Uptime SLA
02   AI Agent & LLM Platform Layer
Conversational & Copilot
Amazon Q Business Amazon Lex Amazon Connect AI M365 Copilot Azure AI Bot Service Azure OpenAI Service Gemini Workspace Dialogflow CX CCAI
Autonomous Task Agents
Bedrock Agents Step Functions LLM Lambda Event Agents Bedrock Knowledge Bases Azure AI Agent Service Logic Apps LLM Durable Functions Azure AI Foundry Vertex AI Agent Builder Cloud Workflows LLM
Developer & DevOps Agents
Amazon Q Developer CodeWhisperer CodePipeline AI GitHub Copilot Azure DevOps AI IaC Advisory Agents Gemini Code Assist Cloud Build AI Cloud Deploy
AI Orchestration Frameworks
LangChain AutoGen CrewAI RAG Architecture Prompt Versioning Prompt Guardrails Hugging Face TensorFlow PyTorch SageMaker MLOps
03   Multi-Cloud Platform
AWS
AI / ML
Amazon Bedrock SageMaker HealthLake Personalize Comprehend Medical
Security & Detection
GuardDuty LLM Security Hub Macie AWS Config IAM Policy AI AWS WAF
Data & Analytics
QuickSight Q OpenSearch Serverless Redshift S3 Knowledge Base
Infrastructure & FinOps
EKS ECS Lambda EventBridge Agents Cost Explorer LLM GovCloud Nitro Enclaves KMS + HSM
AZURE
AI / ML
Azure OpenAI GPT-4 Azure Machine Learning AI Foundry Nuance DAX Dynamics 365 Copilot Health Data Services
Security & Detection
Sentinel AI Defender for Cloud Defender XDR Entra ID Risk AI CSPM Key Vault
Data & Analytics
Fabric AI Copilots Power BI Copilot Synapse Analytics Azure AI Search OpenAI RAG
Infrastructure & FinOps
AKS Azure Functions Automanage AI FinOps Copilot Azure Policy AI Azure Government Terraform
GCP
AI / ML
Vertex AI Gemini for Cloud Healthcare NLP Retail Recommendations Vertex AI Pipelines
Security & Detection
SCC AI Chronicle AI BeyondCorp Cloud Armor IAP VPC Service Controls Assured Workloads
Data & Analytics
BigQuery Gemini NLQ Looker AI Vertex AI Search Dataflow Pub/Sub
Infrastructure & FinOps
GKE Autopilot Cloud Run AutoOps Agents Cost Optimize AI Confidential GKE Binary Authorization Cloud KMS + HSM
04   Threat-Driven Detection Engineering & Detection-as-Code
Detection Pipeline
Telemetry Ingestion Normalization & Enrichment Threat Intel Correlation SIGMA / YARA / KQL Authoring Detection CI/CD Gate SIEM / SOAR Push MITRE ATT&CK Mapping Lifecycle Management
Detection Rule Languages
SIGMA YARA YARA-L KQL SPL Snort Suricata Chronicle Rules
Coverage Domains
SaaS & Apps Infrastructure & Platform Cloud Services Endpoint / EDR ICS / OT Identity & IAM
MITRE ATT&CK Coverage
TA0001 Initial Access TA0002 Execution TA0003 Persistence TA0004 Priv Escalation TA0005 Defense Evasion TA0006 Credential Access TA0007 Discovery TA0008 Lateral Movement TA0009 Collection TA0010 Exfiltration TA0011 Command & Control TA0040 Impact
05   AI-Powered Security Operations Center
AI-Powered SOC — Real-Time Operations
Input
Alert & Telemetry Ingestion
GuardDuty Events Sentinel Alerts Chronicle Findings Defender XDR SCC Findings Security Hub PHI Exfiltration Signals Insider Threat Signals
Triage
Autonomous LLM Triage & Summarization
LLM Alert Summarization Auto Severity Scoring False Positive Suppression Threat Actor Profiling SOAR Enrichment MTTD Reduction
Response
SOAR Orchestration & Automated Response
Playbook Automation Auto-Remediation Agents Threat Hunting Automation Incident Ticket Creation Evidence Collection Cortex XSOAR
06   Security Data Engineering
Petabyte-Scale Threat Telemetry Pipelines
Ingestion & Streaming
Apache Kafka Pub/Sub EventBridge Azure Event Hub AWS Glue Azure Data Factory Dataflow
Storage & Security Lakes
Chronicle Security Lake BigQuery Security Lake Amazon Security Lake Azure Synapse OpenSearch Elasticsearch PostgreSQL + pgvector
Enrichment & Intelligence
Threat Intel Feeds (STIX) MITRE ATT&CK Mapping IOC Correlation Anomaly Detection NLP Entity Extraction Drift Monitoring
07   DevSecOps & Platform Engineering
CI/CD, IaC & Supply Chain Security
Terraform Helm GitHub Actions Azure DevOps Cloud Build Jenkins Ansible GitOps SAST Gates DAST Gates Prisma Cloud Scan GitGuardian Secrets Binary Authorization CloudFormation Puppet
Containers, Orchestration & Observability
GKE AKS EKS Docker Kubernetes Prometheus Grafana ELK Stack Azure Monitor Cloud Monitoring SLO/SLI Engineering KEDA Autoscaling Pod Security Standards
08   Identity, Zero Trust & Encryption
Identity & Access Management
Microsoft Entra ID Google Cloud IAM AWS IAM OAuth 2.0 SAML 2.0 OpenID Connect CyberArk PAM Workload Identity BeyondCorp Enterprise Zero Trust Architecture
Encryption & Confidential Computing
FIPS 140-2 Cloud KMS + HSM Azure Key Vault Intel SGX AMD SEV Confidential GKE AWS Nitro Enclaves VPC Service Controls AWS KMS
09   Databases & Data Platforms
Data Stores & Streaming
PostgreSQL pgvector (AI Embeddings) MySQL MongoDB Redis BigQuery Azure Synapse Amazon Redshift Elasticsearch OpenSearch Apache Kafka Pub/Sub PgBouncer Amazon RDS Cloud SQL
10   Compliance & Regulatory Frameworks
Frameworks & Standards
FedRAMP High CMMC Level 2 HIPAA HITRUST CSF SOC 2 Type II PCI-DSS Level 1 NIST 800-53 NIST 800-171 FIPS 140-2 StateRAMP Zero Trust (CISA) NIST SP 800-207 ZTA
11   Industry Verticals & Domain AI
Healthcare & Clinical AI
FHIR R4 HealthLake Nuance DAX SNOMED CT LOINC ICD-10 CDS Hooks DICOM / PACS
Defense & Government
AWS GovCloud Azure Government Assured Workloads MITRE ATT&CK CMMC Compliance IoT Telemetry AI
Finance & Tax
Tax Automation AI Claims Processing AI Dynamics 365 Copilot FinOps AI Azure FinOps Copilot PCI-DSS
Energy & Industrial
ICS / OT Detection Predictive Maintenance AI Field Service AI TensorFlow / PyTorch IoT Fleet 1,000+ Assets Prometheus Monitoring
12   Professional Certifications
Cloud & Architecture
Google Cloud Professional Security Engineer Google Cloud GCP Professional DevOps Engineer Google Cloud AWS Solutions Architect Professional Amazon Web Services AWS DevOps Engineer Professional Amazon Web Services Azure Security Engineer Associate Microsoft Azure Azure Solutions Architect Expert Microsoft Azure
Security & Detection Engineering
Certified Ethical Hacker CEH v11 EC-Council CompTIA CySA+ CompTIA CompTIA Cloud+ CompTIA Palo Alto PCNSE Palo Alto Networks
Identity & Automation
Microsoft SC-300 Identity Administrator Microsoft HashiCorp Terraform Associate HashiCorp
13   Experience Timeline
Career Progression · 11+ Years
JAN 2024 – PRESENT
CERETAX · Houston, TX
Senior Multi-Cloud Security Architect, AI Solutions Engineer & Principal Detection Engineer
AI-Powered SOC GKE Security FedRAMP High Detection-as-Code CI/CD DevSecOps
FEB 2023 – DEC 2023
CIGNA · Remote
Senior Multi-Cloud Security Architect, Healthcare AI Engineer & Principal Detection Engineer
FHIR R4 Migration Chronicle SOC GPT-4 Claims AI YARA-L Detection
JAN 2021 – JAN 2023
LOCKHEED MARTIN · Remote / Hybrid
Lead Multi-Cloud Security Architect, AI Systems Engineer & Principal Detection Engineer
CMMC Level 2 AWS GovCloud YARA / SIGMA APT Confidential Computing
JAN 2020 – DEC 2020
CATALYTE / NANTHEALTH · Remote
Multi-Cloud AI/ML Engineer & Healthcare Solutions Architect
SageMaker Clinical AI HL7 / FHIR ETL Sentinel Detection
OCT 2019 – JAN 2020
MAMMOTH ENERGY SERVICES · Oklahoma City
Cloud Security Architect, AI Solutions Engineer & Detection Engineer
ELK Stack 5TB/Day Multi-Agent AI ICS/OT Detection
AUG 2018 – SEP 2019
BP REFINERY · Texas City
Cloud Security Architect & Threat Detection Engineer
Qualys / Rapid7 CI/CD ML Anomaly Detection Ansible + Kubernetes
⬡   kogunlowo@gmail.com  ·  linkedin.com/in/kehinde-ogunlowo  ·  github.com/kogunlowo123   ⬡