Rafael Demenech

Background

About Rafael Demenech

With over 13 years in the IT industry—including the past 7+ years focused on AWS, Cloud Engineering, Cloud infrastructure, and DevSecOps—I bring a robust mix of full-stack development and cloud architecture experience to enterprise-scale projects across FinTech, EdTech (e-learning), and the recruitment industry. As a Principal Cloud Architect, I specialize in designing and implementing secure, scalable, and cost-optimized AWS architectures that align with the AWS Well-Architected Framework. My work bridges the gap between Infrastructure, Solution Architecture, DevOps, automation, and security, empowering engineering teams while maintaining compliance and performance at scale. Key Achievements • Achieved 85%+ security score in AWS Security Hub through rigorous controls and best practices • Designed cloud infrastructure aligned with PCI DSS, SOC2 requirements • Engineered internal automation tools and developer enablement platforms • Reduced operational costs by up to 90% through innovative AWS-native solutions • Led implementation of CI/CD pipelines and DevSecOps workflows to accelerate delivery and security. I collaborate effectively with cross-functional teams to translate complex requirements into cloud-native, resilient, and scalable solutions. Outside of tech, I’m a family man who recharges through adventure—skydiving, surfing, and exploring the outdoors. Core Skills & Technologies Cloud & AWS: EC2, RDS, Lambda, S3, VPC, IAM, Cognito, API Gateway, Route 53, SES, CloudWatch, ECS, EKS, IAM Identity Center, Transit Gateway, VPN, Security Hub, Control Tower, WAF, GuardDuty, Amazon Inspector, AWS Systems Manager (SSM), Amazon Workspaces, AWS Directory Services, AWS Well-Architected Framework, AWS Elastic Beanstalk IaC & Automation: Terraform, AWS CDK, CloudFormation CI/CD & DevOps: Git, Azure DevOps, GitHub Actions, Jenkins, Docker, Serverless Architectures, Internet Information Services (IIS) Programming: Go, Python, Bash, PowerShell.NET (C#), JavaScript (Node.js, Angular, React), Typescript Databases: SQL Server, PostgreSQL, DynamoDB Security & Monitoring: Cloud Security, Secrets Management, New Relic, CloudWatch, DataDog Compliance & Best Practices: DevSecOps, PCI DSS, SOC2 Methodology: Agile Methodologies, SCRUM, Kanban Frameworks: Entity Framework