Hi, I'm Mauricio Cuello — Cloud Security & AWS Infrastructure Consultant

I'm the engineer behind TribuOps. I work directly with clients on AWS infrastructure administration, cloud security hardening, and CI/CD automation — no account managers, no hand-offs, just the person doing the work.

Team collaboration meeting

Tools and platforms I work with day to day.

About me

Mauricio Cuelo

Mauricio Cuelo

Founder & CEO

Cloud engineer specializing in AWS with over 4 years of experience in cloud infrastructure design, automation, and security. I hold a master's degree in Cybersecurity and I am certified as an AWS Solutions Architect Associate, with expertise in building secure, scalable, and resilient architectures compliant with PCI DSS standards.


I have experience evaluating CNAPP solutions and exploring AI security across multicloud environments (AWS, Azure, GCP), and I integrate automation using Terraform, Python, and IaC methodologies. With solid experience in Linux server administration, SQL databases, and programming in Python and C, I focus on optimizing costs, improving operational reliability, and accelerating deployment cycles. I'm a collaborative, results-oriented professional committed to continuous innovation and technical excellence.

A little bit about how I think:
Enables fast left-right flow of work and optimize for global goals
Enables the fsat and constant flow of feedback at all stages of our value stream
Enables a culture of experimentation and scientific rigor for testing new ideas.

Together, these three ways — Flow, Feedback, and Experimentation — form a system: work moves fast, problems surface fast, and the culture keeps testing what makes it faster still. None works alone; each depends on the other two to compound. Mastering all three is what turns a good team into a high-performing one.

Get in Touch
Career

Where I've Worked

Hands-on roles building and securing cloud infrastructure.

  • Senior Cloud Engineer

    Ernest & Young

    Nov 2025 — Present

    Evaluate next-generation CNAPP solutions (Cortex Cloud, Palo Alto Networks, and Wiz), designing and executing test scenarios to validate CSPM, ASPM, CWP, and AI-SPM capabilities. At the same time, I am pursuing a line of research in AI security, deploying a multi-agent architecture to assess the actual coverage of security tools against AI risks, and analyzing the maturity level of native AI security capabilities on AWS, Azure, and GCP

    • AWS
    • Terraform
    • Docker
    • CSPM
    • CNAPP
    • AI Security
    • Cloud Security

  • IT Engineer Digital Transformation

    Global Key Code Spain S.L.

    Abr 2025 - Nov 2025

    Designed and operated a secure and scalable cloud infrastructure on AWS for a web app built with FastAPI, SQLAlchemy, and MySQL (RDS), deployed on ECS Fargate with EFS and ALB. I implemented authentication with Cognito, security with WAF and TLS (ACM), and observability with CloudWatch Logs and PostHog. I automated workflows using n8n on ECS, reducing manual tasks by 60% and improving business process efficiency by 30%.

    • AWS
    • Terraform
    • Python
    • FastAPI
    • n8n
    • Docker
    • Github Actions
    • Traefik

  • IT Consultant

    Global Key Code Spain S.L.

    Jan 2024 - Apr 2025

    Design and integration of Zoho Desk, SalesIQ, and Flow to optimize customer service and automate internal processes using secure workflows. Development of connectors using the Odoo API, reducing average processing time and improving package traceability. Implementation of a serverless analytics solution on AWS (Lambda + S3) following security best practices, automating sales and inventory data uploads at low cost and with minimal maintenance.

    • Zoho Suite
    • Odoo API
    • Odoo management
    • AWS Lambda
    • S3
    • Python
    • Data pipeline

  • Risk Consultant

    Deloitte

    Feb 2022 - Oct 2023

    Conducted comprehensive risk and cybersecurity assessments for companies in various industries, ensuring their alignment with strategic objectives. I participated in the implementation and auditing of PCI DSS requirements, as well as in the management of ASV vulnerability scans. I developed and maintained the compliance framework and document management system associated with security and internal control policies. I helped strengthen compliance processes and responses to technological risks as part of multidisciplinary teams.

    • PCI DSS
    • ASV scans
    • Vulnerability Scans
    • NIST
    • OWASP
    • ISO 27001
Background

Education & Certifications

  • AWS Certified Solutions Architect – Associate

    Amazon Web Services

    2024

  • M.S. in Cybersecurity

    IMF Smart Education & Deloitte

    2025

  • AWS Certification Cloud Practitioner

    Amazon Web Services

    2023

  • Deloitte Secure Programmer

    IMF Smart Education & Deloitte

    2024

  • Electronic Engineer

    Pontificia Javeriana University

    2017-2022

Tools & Technologies

What I use day to day to build and secure cloud infrastructure.

Cloud & Infrastructure

  • AWS
  • Terraform
  • Docker

Security

  • Shift left
  • IAM & Least Privilege
  • Data Security

CI/CD & Automation

  • Ansible
  • GitHub Actions
  • AWS Lambda

Data & Observability

  • Amazon Athena
  • Metabase
  • Grafana

Security-First, Built to Last

Security First icon

Security First

Every engagement starts with least privilege, hardened configs, and a threat model — not an afterthought.

Infrastructure as Code icon

Infrastructure as Code

Terraform-managed environments that are versioned, reviewable, and reproducible — no manual console changes.

Direct Communication icon

Direct Communication

You work directly with the engineer doing the work — no account managers, no hand-offs.

Results You Can Verify icon

Results You Can Verify

Every change is tested and documented so you can confirm it works, not just take my word for it.

Documented, Auditable Work icon

Documented, Auditable Work

Clear runbooks and change logs for every engagement, built for audits and future engineers alike.

Practical Over Theoretical icon

Practical Over Theoretical

Solutions sized to your actual risk and budget, not textbook best practices for their own sake.

MultiCloud icon

MultiCloud

Experience across AWS, Azure, and GCP, so recommendations fit your stack, not a single vendor's playbook.

Continuous Learning icon

Continuous Learning

Staying current with evolving threats and tooling so your infrastructure doesn't fall behind.

Ready to get your cloud secure and under control?

Whether it's a one-time security assessment or ongoing infrastructure management, let's talk about what your setup actually needs.

Get in Touch