Woori FIS

Designed, built, and operated cloud security architecture for affiliates including Woori Bank, Woori Card, and Woori Financial Group, across a hybrid environment of public cloud, private cloud, and on-premises.

Key results

          [OK] Designed and completed Woori Financial Group's first cloud security policy definition after joining, and distributed it to the group's affiliates
        
          [OK] Brought AWS Network Firewall, WAF, and Shield security infrastructure under code for the first time, in an environment with no Terraform
        
          [OK] Built a Python pipeline that automatically collects and analyzes network communication settings across multiple AWS accounts
        
          [OK] Integrated GuardDuty, Security Hub, WAF, Network Firewall, and Shield with a Splunk-based SIEM/SOAR
        
          [INFO] Defined IAM permissions in Terraform to block excessive grants by design, following Zero Trust principles and the network separation (a Korean financial regulation) requirements in Korea's Electronic Financial Supervisory Regulations
        
          [INFO] Operated hybrid security solutions together: FortiGate, NxPortrait, and WIPS
        
          [INFO] Helped set security policy as an early member of public cloud adoption in the financial sector
        

Projects in this period