• Design, develop, and maintain CIS Benchmark–aligned baseline hardening modules using Puppet (Puppet DSL, Hiera) for Linux distributions (RHEL 8/9, Ubuntu, Amazon Linux, etc.) and Windows Server versions (2019/2022/2025) operating in cloud platforms.

• Design and harden Amazon Machine Images (AMIs), Azure Images, and GCP VM Images using Packer, embedding CIS Benchmarks and organizational security controls directly into the base image.

• Architect, automate, and maintain Packer based pipelines that build, validate, test, and publish hardened AMIs and base images across multiple environments (dev → prod) with full versioning and governance.

• Harden Kubernetes worker nodes and managed node groups (EKS, AKS, GKE, OpenShift) using CIS controls, image based baselines, and configuration enforcement workflow...