About
Two engineers who build regulated cloud platforms and take them through the audit, and the partner who handles the business and legal side
Enclave is three partners. Two of us build and secure cloud infrastructure for US companies that get audited — fintech and healthcare, mostly. The third handles contracts and client relations. What follows is where each of us learned it.
Volodymyr Vasylenko — Principal, Cloud & Platform Security — built two security engineering teams from the ground up. He started as a junior IT security analyst. A high-volume transaction platform under NDA hired him as a Lead Cloud Security Engineer and, two titles later, he ran platform security there too. His PhD in information technology is from the State University of Telecommunications in Kyiv, and he has taught cybersecurity there as an associate professor since 2014 — which is why control descriptions and evidence trails get written during an engagement instead of assembled the week the auditor arrives.
Volodymyr Vasylenko on LinkedIn
Max Derbenov — Principal, Cloud & Platform Engineering — has 20 years in this work, back to the LANs that carried 100+ air traffic controller workstations. Now it is infrastructure strategy across 5 parallel projects: financial services, retail, healthcare, sports. His master’s in computer science is from the State University of Information and Communication Technologies, and 15+ senior and mid-level engineers have come up under his mentoring. He speaks at conferences on Kubernetes architecture.
We have each worked one end of PCI DSS. Volodymyr led the compliance program at the transaction platform under NDA, through the audits and the annual recertification after them. Max built the PCI-DSS compliant infrastructure at a fintech platform, where credit-card processing ran 100K+ daily transactions. The decisions that stand a platform up and the evidence an auditor asks for six months later are the same decisions. We both hold the HashiCorp Terraform Associate, sat independently, and that overlap is what makes the handoff between us cheap.
Max’s Terraform modules put banking-sector applications behind VNets and Private Link on Azure, with the NSGs and load balancers provisioned from the same code. That is a routing problem before it is a security one, and the AWS Advanced Networking – Specialty he holds is the same problem on the other cloud.
Farid Khaidarov is the third partner. Contract terms and client relations sit with him rather than with the two of us.