About

Two engineers who build regulated cloud platforms and take them through the audit

Volodymyr Vasylenko — Principal, Cloud & Platform Security — built two security engineering teams from the ground up. He started as a junior IT security analyst. One employer hired him as a Lead Cloud Security Engineer and, two titles later, he ran platform security there too. Max Derbenov — Principal, Cloud & Platform Engineering — has spent 15 years in the infrastructure itself. He speaks at conferences on Kubernetes architecture and multi-cloud infrastructure strategy.

We have each worked one end of PCI DSS. Volodymyr led the compliance program at that same employer, through the audits and the annual recertification after them. Max built the compliant infrastructure at another, credit-card processing at 100K+ daily transactions. The decisions that stand a platform up and the evidence an auditor asks for six months later are the same decisions. We both hold the HashiCorp Terraform Associate, sat independently, and that overlap is what makes the handoff between us cheap.

Max’s master’s is in computer science. He has mentored 15+ senior and mid-level engineers. Volodymyr holds a PhD in information technology and has taught cybersecurity as an associate professor since 2014, which is why control descriptions and evidence trails get written during an engagement instead of assembled the week the auditor arrives.