Hi, I'm Victor

Independent AWS Infrastructure & Security Architect. Securing, automating, and optimizing AWS since 2017.

Based in France, working worldwide. Focused on security reviews, architecture, DevSecOps, FinOps, and secure AI adoption for large-scale and mission-critical AWS environments. 19+ years in IT, 9+ years on AWS, 6x AWS Certified.

This GitHub is where I share side projects, tooling, and experiments from my consulting work. Most active development happens under @zoph-io.

What I do

AWS Architecture: design, review, and optimize AWS infrastructure for security, scalability, and cost.
Security Audits & Hardening: identify vulnerabilities and implement defense-in-depth across AWS accounts and Organizations.
Automation & DevSecOps: Infrastructure as Code, CI/CD, and automated security controls.
Cloud Cost Optimization: actionable FinOps recommendations and automation.
Secure AI & LLM Adoption: guardrails, data protection, and security reviews for Amazon Bedrock, agents, and AI-powered workflows.

Featured projects

unusd.cloud: the garbage collector for your AWS account. Identify unused resources to cut cost and shrink attack surface.
IAMTrail: full version history and diffs for 1,525+ AWS Managed IAM Policies, archived since 2019 (source).
AWS Security Survival Kit: opinionated security monitoring and alerting baseline for AWS accounts.
Subnet Watcher: CloudWatch metrics for available IPs in VPC subnets, with proactive alerts.
AWS Trustline: analyze IAM and S3 policies to surface third-party and external access.

Community

Organizer and CFP reviewer for fwd:cloudsec Europe, Europe's vendor-neutral cloud security conference. Berlin 2025, then London 2026.

Writing

I write about AWS security, cloud architecture, and DevSecOps on zoph.me.

Get in touch

hello@zoph.io · Book a call · zoph.io

That's all, folks!

zoph.