A practical breakdown of how SOC 2 preparation became an infrastructure engineering project involving cloud hardening, access control, backup validation, automated evidence collection, compliance-as-code, and a custom Drata integration for Nebius. This describes technical preparation and evidence collection, not completed SOC 2 certification or an audit opinion.
Professional work
SOC 2 as an Infrastructure Engineering Project (Article)
How I led SOC 2 Type II technical readiness across AWS, Nebius, GitHub, Terraform, and Drata, hardening cloud infrastructure, automating evidence collection, and building a custom Drata integration where no native connector existed.