OneCloud – Enterprise Network Architecture
Led an enterprise-wide network consolidation across ~2,000 VPCs, optimizing NAT Gateway usage to cut annual cloud spend by $1M. Orchestrated a DNS migration that remediated 140,000+ security vulnerabilities with 100% uptime during cutover, and migrated 10,000+ AWS ACM certificates from email to automated DNS validation, making renewals fully automated enterprise-wide.
Scope
OneCloud was a large-scale network simplification across roughly 2,000 VPCs. The problem wasn’t only cost: it was the operational drag and security exposure that come from fragmented network patterns repeated across the enterprise.
What changed
- Led the consolidation of NAT Gateway usage across ~2,000 VPCs, cutting annual cloud spend by $1M.
- Orchestrated an enterprise DNS migration that remediated 140,000+ DNS-related security vulnerabilities while holding 100% uptime during cutover across global networks.
- Migrated 10,000+ AWS ACM certificates from email validation to automated DNS validation, removing human approval bottlenecks and making renewals fully automated enterprise-wide.
Outcome
The work cut annual cloud spend by seven figures, materially reduced security risk, and left the network far easier to operate and reason about at enterprise scale.