TOKEN LLC

Olanrewaju David Kehinde

Security Engineering · Cloud Security · Governance, Risk & Compliance

I build secure cloud and container platforms, automate security controls, and help federal systems move through CMMC and RMF without slowing delivery.

View experience Get in touch
Experience
13+ years
Database engineering to security and GRC
Focus
CMMC · RMF · AWS · Azure · Kubernetes
Credentials
CISSP · CMMC-CCP · PMP
Clearance
Active Tier 3 (T3)
Based
Baltimore–Washington metro area
01

Experience

Thirteen years moving from the systems themselves into the security and governance layer above them. Each role turned out to be the input to the next.

2025 – Present

Security Engineer, Governance Risk & Compliance

Carrying federal systems through RMF assessment cycles with the ATO intact.

Security Impact Analysis against a real authorization boundary. CMMC readiness and assessment preparation. Control evidence that holds up in front of an assessor, and security checkpoints built into the automated workflow rather than bolted on afterward, so a one to two day checkpoint SLA is something the pipeline meets rather than something the team apologizes for.

prev
sha256
statepending

2023 – 2025

DevSecOps Engineer

Hardening cloud and container estates with the logs already in hand.

AWS across EC2, IAM, VPC, S3, ECR and OpenSearch. Azure across resource provisioning, Key Vault, storage accounts and Databricks. Kubernetes hardening to CKS standard, secure workspace provisioning, cluster policies and data lake access controls. Vulnerability identification, analysis and remediation across RHEL, Ubuntu, UNIX, VMware and containerized workloads.

prev
sha256
statepending

2020 – 2023

SIEM Engineer

Splunk at federal scale, run as a security instrument rather than a monitoring product.

Enterprise Security with risk-based alerting and correlation searches. Asset and identity frameworks, CIM normalization, encryption across the full ingestion pipeline, PII and PCI masked at index time, and RBAC enforced through LDAP scripted authentication. It started with streaming database audit telemetry through DB Connect, so security and operations could finally see the data layer in the same pane as everything else.

prev
sha256
statepending

2019 – 2020

DevOps Engineer

Automating the path from commit to production.

Infrastructure as code, pipeline build-out, and configuration management across Linux estates. This is where I learned what a control costs a delivery team when it arrives as a review meeting instead of a step in the workflow. Security that cannot keep pace with provisioning is security that gets routed around.

prev
sha256
statepending

2012 – 2019

Database Engineer

Oracle, MySQL and SQL Server estates, including the FDA program in Rockville, Maryland.

Data Guard standbys and Always On availability groups for availability. Backup validation and documented restore tests for integrity. Least-privilege grants, encryption at rest, and masking of sensitive fields before any production clone reached a lower environment. The CIA triad, lived daily from inside the data layer.

prev
sha256
statepending
Integrity verification 5 records · SHA-256 chain Verify

Each entry above is fingerprinted with SHA-256 over its own text plus the fingerprint of the entry below it, so the five form a chain running from the oldest role up to the current one. Change one word and every entry above it stops matching. The digests are recomputed in your browser from the text on screen, not read from a file, so editing this page in devtools really does break it.

idle
head
02

Expertise
01

CMMC & Security Compliance

Taking a contractor from a scoping conversation to an assessment they can pass, without pretending the gap analysis is the hard part. The evidence trail is the hard part.

CMMC Level 2 · NIST SP 800-171 · SSP · POA&M · C3PAO preparation

02

Cloud & Platform Security

Moving federal systems through the authorization cycle without losing the ATO, and hardening the estate underneath so the next assessment is cheaper than the last.

AWS · Azure · Kubernetes · NIST RMF · SP 800-53 · Security Impact Analysis

03

Detection Engineering

Detections analysts keep, because I have owned the platform underneath them and know what a bad one costs the queue on a Monday morning.

Splunk Enterprise Security · Risk-based alerting · CIM · Index-time masking

03

Credentials
CISSP ISC2 Valid through 2029 CMMC-CCP ISACA Issued 2026 PMP Project Management Institute Valid through 2029
Complete credential history 
Azure Fundamentals Microsoft Issued 2020 Oracle Database 11g Administrator, Certified Professional Oracle Issued 2018 Oracle Database 11g Administrator, Certified Associate Oracle Issued 2016 CKA: Certified Kubernetes Administrator The Linux Foundation Lapsed 2024 CKS: Certified Kubernetes Security Specialist The Linux Foundation Lapsed 2023 Splunk Enterprise Security Certified Admin Splunk Lapsed 2023 Splunk Enterprise Certified Admin Splunk Lapsed 2023 AWS Solutions Architect, Professional Amazon Web Services Lapsed 2021 AWS Solutions Architect, Associate Amazon Web Services Lapsed 2021
04

Writing

Occasional notes on CMMC scoping, detection engineering, and getting federal systems authorized without grinding delivery to a halt.

05

Let's talk about where the bottleneck sits.
Olanrewaju David Kehinde

I am open to security engineering and GRC work, federal or defense industrial base, on staff or through Token LLC. If you have a provisioning pipeline that security keeps getting routed around, that is the conversation I want to have.