Tyler Wengerd

Senior Cloud Architect I

"Tenacious"

he/him

Cloud Architect with 10+ years of cloud expertise, both on AWS and GCP. Focused on security, networking, and IaC.

When I'm not at work, you might find me riding my bicycle or playing the ukulele (not simultaneously).

Security
Networking
AWS
GCP

My Certifications

AWS Certified Advanced Networking – Specialty
AWS (last renewed/obtained: Jun 17, 2024)
AWS Certified Developer – Associate
AWS (last renewed/obtained: Sep 16, 2024)
AWS Certified DevOps Engineer – Professional
AWS (last renewed/obtained: Sep 16, 2024)
AWS Certified Security – Specialty
AWS (last renewed/obtained: Apr 15, 2024)
AWS Certified Solutions Architect - Associate
AWS (last renewed/obtained: Aug 15, 2015)
AWS Certified Solutions Architect - Professional
AWS (last renewed/obtained: Aug 12, 2017)
AWS Certified SysOps Administrator - Associate
AWS (last renewed/obtained: Sep 16, 2024)
AWS Partner: Accreditation (Technical)
AWS (last renewed/obtained: Aug 25, 2025)
Google Cloud Professional Cloud Architect
Google (last renewed/obtained: Dec 5, 2025)
Google Cloud Professional Cloud Security Engineer
Google (last renewed/obtained: Sep 26, 2025)
Hashicorp Certified Terraform Associate
Hashicorp (last renewed/obtained: Feb 21, 2025)
Hashicorp Certified Terraform Authoring and Operations Professional
Hashicorp (last renewed/obtained: Feb 21, 2025)

What my customers say

5.0/ 5across 8 reviews customers left for me in the last 90 days

Excellent support from do it

lit-transit.com · Apr 2026

The AWS response made sense to stop the bad actor by locking the account down, but it applied to all users, and we had no way to re-enable trusted users for example to begin recovery, remediation, and forensics. While we hope to not encounter this scenario this way again, it's also true that the AWS response could have made things worse in that we would not have had any options to mitigate a worse breach other than begin to shut down our AWS services to halt an unknown in-progress actor, and generally further lock things down to eventually rebuild, causing undue harm to the business.

going.com · Jun 2025

I wanted to express my sincere appreciation for the exceptional support regarding the 503 errors we encountered. Your thorough investigation and prompt responses provided us with immense peace of mind, clarifying the independent operation of CloudFront's DDoS protection and its ability to block suspicious requests before they reach the WAF. Your detailed explanations were incredibly helpful in understanding the situation, and we are truly grateful for your ongoing vigilance and proactive assistance.

leadtech.com · Jun 2025

1 / 15

What I'm writing

Get my new posts in your inbox →

What I've open-sourced

Browse all my contributions.

Frequently asked
questions

I want to improve my AWS account's security. Where do I start?

AWS has a Top 10 list here that I constantly reference. Beyond that, the list of tools never ends.

Want to learn more? We do security assessments all the time for DoiT customers, and I'd be happy to help you out. We also can automatically generate security insights for you!

I'm used to (AWS/GCP) and I'm trying to learn (GCP/AWS). What are some big differences?

One big difference I had to get used to is how they handle IAM:

- AWS IAM roles are similar to Google Cloud's Service accounts. Google's service accounts and AWS IAM role can both be assigned to resources to give them permissions.
- Google IAM roles are sets of permissions, similar to AWS IAM policies
- If you need external access to AWS from a service, traditionally you created an IAM user with an access key. Google allows you to create keys for service accounts. These days, IAM Roles Anywhere are recommended, instead of IAM users, to allow external service access to AWS.

Some other differences I see are how VPCs are global in GCP vs. regional in AWS, and GCP also can use network tags for firewall rules, as opposed to base CIDRs or security group references in AWS.

I might add a non-network/security answer here eventually. Keep an eye out!

What is a JA4 fingerprint?

Wow, great question. I've written up a blog post about just that topic. Have a look and let me know if you have any questions or suggested improvements!

Terraform? CloudFormation? Something else?

I'm team Terraform (or OpenTofu) 95% of the time.

_{Disagree? That's okay – different strokes for different folks}

Do you like dogs?

I love dogs! (See the GIF FAQ below.) I also love cats. Most animals, really. Snakes and lizards are cool and I enjoy seeing them in the wild and in my yard. Goats seem like a lot of fun, but they need way more space than I have right now. But yeah, uh, dogs! Dogs are great.

What's your favorite GIF?

Got 53 minutes? Check out this episode of DoiT's Cloud Masters podcast:

Time zone not a fit?

I'm on US Eastern time, but sometimes you need someone closer. That's fine, everyone needs to sleep. Here are my esteemed colleagues across nine timezones, so you can find one who works with your schedule.

-12

-11

-10

-9

-8

-7

-6

-5

-4

-3

-2

-1

+10

+11

+12

+13

+14

UTC-8
6 FDEs
AWS Core Services×3AWS AI/ML×2AWS DevOps×2
+1
UTC-7
5 FDEs
Google Cloud Kubernetes×2Google Cloud Networking×2AI×1
UTC-6
6 FDEs
AI×1Aurora×1AWS×1
+1
UTC-5
25 FDEs
AWS Core Services×6AWS DevOps×5AWS Security and Identity×5
+20
UTC
10 FDEs
AWS Core Services×3AWS Networking×3AWS×2
+5
UTC+1
21 FDEs
BigQuery×3AWS×2AWS Kubernetes×2
+16
UTC+2
13 FDEs
AWS Core Services×4AWS Databases×4AWS Networking×4
+8
UTC+8
2 FDEs
Amazon Aurora×1Amazon Bedrock×1Amazon RDS×1
UTC+9
2 FDEs
AWS Core Services×2AWS DevOps×1AWS Networking×1
UTC+10
2 FDEs
AWS Kubernetes×1AWS Serverless×1Google Cloud DevOps×1
UTC+11
4 FDEs
AWS Databases×2AWS×1AWS AI/ML×1

DoiT Cloud Intelligence — by the numbers

Updated May 20, 2026, 10:15 PM

Customer satisfaction

Based on the last 28 days

Median first reply time

Urgent (P1)m
High (P2)m
Normal (P3)m
Low (P4)m

Top engagements by technology

Amazon RDS
Amazon EC2
Amazon Elastic Kubernetes Service (EKS)
Vertex AI platform
Cloud SQL

Completed engagements

All time

Open engagements

As of May 20, 2026

Unassigned requests

As of May 20, 2026

What customers are saying

thank you for your help
Today
AWS errors were either non-existent or unhelpful. The DoiT agent, Steve, was very helpful and knowledgeable.
Today
Chabane provides me all needed information in time.
Today
Brian has continued to provide great support
Today
I submitted a request for some BigQuery / Billing support late yesterday and Sayle made an initial response very quickly and we had an exchange to run one test and he was able to narrow down the problem domain successfully. He then engaged with his team and I now have a working solution in place in less than 24 hours. Great Support.
Today
someone in my team has opened a separate ticket for this hence closing it.
Today
Insightful conversation. We addressed all outstanding points and received valuable feedback on the new architecture plan.
Today
Your charity list needs to consist of more organizations that donate to animal welfare and protection of the planet and wildlife from our species destroying it all
Today
The team helped me understand what steps were necessary and walked me through it
Today
The response was prompt and the representative was clear.
Today
Miguel de Lucas Manzano gave me a report with actioniable insights on BigQuery that I was able to use. Thank you Miguel !
Today
Joshua provided detailed explanations and clear guidance on our available options for handling our issue.
Today
Nikhil was very helpful in helping me track down exactly how to auto clone some repos into Sagemaker. In addition, the extra effort to provide the documentation was very helpful!
Today
very good response and right problem resolution first time.
Today
Bogdan was really helpful and kept me posted throughout their investigation
Today
thank you
Today
Very fast and clear response, Much appreciated
Today
thank you for your help
Today
The support engineer showed great initiative, providing solutions that went beyond his scope of work and demonstrating a high degree of proactivity.
Today
Joseph, Just wanted to say — this was an exceptionally thorough and professional investigation. The level of detail and clarity you provided goes above and beyond, and we truly appreciate it. Thank you for your support.
Today
thank you for your help
Today
AWS errors were either non-existent or unhelpful. The DoiT agent, Steve, was very helpful and knowledgeable.
Today
Chabane provides me all needed information in time.
Today
Brian has continued to provide great support
Today
I submitted a request for some BigQuery / Billing support late yesterday and Sayle made an initial response very quickly and we had an exchange to run one test and he was able to narrow down the problem domain successfully. He then engaged with his team and I now have a working solution in place in less than 24 hours. Great Support.
Today
someone in my team has opened a separate ticket for this hence closing it.
Today
Insightful conversation. We addressed all outstanding points and received valuable feedback on the new architecture plan.
Today
Your charity list needs to consist of more organizations that donate to animal welfare and protection of the planet and wildlife from our species destroying it all
Today
The team helped me understand what steps were necessary and walked me through it
Today
The response was prompt and the representative was clear.
Today
Miguel de Lucas Manzano gave me a report with actioniable insights on BigQuery that I was able to use. Thank you Miguel !
Today
Joshua provided detailed explanations and clear guidance on our available options for handling our issue.
Today
Nikhil was very helpful in helping me track down exactly how to auto clone some repos into Sagemaker. In addition, the extra effort to provide the documentation was very helpful!
Today
very good response and right problem resolution first time.
Today
Bogdan was really helpful and kept me posted throughout their investigation
Today
thank you
Today
Very fast and clear response, Much appreciated
Today
thank you for your help
Today
The support engineer showed great initiative, providing solutions that went beyond his scope of work and demonstrating a high degree of proactivity.
Today
Joseph, Just wanted to say — this was an exceptionally thorough and professional investigation. The level of detail and clarity you provided goes above and beyond, and we truly appreciate it. Thank you for your support.
Today

Insights by human experts

Preventable cloud waste

All time

Realized cost savings

All time

Budgets tracked per customer

Avg. $38,857 risk per customer

Anomalies detected per customer

Avg. $56,642 risk per customer

Engagements by cloud provider (90d)

Amazon Web Services
Google Cloud
Azure

Security Insights per customer

As of May 20, 2026

FinOps Insights per customer

As of May 20, 2026

Managed cloud spend (3y)

As of May 20, 2026

Managed commitments

Total value of $4.57B as of May 20, 2026

AWS Certified Advanced Networking – Specialty

AWS Certified Developer – Associate

AWS Certified DevOps Engineer – Professional

AWS Certified Security – Specialty

AWS Certified Solutions Architect - Associate

AWS Certified Solutions Architect - Professional

AWS Certified SysOps Administrator - Associate

AWS Partner: Accreditation (Technical)

Google Cloud Professional Cloud Architect

Google Cloud Professional Cloud Security Engineer

Hashicorp Certified Terraform Associate

Hashicorp Certified Terraform Authoring and Operations Professional

JA3 and JA4 Fingerprints in AWS WAF and Beyond

Sharing Secrets in AWS Parameter Store

enigmango/bigip.space

enigmango/open-yale-courses-rss

Frequently askedquestions

Time zone not a fit?

DoiT Cloud Intelligence — by the numbers

Customer satisfaction

Median first reply time

Top engagements by technology

Completed engagements

Open engagements

Unassigned requests

What customers are saying

Insights by human experts

Preventable cloud waste

Realized cost savings

Budgets tracked per customer

Anomalies detected per customer

Engagements by cloud provider (90d)

Security Insights per customer

FinOps Insights per customer

Managed cloud spend (3y)

Managed commitments

Frequently asked
questions