Tyler Wengerd
- EN
Senior Cloud Architect I
"Tenacious"
he/him
Cloud Architect with 10+ years of cloud expertise, both on AWS and GCP. Focused on security, networking, and IaC.
When I'm not at work, you might find me riding my bicycle or playing the ukulele (not simultaneously).
- Security
- Networking
- AWS
- GCP
My Certifications
AWS Certified Advanced Networking – Specialty
AWS (last renewed/obtained: Jun 17, 2024)
Expires Jun 17, 2027
AWS Certified Developer – Associate
AWS (last renewed/obtained: Sep 16, 2024)
Expires Sep 16, 2027
AWS Certified DevOps Engineer – Professional
AWS (last renewed/obtained: Sep 16, 2024)
Expires Sep 16, 2027
AWS Certified Security – Specialty
AWS (last renewed/obtained: Apr 15, 2024)
Expires Apr 15, 2027
AWS Certified Solutions Architect - Associate
AWS (last renewed/obtained: Jul 9, 2026)
Expires Jul 9, 2029
AWS Certified Solutions Architect - Professional
AWS (last renewed/obtained: Jul 9, 2026)
Expires Jul 9, 2029
AWS Certified SysOps Administrator - Associate
AWS (last renewed/obtained: Sep 16, 2024)
Expires Sep 16, 2027
AWS Partner: Accreditation (Technical)
AWS (last renewed/obtained: Aug 25, 2025)
Expires Aug 25, 2028
Google Cloud Professional Cloud Architect
Google (last renewed/obtained: Dec 5, 2025)
Expires Dec 5, 2027
Google Cloud Professional Cloud Security Engineer
Google (last renewed/obtained: Sep 26, 2025)
Expires Sep 26, 2027
Hashicorp Certified Terraform Associate
Hashicorp (last renewed/obtained: Feb 21, 2025)
Expires Feb 21, 2027
Hashicorp Certified Terraform Authoring and Operations Professional
Hashicorp (last renewed/obtained: Feb 21, 2025)
Expires Feb 21, 2027
What my customers say
Quick and clear update. Great support.
planity.com · Oct 2026
What I'm writing
JA3 and JA4 Fingerprints in AWS WAF and Beyond
DoiT CREs dive into some of the latest client fingerprinting techniques with a focus on using them alongside AWS WAF
Sharing Secrets in AWS Parameter Store
Best practices for sharing secrets using AWS Parameter Store, and when does using AWS Secrets Manager makes more sense
Frequently asked
questions
What do you do at DoiT?
- - Run security assessments
- - Triage security incident investigations
- - Architect network and DNS designs
- - Troubleshoot permissions issues
- - Test out new features and services
Overall, though, I'm here because I like working with people and I like solving problems. If you're a person with a problem (who isn't?), maybe I can help.
I want to improve my security in AWS. Where do I start?
Want to learn more? We do security assessments all the time for DoiT customers, and I'd be happy to help you out. We also can automatically generate security insights for you!
I'm used to AWS (or GCP) and I'm trying to learn GCP (or AWS). What are some big differences?
- - AWS IAM roles are similar to Google Cloud's Service accounts. Google's service accounts and AWS IAM role can both be assigned to resources to give them permissions.
- - Google IAM roles are sets of permissions, similar to AWS IAM policies
- - If you need external access to AWS from a service, traditionally you created an IAM user with an access key. Google allows you to create keys for service accounts. These days, IAM Roles Anywhere are recommended, instead of IAM users, to allow external service access to AWS.
I might add a non-network/security answer here eventually. Keep an eye out!
What is a JA4 fingerprint?
Terraform? CloudFormation? Something else?
Disagree? That's okay – different strokes for different folks
Do you like dogs?
I love dogs! (See the GIF FAQ below.) I also love cats. Most animals, really. Snakes and lizards are cool and I enjoy seeing them in the wild and in my yard. Goats seem like a lot of fun, but they need way more space than I have right now. But yeah, uh, dogs! Dogs are great.
What's your favorite GIF?
Got 53 minutes? Check out this episode of DoiT's Cloud Masters podcast:
pro tip: it's only 35 1⁄3 minutes if you do 1.5x speedTime zone not a fit?
I'm on US Eastern time, but sometimes you need someone closer. That's fine, everyone needs to sleep. Here are my esteemed colleagues across plenty of timezones, so you can find one who works with your schedule.
- UTC-85 FDEsAWS Core Services×3AWS DevOps×3Amazon EC2×2
- UTC-74 FDEsAmazon AppStream 2.0×2Amazon EC2×2Amazon Elastic Block Store (EBS)×2
- UTC-65 FDEsAWS Core Services×2AWS DevOps×2AWS Kubernetes×2
- UTC-524 FDEsAWS Core Services×6AWS DevOps×6AWS Security and Identity×6
+19
- UTC10 FDEsAWS Core Services×4AWS Networking×4AWS Security and Identity×2
+5
- UTC+120 FDEsAWS Kubernetes×3BigQuery×3FinOps×3
+15
- UTC+213 FDEsAWS Core Services×4AWS Databases×4AWS Networking×4
+8
- UTC+82 FDEsAmazon Aurora×1Amazon Bedrock×1Amazon RDS×1
- UTC+92 FDEsAWS Core Services×2AWS DevOps×1AWS Networking×1
- UTC+102 FDEsAWS Kubernetes×1AWS Serverless×1Google Cloud DevOps×1
- UTC+114 FDEsAWS Core Services×2AWS Databases×2AWS AI/ML×1
We do awesome work!
Check our our stats.
Updated Oct 15, 2026, 5:15 AM
What customers are saying
More deeper dive into actual error logs would have been great. We circled around for stockout for few days without knowing whats happening underneath.
Today
Impeccable support
Today
More deeper dive into actual error logs would have been great. We circled around for stockout for few days without knowing whats happening underneath.
Today
GCP status pages are too slow to update. Yet another case that wouldn't have been a case if Google admitted to incidents quicker!
Today
In short, I would have expected AWS to make the bcrypt limit something that can be configured by us. We ended up getting this update out of the blue and there is nothing publicly shared about it aside from the open pull request into mainline opensearch. Diego was super helpful, I appreciate how fast we received confirmation of the issue and the amount of technical details we received.
Today
Doit support team provided good ideas and directions. We were able to solve the issue. Thanks!
Today
doit support was great. However the AWS support took way too long to resolve an issue on their side
Today
good info, helped find a solution
Today
Birger explained what was going on and what I needed to know about BQ storage. I am hoping the costs get lower in the next few days.
Today
Quick and clear update. Great support.
Today
I submitted a ticket and within a day the problem was solved. Can't ask for more than that! Your guy got Google to fix something, wow.
Today
Issue was not resolved, but your specialist did try to help me all the ways he could and I appreciate that.
Today
Firebase sent wrong alert three four days ago with hosting download bandwidth limit breach. I contacted Firebase support and they assured me that the it was false alarm. Yesterday, this resulted in 1h30min outage of our website.
Today
The person handling the ticket fully understood my issue, ran tests on their end to reproduce it, and then quickly consulted the product team to promptly fix the bug I was encountering. Thank you
Today
Matt is always extremely diligent and thorough with both his investigations and his responses, and reliably gets to the root cause of issues, by meticulously eliminating possibilities. He's amicable and prompt.
Today
I use this service for personal and business features.
Today
Thanks for following up
Today
Great responses and very clear direction,
Today
Really happy with how Joseph handled the issue and his expertise in AWS. His troubleshooting did not only stop to AWS, but he looked into the software we use(litellm) and personally I learned some details of how AWS networking works.
Today
Joe was very helpful and gave us great advice specific to our problem.
Today