12+ years of battle-tested experience in architecting bulletproof digital infrastructures. Specialized in bridging the gap between DevOps and Security to build resilient, threat-resistant systems for global enterprises.
YEARS
EXPERIENCE
Certifications
Trainings
I am a dedicated Infrastructure & Security Specialist with over a decade of experience in building and defending complex digital environments. My journey began in the trenches of technical support, where I forged a deep-rooted expertise in Linux, Windows Server, and enterprise-grade virtualization.
Architecting resilient DevOps pipelines and robust cybersecurity frameworks.
Integrating AI-assisted development into my workflow for smarter engineering.
Beyond the Console: When I'm not securing systems, I'm an avid trekker and adventurous sports enthusiast, always seeking the next peak to conquer.
Fueling Tech Evolution for more than a Decade
Architecting and securing enterprise multi-cloud environments with a focus on defense-in-depth, zero-trust architectures, and robust security posture management. Driving Secure SDLC practices by embedding threat modeling, automated SAST/DAST security gates, and DevSecOps controls into CI/CD pipelines. Leading AI Security governance to protect machine learning workloads, foundation models, and agentic workflows against adversarial threats, data exposure, and model vulnerabilities.
I manage end-to-end operational security, including policy compliance, SOC oversight, vulnerability management, and security control tuning. I lead the coordination with outsourced SOC and vulnerability management providers, ensuring SLA adherence, MITRE ATT&CK coverage, and continuous improvement through red/purple team exercises. I also drive incident handling, documentation, risk identification, and audit support while delivering metrics that demonstrate the effectiveness of security controls.
Built and led a dynamic team of 6 security professionals, empowering them to fortify the organization's digital infrastructure against cyberattacks. Developed and deployed advanced alerting systems, enabling the team to swiftly identify and respond to security threats.
Streamlining Build Processes through Docker and Related Technologies. Overseeing and Enhancing Continuous Delivery Systems such as Jenkins. Proficient in Bug Analysis and Collaborative Coordination with Development and QA Teams.
Extensive Proficiency in McAfee Server Security Suite Components including MOVE AV, HIPS, Application Control (Solidcore), ENS, and DAM. In-depth Knowledge of McAfee DLP Products such as NDLP Prevent, NDLP Monitor, and Host DLP. Skilled in Vulnerability Assessment leveraging tools like Nessus and NMAP. Hands-on Experience in DNIF SIEM Tool for Security Operations and Incident Management.
Proficient in Linux Server Installation, Configuration, and Ongoing Troubleshooting, addressing Day-to-Day Operational Challenges. Expertise in Live Production Server Deployments, as well as Strategic Planning, Scheduling, and Implementation of OS Patches for Security and Stability. Conducted Comprehensive Vulnerability Assessments with Nmap Scans on Linux Servers, ensuring System Integrity and Security. Proactively Monitored Linux Server Performance, including CPU, Memory, Disk Utilization, and Error Handling, utilizing Monitoring Tools such as Nagios and Munin.
I worked extensively on Windows Server administration, handling configuration, troubleshooting, and performance optimization. I managed ASA firewalls, ensuring secure network access, VPN configuration, and policy enforcement. I also supported enterprise networks by configuring and maintaining Cisco routers and switches to ensure stable and efficient connectivity.
Threat Detection • Network Security • VAPT • EDR • IDS/IPS • SIEM • Incident Response • Security Operations Center • IAM • Security Risk Management
CI/CD • Containerization • Monitoring • Version Control • Scripting • Automation • Security • Networking • AWS • Azure • GCP
Linux • ELK Stack • Open Source • Portainer • VMWare • Windows Server • Analytical • Problem-solving • Project Management
Validated Expertise in Cloud Security, Architecture & Threat Defense
Implementing security controls, threat protection, and managing identity & access across Azure infrastructure (AZ-500).
Foundational mastery of security principles, network defense, access controls, incident response, and business continuity.
Designing resilient, high-performing, secure, and cost-optimized multi-tier architectures on AWS cloud.
Hardening cloud workloads, vulnerability management, and regulatory compliance posture across Azure compute and storage.
Configuring security alerts, threat detection engines, and automated security incident response protocols.
Implementing cloud security baselines, identity governance, zero-trust architectures, and policy enforcement.
Advanced log analysis, behavioral anomaly detection, and SIEM correlation rules for threat identification.
Ensuring infrastructure continuity, risk mitigation, zero-downtime recovery, and defensive resilience against cyber disruptions.
Comprehensive cybersecurity principles, cryptography, security hygiene, and foundational cyber risk assessment.