Muhammad Abdullah Tariq — CV (GCC / Gulf)

Professional Summary

Cloud Security Architect and DevSecOps leader with 7+ years architecting enterprise infrastructure across AWS, Azure, GCP, Oracle Cloud, and on-premises. CISSP-certified at 22. Expertise spans Zero Trust architecture, IAM governance, Kubernetes security, SIEM/SOAR operations, and incident response. Built multi-cloud platforms supporting 50+ applications at 99.9% uptime and led FinOps across 800+ resources. Holds 13 years of prior residency in Kuwait with proficient Arabic — a strong regional fit for GCC enterprises. Deeply familiar with ISO 27001/27017/27018, PCI-DSS, SOC 2, and NCA/PDPL-style regulatory frameworks.

Core Competencies

Cloud Security: AWS · Azure · GCP · Oracle Cloud · CSPM · CNAPP · Zero Trust
DevSecOps: CI/CD pipelines with DAST/SAST · Container & Kubernetes security · IaC (Terraform)
Security Operations: SIEM/SOAR (Wazuh · Splunk) · Incident Response · Threat Modelling (STRIDE) · Vulnerability Management
Identity & Access: IAM · RBAC · Least-Privilege · Federation · SSO · MFA · PAM
Compliance & Governance: ISO 27001/27017/27018 · PCI-DSS · SOC 2 · NIST CSF · GDPR · CIS Top 18
FinOps & Platform Engineering: Multi-cloud cost optimisation · Kubernetes (EKS/AKS/GKE) · OpenShift · ArgoCD

Professional Experience

ibex — Principal Software Engineer (DevOps) → Enterprise AI Enablement Sep 2025 – Present

Karachi, Pakistan · Hybrid · Full-time

Leading the CTO's AI transformation agenda across 23 global sites — 8 parallel AI tracks including SOC automation (SIEM/SOAR), infrastructure AI ops, and FinOps intelligence.
Built the Enterprise Synthetic Monitoring Platform (PULSE) from zero — multi-site, Datadog + SolarWinds integration, FastAPI + React dashboard with RBAC and SLA tracking.
Driving FinOps across 800+ cloud resources and delivering 34 CTO-level technical briefings on cloud economics and security architecture.

Al Nafi International College — Lead CloudOps Manager Mar 2025 – Dec 2025

Markham, Ontario, Canada · Hybrid · Full-time

Led secure cloud infrastructure for 50+ apps at 99.9% uptime; built enterprise NOC/SOC from scratch (Wazuh · Grafana · Prometheus · ELK/EFK · Splunk).
Achieved 75% cloud cost reduction via FinOps and AI-powered automation; implemented IAM governance, risk assessment, and incident response.

Al Nafi — DevSysOps Lead Manager & earlier roles Sep 2019 – Mar 2025

Markham & Toronto, Ontario, Canada · Hybrid · 5.5+ years

Progressed through six roles (2019–2025): designed secure multi-cloud and private-cloud infrastructure; led security audits, penetration testing, and vulnerability assessments.
Deployed SIEM (Wazuh/Splunk) with SOAR-driven incident response; ensured ISO 27001/27017/27018, PCI-DSS, CIS Top 18, and SOC 2 compliance; mentored juniors — 60% less supervision overhead, 165% higher team efficiency.

SOCIRIS — Founder & Chief Executive Officer Jan 2025 – Present

Karachi, Pakistan · sociris.com

Founded an AI-powered IDS/IPS platform — detection engineering, SOAR workflows, incident response playbooks, and STRIDE threat modelling.

Education

BSc Cybersecurity & Cloud Computing — ILMA University, Karachi · CGPA 3.75
Advanced Cyber Security Diploma — IBA Karachi · 2026–Present
Diploma in AI Operations (EduQual Level 6) — Al Nafi International College · Grade A+
Islamic Sciences Diploma (4-year) — Dar Ul Quran, Rumaithiyah, Kuwait · Seerah · Tajweed · Hadith · Aqeedah · Fiqh · Tafseer
Hifz-ul-Quran-al-Kareem — Markaz-UL-Usman, Kuwait · Feb 2014 · 1st Position
A-Levels (Commerce) — ISCP Khaitan, Kuwait · O-Levels (Sciences) — NPIS Hawalli, Kuwait

Certifications

CISSP — Certified Information Systems Security Professional · ISC² (earned at age 22)
ISO/IEC 27001:2022 Lead Auditor — Mastermind Assurance
ISO 27001 Master (Implementer + Auditor for 27001/27017/27018) — Al Nafi
AWS Advanced Networking — Specialty — Amazon Web Services
AWS Certified Security — Specialty — Amazon Web Services
AWS Certified Solutions Architect — Amazon Web Services
Microsoft Cybersecurity Analyst Professional Certificate — Microsoft
Azure Security Engineer Associate · Azure Administrator Associate — Microsoft
Google Cybersecurity Professional Certificate — Google
GCP Cloud Architect · GCP Cloud Engineer — Google Cloud
CKA — Certified Kubernetes Administrator · CNCF
CompTIA Security+ · CySA+ · PenTest+ · Network+ · Cloud+
Terraform Associate · Docker DCA
Generative AI Cybersecurity & Privacy for Leaders — Vanderbilt University
Linux Foundation — 22+ certs (DevSecOps · GitOps · Zero Trust · OpenSSF)
Microsoft Learn Level 11 — 112 modules · 22 paths · 173,850 XP

100+ certifications across 15 issuers, all verifiable at credly.com/users/matx104. Currently pursuing: CKS (Kubernetes Security) · CISM · CRISC · OSCP · CCSP.

Selected Projects

PULSE — Enterprise Synthetic Monitoring Platform: Multi-site monitoring across 23 sites, Datadog + SolarWinds, FastAPI + React dashboard with RBAC and SLA tracking.
Sovereign Court — Production multi-agent AI automation: 10 autonomous agents, 150+ scheduled jobs, self-evolving memory on Oracle ARM.
SOCIRIS — AI-powered IDS/IPS: Founder & CEO. sociris.com
OMNI-GRC: AI-powered GRC automation across 8 frameworks (SOC 2 · ISO 27001 · PCI-DSS · NIST CSF · GDPR · HIPAA · FedRAMP · CMMC).

Personal Details

Nationality: Pakistani 🇵🇰

Passport: Pakistan (ready for employment visa)

Date of Birth: 10 March 1999

Marital Status: Single

Visa Status: Seeking employer sponsorship (13 years prior residency in Kuwait)

Driving Licence: Valid

Notice Period: 30 days

Current Base: Karachi, Pakistan

Languages: English (Native/Bilingual) · Arabic (Proficient — 13 yrs Kuwait) · Urdu (Native) · Punjabi · Hindi (Basic) · Persian · Turkish (Basic)

References: Available on request.