Right to work: Require Skilled Worker Visa sponsorship · IELTS-ready
Languages & Personal
Languages: English (Native/Bilingual) · Urdu (Native) · Arabic (Proficient) · Punjabi · Hindi (Basic).
Driving Licence: Full.
Notice Period: Negotiable.
Professional Summary
Cloud Security Architect and DevSecOps lead with 7+ years architecting enterprise infrastructure across AWS, Azure, GCP, Oracle Cloud, and on-premise environments. CISSP-certified at 22. Specialist expertise in Zero Trust architecture, IAM governance, Kubernetes security, SIEM/SOAR operations, and incident response. Built multi-cloud DevOps platforms supporting 50+ applications at 99.9% availability and led FinOps across 800+ cloud resources. Deep familiarity with GDPR, ISO 27001/27017/27018, and SOC 2 control frameworks.
Education & Qualifications
Three bachelor’s-level credentials: BSc Cybersecurity & Cloud Computing (ILMA, HEC-verified) · EduQual Level 6 Diploma in AI Operations (RQF 6) · CISSP (RQF 7, master’s-equivalent)
Bachelor of Science in Cybersecurity & Cloud Computing — ILMA University, Karachi · HEC-verified · conferred 2026 · CGPA 3.75 · FYP: SOCIRIS
EduQual Level 6 Diploma in AI Operations — RQF bachelor’s-degree standard · Al Nafi International College · Grade A+
Forward-Deployed Engineering Executive Track (2026–28) — incl. PGP in Forward Deployed Engineering & Applied AI Solutions (FDE Academy); executed as production practicum leading enterprise observability adoption under CTO directive.
Professional Experience
ibex — Principal Software Engineer (DevOps) → Enterprise AI EnablementSep 2025 – Present
Karachi, Pakistan · Hybrid · Full-time
Leading the CTO's AI transformation programme across 23 global sites — 8 parallel AI adoption tracks including SOC automation (SIEM/SOAR), infrastructure AI ops, and FinOps intelligence, all governed by IAM, threat modelling, and Zero Trust principles.
Built an Enterprise Synthetic Monitoring Platform (PULSE) from zero — multi-site, multi-client, integrated with Datadog + SolarWinds, full-stack FastAPI + React dashboard with RBAC and SLA tracking. Approved by VP-level leadership.
Operating Datadog + SolarWinds observability at 23-site scale (9 synthetic suites, APM, NetFlow, SWQL); FinOps across 846 resources at 100% tagging; drove an APM quote from ~$100K to ~$40K/yr on real utilisation data.
Delivered 34 CTO-level technical briefings on AI strategy, monitoring architecture, and cloud economics.
Hybrid AWS + Azure architecture for a 23-site on-prem → cloud migration program — landing zones, security guardrails, architecture standards; observability extended to Azure Monitor & CloudWatch; authored RCA reports, vendor scorecards, and build-vs-buy memos.
Al Nafi International College — Lead CloudOps ManagerMar 2025 – Dec 2025
Markham, Ontario, Canada · Hybrid · Full-time
Led the design and management of secure, scalable cloud infrastructure supporting 50+ applications at 99.9% uptime; built an enterprise NOC/SOC from scratch (Wazuh SIEM · Grafana · Prometheus · ELK/EFK · Splunk).
Implemented IAM governance, risk assessment, and incident response procedures; achieved 75% cloud cost reduction via FinOps and AI-powered automation.
Al Nafi — DevSysOps Lead ManagerJul 2024 – Mar 2025
Markham, Ontario, Canada · Hybrid · Full-time
Led cross-functional development, operations, and security collaboration; defined organisation-wide security policies including IAM and access control; mentored junior engineers — reduced supervision overhead 60% whilst raising team efficiency 165%.
Al Nafi — Senior Manager CIO-Ops · DevSysOps Engineer · Cloud & Network ManagerSep 2019 – Jun 2024
Markham & Toronto, Ontario, Canada · Hybrid · 4.5+ years
Progressed through six roles (2019–2024): designed secure multi-cloud and private-cloud infrastructure; led security audits, penetration testing, and vulnerability assessments.
Deployed SIEM (Wazuh/Splunk) with SOAR-driven incident response; ensured ISO 27001/27017/27018, PCI-DSS, CIS Top 18, and SOC 2 compliance; established encryption and API security standards.
Built every student lab environment as DevSysOps & Cloud Lecturer — regulatory-compliance labs (PCI-DSS, HIPAA, CIS Controls Top 18), OWASP Top 10 / WSTG / MSTG testing, and IoT, SCADA & PLC security.
CISSP — Certified Information Systems Security Professional · ISC² — Exam Apr 2021 (age 22) · Certified Sep 2026 · RQF Level 7 (master’s equivalent)
ISO/IEC 27001:2022 Lead Auditor — Mastermind Assurance
AWS Advanced Networking — Specialty — Amazon Web Services
Microsoft Cybersecurity Analyst Professional Certificate — Microsoft
Google Cybersecurity Professional Certificate — Google
Generative AI Cybersecurity & Privacy for Leaders — Vanderbilt University
ISO 27001 Master (Implementer + Auditor for 27001/27017/27018) — Al Nafi
90+ additional certifications across 15 issuers (Linux Foundation, Microsoft Learn Level 11, KodeKloud, AWS, GCP, Azure, CompTIA, Docker, CNCF): full list at credly.com/users/matx104.
Selected Projects
PULSE — Enterprise Synthetic Monitoring Platform: Multi-site monitoring across 23 sites, physical workstation model, Datadog + SolarWinds integration, FastAPI + React dashboard with RBAC and SLA tracking.
Sovereign Court — Production multi-agent AI automation: 10 autonomous agents, 150+ scheduled jobs, self-evolving memory system on Oracle ARM infrastructure.
Bachelor of Science in Cybersecurity & Cloud Computing — ILMA University, Karachi · HEC-verified · conferred 2026 · CGPA 3.75 · FYP: SOCIRIS
Advanced Cyber Security Diploma (Post-Graduate) — IBA CICT, Karachi · 2026–Present · hands-on VAPT: Burp Suite · Nmap · Nuclei · ffuf · WPScan · Subfinder · Naabu · HTTPX · Metasploit · Wireshark
