Muhammad Abdullah Tariq

Professional Summary

Cloud Security Architect and DevSecOps leader — among the world's youngest CISSPs at 22 — with 7+ years architecting enterprise infrastructure across AWS, Azure, GCP, Oracle Cloud, VMware, and on-prem. Expertise spans Zero Trust architecture, IAM governance, threat modeling, Kubernetes security, SIEM/SOAR operations, and incident response. My role at ibex evolved from DevOps engineering into Enterprise AI Enablement: I now drive the CTO's AI transformation agenda across 23 global sites — running 8 parallel AI adoption tracks, FinOps across 800+ resources, and enterprise synthetic monitoring. Founded SOCIRIS (AI-powered IDS/IPS) and built a self-evolving 10-agent AI council (The Sovereign Court) running 150+ cron jobs in production. Platform engineering practitioner building secure, scalable systems with encryption, API security, and risk assessment baked in. Hafiz-ul-Quran; faith-driven engineer.

Key Achievements

5 multi-cloud production environments across AWS · Azure · GCP · Oracle — 50+ apps at 99.9% uptime, now scaling to 23 global sites.
Enterprise AI Enablement: Driving CTO's AI transformation — 8 parallel AI tracks, 34 CTO-level briefings delivered, 15+ enterprise initiatives across 800+ cloud resources.
Enterprise Synthetic Monitoring Platform (PULSE): Built from zero — multi-site, multi-client, AI-augmented. Datadog + SolarWinds + custom full-stack dashboard (FastAPI + React). Physical workstation model approved by VP leadership.
FinOps leadership: Cloud cost optimization across 800+ resources; rightsizing, commitment planning, and anomaly detection across multi-cloud estate.
45% security vulnerability reduction across 50+ microservices via DevSecOps pipelines (DAST/SAST in every CI/CD stage), container security scanning, and Kubernetes security hardening (admission controllers, network policies, RBAC).
10-agent AI council in production — The Sovereign Court: 150+ cron jobs, 176 skills, 1,161 Armory scripts, 162 Discord channels, self-evolving memory system on Oracle ARM.
100+ certifications across 15 issuers (all verifiable on Credly) · 893+ GitHub repositories · 24+ LinkedIn recommendations.

Technical Skills

Cloud: AWS · Azure · GCP · Oracle Cloud · VMware · HPE · Private Cloud · Platform Engineering

Orchestration: Kubernetes (EKS/AKS/GKE) · OpenShift · Docker · Helm · ArgoCD · Istio · Container Security

IaC: Terraform · Ansible · Puppet · OpenTofu · CloudFormation

CI/CD: GitLab CI · Jenkins · GitHub Actions · AWS CodePipeline · ArgoCD · Tekton

Security: CISSP · ISO 27001 · Zero Trust · IAM · Threat Modeling (STRIDE) · Incident Response · Container Security · DAST/SAST · API Security · Encryption · Cryptography · CIS Top 18 · MITRE ATT&CK

Identity & Access: IAM · RBAC · Least-Privilege · Federation · SSO · MFA · PAM

Monitoring & NMS: Datadog · SolarWinds · Wazuh (SIEM) · Grafana · Prometheus · ELK/EFK · Splunk (SIEM)

FinOps: AWS Cost Explorer · Azure Cost Mgmt · GCP Billing · CloudHealth · Spot.io

AI/ML: Claude · OpenAI · LangChain · RAG · Prompt Engineering · GitHub Copilot · Agentic AI · SOAR

Languages: Python · Bash · JavaScript · TypeScript · SQL · Go (learning)

Compliance: SOC 2 · ISO 27001/27017/27018 · PCI-DSS · GDPR · HIPAA · NIST CSF · COBIT · ITIL · Risk Assessment

Red Team: Kali Linux · Metasploit · Burp Suite · Nmap · Nessus · Qualys · Vulnerability Management · Penetration Testing

Spoken: English (native/bilingual) · Urdu (native) · Arabic (proficient) · Punjabi · Hindi · Persian · Turkish (basic)

Professional Experience

ibex — Principal Software Engineer (DevOps) → Enterprise AI Enablement Sep 2025 - Present

Karachi, Pakistan (Sky Tower, 24th Floor) · Hybrid · Full-time

Role evolved from multi-cloud DevOps into Enterprise AI Enablement — now driving the CTO's AI transformation agenda across 23 global sites and 5 enterprise clients.
Leading 8 parallel AI adoption tracks: SOC automation (SIEM/SOAR), infrastructure AI ops, FinOps intelligence, document intelligence, agentic workflows, and enterprise-wide Copilot rollout — all governed by IAM, threat modeling, and Zero Trust principles.
Built Enterprise Synthetic Monitoring Platform (PULSE) from zero — physical workstation model across client sites, integrated with Datadog + SolarWinds, full-stack dashboard (FastAPI + React + RBAC + SLA tracking). Approved by VP-level leadership.
Driving FinOps across 800+ cloud resources — rightsizing, commitment planning, anomaly detection, and cost attribution across multi-cloud estate.
Delivered 34 CTO-level technical briefings on AI strategy, monitoring architecture, and cloud economics.
Built Enterprise OGSM Platform — strategic planning tool cascading objectives across engineering teams with quarterly tracking.

SOCIRIS — Founder & Chief Executive Officer Jan 2025 - Present

Karachi, Pakistan · Full-time · sociris.com

Founded AI-powered IDS/IPS platform; architecting detection engineering + SOAR workflows, incident response playbooks, and threat modeling (STRIDE) that build on lessons from running production SOC/NOC at enterprise scale. Final year project at ILMA University.

Al Nafi International College — Lead CloudOps Manager Mar 2025 - Dec 2025

Markham, Ontario · Hybrid · Full-time

Led design + management of secure scalable cloud infrastructure supporting 50+ apps at 99.9% uptime; built enterprise NOC/SOC from scratch (Wazuh SIEM · Grafana · Prometheus · ELK/EFK · Splunk); implemented IAM governance, risk assessment, and incident response procedures.
Spearheaded SysOps + DevOps + SecOps + FinOps cross-functional collaboration — 75% cloud cost reduction via FinOps + AI-powered automation.

Al Nafi — DevSysOps Lead Manager Jul 2024 - Mar 2025

Markham, Ontario · Hybrid · Full-time

Led cross-functional dev/ops/security collaboration; defined org-wide security policies including IAM and access control; conducted pen tests, vulnerability management, and risk assessments; mentored juniors — reduced supervision overhead 60% while raising team efficiency 165%.

Al Nafi — Senior Manager CIO-Ops · DevSysOps Engineer · Cloud Infrastructure & Network Manager · earlier roles Sep 2019 - Jun 2024

Markham & Toronto · Hybrid · Full-time + Part-time (4.5+ years cumulative)

Progressed through Senior Manager CIO-Ops (2024), DevSysOps Engineer (2023), Cloud Infra & Network Manager (2022–23), Cyber R&D Analyst (2021), CODS Security Analyst (2021), Junior Cloud + Cyber Security Engineer (2019–21).
Designed/implemented secure scalable cloud + private cloud infrastructure; led security audits, penetration testing, vulnerability assessments; deployed SIEM (Wazuh/Splunk) with SOAR-driven incident response; ensured ISO 27001/27017/27018, PCI-DSS, CIS Top 18 compliance; drove encryption and API security standards.

Al Nafi Group (Annaafi E-Pay · Academy · Consulting) — Network Admin · IT Manager · Cloud Admin · Lecturer May 2021 - Dec 2025

Karachi · Hybrid · Concurrent positions across 4 entities

Concurrent roles: hybrid cloud + on-prem network admin (Annaafi E-Pay, 4+ yrs), IT manager (Academy, 4+ yrs), cloud + cybersecurity consultant (2413207 Ontario, 4+ yrs), DevSysOps & Cloud Lecturer (Al Nafi, 3+ yrs).
Implemented network security, BCP/DR, training programs; led IT specialist teams.

Education

BSc Cybersecurity & Cloud Computing — ILMA University, Karachi · Sep 2021 - Dec 2026 (4 courses remaining) · CGPA 3.75 · FYP: SOCIRIS
Advanced Cyber Security Diploma — IBA Karachi · Jul 2026 - Present
- Ethical hacking & penetration testing: AI-powered attacks, API security (Burp Suite, Postman), Windows/Linux/Active Directory exploitation, IoT, Bluetooth & cloud attacks
- Governance, risk & compliance: threat intelligence, cyber risk quantification, PECA/GDPR, ISMS policy development, BCP/DRP
- Standards & security monitoring: ISO 27001 ISMS, NIST RMF, MITRE ATT&CK, SIEM, audit simulation
- Digital forensics & incident response: live memory & filesystem analysis, Android/iOS forensics, cybercrime investigation, IR simulations
Diploma in AI Operations (EduQual Level 6) — Al Nafi International College · Sep 2024 - Jan 2026 · Grade A+
Islamic Sciences Diploma (4-year) — Dar Ul Quran, Rumaithiyah, Kuwait · Seerah, Tajweed, Hadith, Aqeedah, Fiqh, Tafseer · Mutawwer (Intermediate)
A-Levels (Commerce) — ISCP Khaitan, Kuwait
O-Levels (Sciences) — NPIS Hawalli, Kuwait
Hifz-Ul-Quran-AL-Kareem — Markaz-UL-Usman, Kuwait · Feb 2014 · 1st position
Nights & Weekends Season 5 — buildspace, San Francisco · Jun - Aug 2024 · Tech startup accelerator

Certifications

CISSP — Certified Information Systems Security Professional · ISC² · Apr 2021 (earned at age 22)
ISO/IEC 27001:2022 Lead Auditor — Mastermind Assurance · Nov 2025
AWS Advanced Networking — Specialty — Amazon Web Services · Feb 2022
Microsoft Cybersecurity Analyst Professional Certificate — Microsoft (Coursera) · Dec 2025
Google Cybersecurity Professional Certificate — Google (Coursera) · Nov 2025
Generative AI Cybersecurity & Privacy for Leaders Specialization — Vanderbilt University · Dec 2025
ISO 27001 Master (Implementer + Auditor for 27001/27017/27018) — Al Nafi · Aug 2021

Additional credentials (100+ across 15 issuers): Linux Foundation 22+ certs (DevSecOps, GitOps, Zero Trust, KEDA, OpenSSF Scorecard); Microsoft Learn Level 11 (112 modules · 22 paths · 173,850 XP · 76+ training hours); KodeKloud labs (CKS, Kubernetes, Terraform, Linux); AWS (Solutions Architect, Security Specialty, Cloud Practitioner); GCP (Cloud Architect, Cloud Engineer); Azure (Administrator, Security Engineer, Fundamentals); CompTIA (Security+, CySA+, PenTest+, Network+, Cloud+, A+, Server+); Terraform Associate; Docker DCA; Kubernetes CKA. Full list: credly.com/users/matx104. Currently pursuing: CKS (Kubernetes Security), CISM, CRISC, OSCP.

Featured Projects

The Sovereign Court — Production 10-agent, two-wing AI council on Oracle ARM: WAZIR (Ops · OpenClaw) + HAKIM (Research · Hermes) live, 8 more forging (HAFEEZ, HASEEB, BASEER, WAKEEL, RAFEEQ, AMEEN, RASHEED, MUNEER). 150+ cron jobs · 176 skills · 1,161 Armory scripts · 162 Discord channels · self-evolving living-memory system. Interactive showcase: PULSE, ARRIVAL, CONVERGENCE, DEEP TABLE, CHRONICLE.
SOCIRIS (sociris.com) — AI-powered IDS/IPS · Founder & CEO since Jan 2025 · Final year project.
Enterprise Synthetic Monitoring Platform (PULSE) — Built at ibex: synthetic monitoring across 23 sites, physical workstation model, Datadog + SolarWinds integration, FastAPI + React dashboard with RBAC and SLA tracking.
OMNI-GRC — AI-powered GRC automation across 8 frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF, GDPR, FedRAMP, CMMC); single scan feeds all compliance outputs.
PHAROX — Agent-agnostic control plane: 17-method adapter contract manages any AI agent through one dashboard. 101 endpoints, 20 tabs, 3 adapters (OpenClaw, Hermes, Odysseus).
The Armory — 1,161 bash scripts across 7 categories (security, DevOps, OSINT, productivity). Includes the monarch CLI for bare-metal workstation bootstrapping.
Personal site: matx104.com.pk — vanilla HTML/CSS/JS SPA · source github.com/matx104/CV · 893+ repos total.

Select Awards & Recognition

Award of Excellence — Youngest CISSP Graduate · Al Nafi International College · Feb 2025 (formal recognition of CISSP-at-22)
Future Leader Award (Champions of Tomorrow) 2024 · Server4Sale & ITCN Asia · Aug 2024
buildspace Nights & Weekends Season 5 Alumni · SF Bay Area · Aug 2024
Star Class Representative of 2024 · ILMA University · Jan 2025
1st Place — ILMA World Fusion Fest 2.0 (Representing Pakistan) · May 2024
1st Place — World Fusion Fest Futsal Tournament · ILMA University · May 2024
2nd Place — Debate Competition · World Fusion Fest 2.0 · May 2024
3rd Place — Techno Quiz · ILMA University · Feb 2022
2nd Place — Ethical Hacking Competition · ILMA University · Dec 2022
Star Volunteer — International Media Conference · ILMA University · Apr 2025
12th ICACST 2025 Appreciation Award · ILMA University · Apr 2025
Microsoft Learn Level 11 Achievement — 173,850 XP · 112 modules · 76+ training hours · 2022 - 2025
Plus additional awards across ILMA tournaments (Chess, Table Tennis), Al Nafi service recognitions, and academic merit.