Mahtabur Rahman

Certified Cloud and Cybersecurity Architect

Mahtabur Rahman

Cloud and security architecture that holds up under pressure.

I design Azure and hybrid cloud, Zero Trust security and enterprise networks, and I stay to run them. 14+ years, from Active Directory to a Sentinel-based security operations capability.

  • 14+ years in IT
  • Transcom Limited, Dhaka
  • Microsoft Cybersecurity Architect Expert

What I do

  • Azure and hybrid cloud design

    Architecture, migration and cost control for workloads moving off legacy systems.

    Delivered: 20% lower infrastructure cost at 99.9% uptime, and 30% lower operating cost after migrating to Azure.

  • Zero Trust architecture

    Identity, device, application and network controls built on least privilege and risk-based access.

    Delivered: MFA, conditional access and micro-segmentation across a Microsoft 365 E5 estate, with 75% fewer breaches.

  • SIEM and security operations

    Monitoring, alerting and response playbooks, plus the audits that tell you where you stand.

    Delivered: Microsoft Sentinel with SOAR (60% faster incident response), and Nessus scans that cleared 100% of critical CVEs.

  • Network modernization and SD-WAN

    Branch connectivity, Wi-Fi and segmentation managed from one place.

    Delivered: Cisco Meraki SD-WAN and wireless across 11 companies, with lower MPLS spend.

  • Data center, HCI, backup and recovery

    Virtualization and hyperconverged infrastructure with backups you can restore from.

    Delivered: VMware and Cisco HyperFlex (60% smaller footprint) and Acronis backup with no data loss.

  • Identity and Microsoft 365 migration

    Hybrid Active Directory, single sign-on and large mailbox moves done without disruption.

    Delivered: Azure AD and on-prem AD integration, and 3,500+ users moved to Exchange Online.

  • Security awareness and team mentoring

    People are part of the architecture. I train them and the engineers who run it.

    Delivered: 200+ staff trained across 7 group companies, and 8+ IT professionals mentored in cloud security and DevOps.

About

I lead cloud, cybersecurity and infrastructure work at Transcom Limited in Dhaka. I started in networks and Active Directory, moved into data center virtualization, and now design Azure environments, Zero Trust security and security operations for a group of companies.

I work across teams, manage cyber risk and tie each IT project to what the business needs.

Cloud and infrastructure

  • Hybrid and multi-cloud: Azure, GCP, AWS, VMware, Cisco HyperFlex
  • Enterprise network design: SD-WAN, Zero Trust networking, micro-segmentation
  • Hyperconverged infrastructure and virtualization

Cybersecurity and risk

  • Zero Trust architecture
  • Threat detection: SIEM, VAPT, Microsoft Sentinel
  • Data protection: backup and disaster recovery, encryption, compliance

Strategic execution

  • Cloud migration and modernization roadmaps
  • Cost-optimized infrastructure scaling
  • Stakeholder alignment and vendor management

Leadership

  • Mentoring cross-functional teams
  • Agile change management for technology adoption
  • Solving complex problems in changing environments

Experience

  1. Senior Cloud Engineer

    Transcom Limited · 2020 to present

    • Designed and deployed hybrid cloud solutions on Azure and GCP, cutting infrastructure costs by 20% while raising uptime to 99.9%.
    • Led large-scale migrations of legacy systems to Azure, cutting operational costs by 30% and improving reliability.
    • Improved performance efficiency by 25% through rightsizing, auto-scaling and better workload placement.
    • Implemented Microsoft Zero Trust security with MFA, conditional access and micro-segmentation, reducing breaches by 75%.
    • Ran security audits and vulnerability assessments, mitigating 90% of critical risks through patching and policy updates.
    • Trained 200+ employees on cybersecurity practice, reducing phishing susceptibility.
    • Administered VMware and Cisco HyperFlex HCI, shrinking the data center footprint by 60% and improving resource use.
    • Deployed Meraki SD-WAN, lowering MPLS costs and improving cross-site connectivity.
    • Managed Office 365 and Acronis Cyber Protect with automated backups and disaster recovery.
    • Mentored 8+ IT professionals in cloud security and DevOps, and led cross-functional projects aligned to business goals.
  2. System Administrator

    Transcom Limited · 2015 to 2020

    • Implemented Cisco HyperFlex hyperconverged infrastructure to modernize data center operations.
    • Optimized VMware virtualization to get more from existing resources, and reduced downtime with proactive monitoring.
    • Built backup strategies on Acronis Cyber Protect and real-time monitoring to catch problems early.
    • Negotiated contracts with vendors and suppliers.
  3. System Engineer

    Transcom Limited · 2011 to 2014

    • Administered enterprise Active Directory and monitored its performance and security.
    • Managed Kaspersky Endpoint Security and endpoint security policies across the organization.
    • Provided Level 2/3 network support and resolved complex connectivity issues across a hybrid radio and fiber network.

Key projects

  1. Microsoft Sentinel (SIEM) deployment · Transcom Group

    Cross-platform security monitoring and response, with automated alerting and SOAR playbooks that improved incident response efficiency by 60%.

  2. Hybrid Active Directory (Azure AD and on-prem) · Transcom Group

    Identity synchronization, single sign-on and Conditional Access for hybrid cloud workloads.

  3. Zero Trust security framework · Transcom Group

    A Zero Trust model across identity, device, application and network layers on Microsoft 365 E5, with least-privilege access and real-time risk-based conditional access.

  4. Vulnerability assessment · Transcom Data Center

    Full-spectrum scans with Nessus. Resolved 100% of critical CVEs through patching and configuration hardening.

  5. Cybersecurity awareness program · 7 group companies

    Workshops and simulated-attack training across seven companies to cut phishing incidents and raise security awareness.

  6. Cisco Meraki SD-WAN and wireless rollout · 11 companies

    Meraki MX95 and MX75 SD-WAN and Wi-Fi across branch offices, improving network efficiency, enforcing security policy and centralizing control.

  7. Microsoft 365 mail migration · Transcom Group

    Moved 3,500+ users from legacy email to Exchange Online, with integrated security and lower cost.

  8. Acronis Cyber Protect backup · Transcom Data Center

    End-to-end backup of virtual machines and databases that meets data retention policy and improves disaster recovery readiness.

  9. Cisco HyperFlex HCI deployment · Transcom Data Center

    Replaced traditional infrastructure with hyperconverged infrastructure for simpler management and faster application delivery.

  10. SharePoint document management system · SK+F Pharmaceuticals

    Digital documentation workflows, version control and secure collaboration between departments.

  11. urBackup for business users · Transcom Group

    Automated workstation backups across the enterprise to keep business-critical data recoverable.

  12. VMware vSphere with NetApp storage and Dell EMC servers · Transcom Data Center

    A virtualized data center that improved scalability and uptime.

  13. LAN and Wi-Fi infrastructure · SK+F Pharmaceuticals

    Resilient LAN and Wi-Fi at two manufacturing plants, supporting GMP-compliant operations.

  14. IP telephony system · Transcom Group

    Replaced legacy PBX across all Transcom companies, improving voice quality and reducing operating cost.

  15. Active Directory forest-tree architecture · Transcom Group

    A scalable AD structure for the whole group, with centralized authentication, delegation and group policy.

Credentials

Certifications

  • Microsoft Certified: Cybersecurity Architect Expert
  • Microsoft Certified: Azure Solutions Architect Expert
  • Microsoft Certified: Azure Administrator Associate
  • Microsoft Certified: Security Operations Analyst Associate
  • Microsoft Certified: Azure Fundamentals

Education

Masters in Information Systems and Security
Bangladesh University of Professionals (BUP), Dhaka

Professional training

  • Advanced Certificate for Management Professionals (ACMP), IBA, Dhaka University
    Dhaka
  • Microsoft Security Solutions, Trainocate
    Bangkok
  • Cisco Meraki SD-WAN, Inflow Technologies
    Singapore
  • Cisco HyperFlex, Hyperconverged Infrastructure, Cisco
    Bangalore
  • VMware vSphere: Install, Configure, Manage [V7], Koenig
    Bangalore
  • AZ-104 Microsoft Azure Administrator, Trainocate
    Colombo
  • AZ-500 Microsoft Azure Security Technologies, Trainocate
    Colombo
  • MS-500 Microsoft 365 Security Administration, Trainocate
    Colombo
  • AWS Certified Solutions Architect, CSL Training
    Dhaka
  • Active Directory, Network Bulls
    Gurgaon
  • Linux System Administration, Linux Pathshala
    Dhaka
  • CCNA, Cisco Certified Network Associate, AIUB
    Dhaka

Languages

  • EnglishFluent
  • BengaliNative
  • HindiConversational

Contact

Hiring for a cloud or security architect role, or planning a migration, a Zero Trust rollout or a security operations build? Connect with me on LinkedIn or send an email.