Certified Cloud and Cybersecurity Architect
Mahtabur Rahman
Cloud and security architecture that holds up under pressure.
I design Azure and hybrid cloud, Zero Trust security and enterprise networks, and I stay to run them. 14+ years, from Active Directory to a Sentinel-based security operations capability.
- 14+ years in IT
- Transcom Limited, Dhaka
- Microsoft Cybersecurity Architect Expert
What I do
Azure and hybrid cloud design
Architecture, migration and cost control for workloads moving off legacy systems.
Delivered: 20% lower infrastructure cost at 99.9% uptime, and 30% lower operating cost after migrating to Azure.
Zero Trust architecture
Identity, device, application and network controls built on least privilege and risk-based access.
Delivered: MFA, conditional access and micro-segmentation across a Microsoft 365 E5 estate, with 75% fewer breaches.
SIEM and security operations
Monitoring, alerting and response playbooks, plus the audits that tell you where you stand.
Delivered: Microsoft Sentinel with SOAR (60% faster incident response), and Nessus scans that cleared 100% of critical CVEs.
Network modernization and SD-WAN
Branch connectivity, Wi-Fi and segmentation managed from one place.
Delivered: Cisco Meraki SD-WAN and wireless across 11 companies, with lower MPLS spend.
Data center, HCI, backup and recovery
Virtualization and hyperconverged infrastructure with backups you can restore from.
Delivered: VMware and Cisco HyperFlex (60% smaller footprint) and Acronis backup with no data loss.
Identity and Microsoft 365 migration
Hybrid Active Directory, single sign-on and large mailbox moves done without disruption.
Delivered: Azure AD and on-prem AD integration, and 3,500+ users moved to Exchange Online.
Security awareness and team mentoring
People are part of the architecture. I train them and the engineers who run it.
Delivered: 200+ staff trained across 7 group companies, and 8+ IT professionals mentored in cloud security and DevOps.
About
I lead cloud, cybersecurity and infrastructure work at Transcom Limited in Dhaka. I started in networks and Active Directory, moved into data center virtualization, and now design Azure environments, Zero Trust security and security operations for a group of companies.
I work across teams, manage cyber risk and tie each IT project to what the business needs.
Cloud and infrastructure
- Hybrid and multi-cloud: Azure, GCP, AWS, VMware, Cisco HyperFlex
- Enterprise network design: SD-WAN, Zero Trust networking, micro-segmentation
- Hyperconverged infrastructure and virtualization
Cybersecurity and risk
- Zero Trust architecture
- Threat detection: SIEM, VAPT, Microsoft Sentinel
- Data protection: backup and disaster recovery, encryption, compliance
Strategic execution
- Cloud migration and modernization roadmaps
- Cost-optimized infrastructure scaling
- Stakeholder alignment and vendor management
Leadership
- Mentoring cross-functional teams
- Agile change management for technology adoption
- Solving complex problems in changing environments
Experience
-
Senior Cloud Engineer
- Designed and deployed hybrid cloud solutions on Azure and GCP, cutting infrastructure costs by 20% while raising uptime to 99.9%.
- Led large-scale migrations of legacy systems to Azure, cutting operational costs by 30% and improving reliability.
- Improved performance efficiency by 25% through rightsizing, auto-scaling and better workload placement.
- Implemented Microsoft Zero Trust security with MFA, conditional access and micro-segmentation, reducing breaches by 75%.
- Ran security audits and vulnerability assessments, mitigating 90% of critical risks through patching and policy updates.
- Trained 200+ employees on cybersecurity practice, reducing phishing susceptibility.
- Administered VMware and Cisco HyperFlex HCI, shrinking the data center footprint by 60% and improving resource use.
- Deployed Meraki SD-WAN, lowering MPLS costs and improving cross-site connectivity.
- Managed Office 365 and Acronis Cyber Protect with automated backups and disaster recovery.
- Mentored 8+ IT professionals in cloud security and DevOps, and led cross-functional projects aligned to business goals.
-
System Administrator
- Implemented Cisco HyperFlex hyperconverged infrastructure to modernize data center operations.
- Optimized VMware virtualization to get more from existing resources, and reduced downtime with proactive monitoring.
- Built backup strategies on Acronis Cyber Protect and real-time monitoring to catch problems early.
- Negotiated contracts with vendors and suppliers.
-
System Engineer
- Administered enterprise Active Directory and monitored its performance and security.
- Managed Kaspersky Endpoint Security and endpoint security policies across the organization.
- Provided Level 2/3 network support and resolved complex connectivity issues across a hybrid radio and fiber network.
Key projects
Microsoft Sentinel (SIEM) deployment · Transcom Group
Cross-platform security monitoring and response, with automated alerting and SOAR playbooks that improved incident response efficiency by 60%.
Hybrid Active Directory (Azure AD and on-prem) · Transcom Group
Identity synchronization, single sign-on and Conditional Access for hybrid cloud workloads.
Zero Trust security framework · Transcom Group
A Zero Trust model across identity, device, application and network layers on Microsoft 365 E5, with least-privilege access and real-time risk-based conditional access.
Vulnerability assessment · Transcom Data Center
Full-spectrum scans with Nessus. Resolved 100% of critical CVEs through patching and configuration hardening.
Cybersecurity awareness program · 7 group companies
Workshops and simulated-attack training across seven companies to cut phishing incidents and raise security awareness.
Cisco Meraki SD-WAN and wireless rollout · 11 companies
Meraki MX95 and MX75 SD-WAN and Wi-Fi across branch offices, improving network efficiency, enforcing security policy and centralizing control.
Microsoft 365 mail migration · Transcom Group
Moved 3,500+ users from legacy email to Exchange Online, with integrated security and lower cost.
Acronis Cyber Protect backup · Transcom Data Center
End-to-end backup of virtual machines and databases that meets data retention policy and improves disaster recovery readiness.
Cisco HyperFlex HCI deployment · Transcom Data Center
Replaced traditional infrastructure with hyperconverged infrastructure for simpler management and faster application delivery.
SharePoint document management system · SK+F Pharmaceuticals
Digital documentation workflows, version control and secure collaboration between departments.
urBackup for business users · Transcom Group
Automated workstation backups across the enterprise to keep business-critical data recoverable.
VMware vSphere with NetApp storage and Dell EMC servers · Transcom Data Center
A virtualized data center that improved scalability and uptime.
LAN and Wi-Fi infrastructure · SK+F Pharmaceuticals
Resilient LAN and Wi-Fi at two manufacturing plants, supporting GMP-compliant operations.
IP telephony system · Transcom Group
Replaced legacy PBX across all Transcom companies, improving voice quality and reducing operating cost.
Active Directory forest-tree architecture · Transcom Group
A scalable AD structure for the whole group, with centralized authentication, delegation and group policy.
Credentials
Certifications
- Microsoft Certified: Cybersecurity Architect Expert
- Microsoft Certified: Azure Solutions Architect Expert
- Microsoft Certified: Azure Administrator Associate
- Microsoft Certified: Security Operations Analyst Associate
- Microsoft Certified: Azure Fundamentals
Education
Masters in Information Systems and Security
Bangladesh University of Professionals (BUP), Dhaka
Professional training
- Advanced Certificate for Management Professionals (ACMP), IBA, Dhaka UniversityDhaka
- Microsoft Security Solutions, TrainocateBangkok
- Cisco Meraki SD-WAN, Inflow TechnologiesSingapore
- Cisco HyperFlex, Hyperconverged Infrastructure, CiscoBangalore
- VMware vSphere: Install, Configure, Manage [V7], KoenigBangalore
- AZ-104 Microsoft Azure Administrator, TrainocateColombo
- AZ-500 Microsoft Azure Security Technologies, TrainocateColombo
- MS-500 Microsoft 365 Security Administration, TrainocateColombo
- AWS Certified Solutions Architect, CSL TrainingDhaka
- Active Directory, Network BullsGurgaon
- Linux System Administration, Linux PathshalaDhaka
- CCNA, Cisco Certified Network Associate, AIUBDhaka
Languages
- EnglishFluent
- BengaliNative
- HindiConversational
Contact
Hiring for a cloud or security architect role, or planning a migration, a Zero Trust rollout or a security operations build? Connect with me on LinkedIn or send an email.
