Senior enterprise, cloud and AI architect with 20+ years in technology architecture and operations — designing secure, resilient Agentic AI, RAG and Azure solutions for regulated enterprise environments.
I'm a senior enterprise, cloud and AI architect with 20+ years in technology architecture and operations, including 10+ years in enterprise cloud architecture and recent leadership in Agentic AI, RAG and AI-driven automation.
I have a strong hands-on architecture background in Microsoft Azure security controls, identity, networking, monitoring, DevOps/CI-CD, Kubernetes, Infrastructure as Code, disaster recovery and enterprise governance.
I specialise in translating architecture and operational requirements into secure, resilient and supportable solutions — and in coordinating technical teams and stakeholders to deliver them.
As a cyber security engineer, my focus is cloud, identity and secrets security: Entra ID, Azure Key Vault, service principals, managed identities, network security controls and Microsoft Sentinel — backed by long experience in security guidelines, patching, incident/change management, audit support, root-cause analysis and disaster recovery. I bring transferable knowledge for enterprise IAM/PAM and secrets-management environments: least privilege, just-in-time access, workload identity, credential protection, access governance, secret rotation and secure automation, with conceptual knowledge of platforms such as Delinea Secret Server and HashiCorp Vault.
From storage and Unix foundations to enterprise cloud and Agentic AI — end-to-end architecture across the full technology stack.
AI-driven automation for complex enterprise operational processes.
Enterprise Azure environments built with security-by-design.
Keeping critical services running through change.
Protecting the identities, credentials and secrets that cloud and AI workloads depend on — with least privilege, auditability and secure automation built in.
Entra ID / Azure AD access controls: RBAC, least privilege and PIM concepts such as time-bound/JIT activation, approvals, MFA, access reviews and auditability.
Protected storage and controlled retrieval of application secrets, keys and certificates, including access control, monitoring and rotation approaches.
Service principals and managed identities as non-human identities — limiting permissions and reducing reliance on long-lived embedded credentials.
Centralised credential vaulting, privileged-account lifecycle, rotation, approvals, audit trails, separation of duties, and static vs. dynamically issued credentials. Conceptual knowledge of enterprise PAM/secrets platforms such as Delinea Secret Server and HashiCorp Vault.
Security-by-design for scoped agent permissions, API and knowledge-source access, credential protection and auditability in AI-enabled workflows.
Linux/Unix security, patching, hardening guidelines, incident/change management, root-cause analysis, audit support and disaster recovery.
Designed the Azure Landing Zone for migrating AT&T on-premises workloads: a hub-and-spoke network with Azure Firewall, Bastion, AKS and VM spokes, governed by Azure Policy and protected by Defender for Cloud and Sentinel. Fully provisioned with Terraform through Azure DevOps pipelines that use passwordless Workload Identity Federation, Key Vault, SonarQube and secret detection.
A unified AI platform I designed for network engineering teams: one secure entry point, three purpose-built AI workspaces covering the full network lifecycle — plan, configure, operate.
Product landing page, SSO login, and an Enterprise AI Hub dashboard that routes users to colour-coded workspaces with a consistent design system.
Generative AI for firewall and network configuration. Engineers describe a change in plain English, pick the target devices, and get a validated, vendor-specific configuration — with a diff, ready-to-run CLI commands, a risk explanation and a secrets-scrubbed copy.
Side-by-side current vs AI-proposed config with line numbers and red/green change highlighting.
Vendor-specific CLI commands in a terminal panel — copy or download, ready to apply.
Plain-English summary of the change with impact assessment and risk level.
IPs and passwords masked for safe sharing in tickets and reviews.
AI-assisted process and network planning — turns documents and requirements into standards-based workflow models that planners validate before use.
An AIOps copilot for operations — monitors in real time, explains root causes and drives automated remediation through runbooks.
Two decades progressing from systems administration to leading AI architecture at AT&T.
Designed and deployed AI-driven automation solutions and Agentic AI architectures for complex enterprise and telecommunications operational processes. Contributed to GenAI Security and Agentic AI Architecture, including RAG application design with UI, APIs, safety gates, LangGraph-based agent engines and knowledge sources. Led data curation for AI model fine-tuning and developed scalable Python automation. Designed an AI-powered solution for 5G network provisioning, improving process efficiency, delivery speed and customer service. Supported Azure deployment pipeline work involving cloud infrastructure, CI/CD practices and monitoring, and collaborated across teams to align architecture with business and operational requirements.
Designed and implemented an Azure deployment pipeline to automate secure, reliable and scalable infrastructure and service delivery. Developed CI/CD pipelines, applied enterprise best practices and integrated monitoring for ongoing performance optimization. Worked within enterprise Azure architecture and delivery, applying enterprise standards and documentation practices for reliable, supportable and compliance-conscious solutions.
Architected Azure environments covering VMs, Storage, Data Lake Gen2, Load Balancer, VNets, NSGs, Azure AD, App Services, SQL, Cosmos DB, Data Factory and Synapse. Designed DevOps capabilities including CI/CD, ARM, Key Vault, migration, Monitor, Sentinel, Recovery Services Vaults, Kubernetes, Container Registries, Terraform and GitHub. Led architecture tracks and designed data-center migration and disaster-recovery solutions with emphasis on resilience. Also used Azure DevOps and Azure Migrate, and designed storage/backup architectures across EMC, HDS, HP, IBM and NetApp, including replication, clustering and performance/capacity planning.
Designed enterprise storage and cloud architectures and provided guidance for OpenStack and AT&T cloud environments. Led project tracks and coordinated specialists from multiple disciplines. Architected migration, disaster recovery, storage replication, backup, clustering and cache-mirroring solutions. Designed SAN and storage-system solutions across Azure and AT&T/OpenStack IaaS, supported Azure infrastructure and CI/CD (VNets, NSGs, Azure AD, Azure DevOps, ARM templates, Terraform, monitoring and migration services), and delivered operational guidance.
Managed enterprise SAN environments across EMC, HDS, HP and NetApp platforms, including replication, performance analysis and capacity management. Provided end-to-end outage support, managed Cisco SAN switch installations/upgrades and mentored new team members. Worked with Brocade and Cisco SAN switches, storage allocation and replication technologies including SRDF and ShadowImage, as part of problem-resolution, performance, replication and documentation teams.
Administered AIX, HP-UX and Red Hat Linux environments with security guidelines, patching, health checks, change and incident management. Managed SAN zoning and LUN operations in SLA-driven environments. Supported audits, prepared RCAs and coordinated teams and customers. Also handled port reservation, Windows server antivirus management, documentation and technical training.
Supported Unix/Linux systems, security guidelines, patches, health checks, incident/change management and Windows Server antivirus; coordinated a team of six and prepared root-cause analyses.
Managed Linux and Windows Server 2003 environments, routers, switches and firewall infrastructure; troubleshot performance/connectivity and supported a California–Noida VPN link.
Delivered technical audits, quality assurance, seminars and workshops; supported Windows Server and Red Hat Linux setup across 26 training centres. Training areas: MCSE, CCNA and RHCE.
Built and troubleshot Windows Server 2003 and Red Hat Enterprise Linux environments; server support and technical training in MCSE, RHCE and CCNA.
Supported LAN setup and maintenance across Microsoft BackOffice Server and Linux; managed software installation/configuration and router troubleshooting.
Recognised repeatedly over 12 years at AT&T, from storage operations to cloud and AI architecture — for outage recovery, building teams, driving operational efficiency, and sharing Azure and AI knowledge across the company.
For contributions to SPOJIT application UX design and delivering AI-related sessions across AT&T, with positive impact through collaboration and knowledge sharing.
For developing the Microsoft Azure training path for CELL, making it available through PLE, and leading the initial sessions.
For self-development, Azure certification and training leadership, including organisational and ERG-sponsored training sessions and seminars.
For developing and delivering an integrated roadmap to optimise operational investment and efficiency, including reclaim automation.
For establishing a new Tier 2/Tier 3 storage team in Bangalore and delivering a month of technical training across Cisco, HDS, EMC and HP.
For handling a data-centre power-failure storage outage and supporting recovery until services were restored.
Interested in AI architecture, cloud security or enterprise transformation? I'm always happy to talk.