Haseeb Khalid

Cloud Security Architecture (Azure) Retail Organization in Ontario

• Designed secure and scalable Azure network architecture, with emphasis on enterprise-scale design standards.
• Streamlined network management by introducing security zones, integrating Azure Firewall, Load Balancers and access restrictions.

DevOps Enablement Program (Azure) A Government Department

• Lead development of architecture design for DevOps pipelines and provided guidance for DevSecOps.
• Designed application deployment archetypes using Azure DevOps, Container Registry, and Azure Kubernetes Service.

Threat Risk Assessment as A Service Oil & Gas Company, Health Service Provider in Alberta

• Developed template-driven approach for efficient TRA processes, reducing assessment time by 50%.
• Lead implementation of algorithmic methodology improving risk assessment. TRA's were conducted on SAAS and Azure PAAS tools focusing on Identity and Access, Data Security, Encryption/Key Management and Security Architectures
• Presented reports, achieved 30% increased risk closure rates.

Authority to Operate Cloud and Cloud Integration Service (Azure) Credit Union in New-Brunswick

• Developed technical security controls for Azure IAAS services.
• Developed IAAS security assessment template for client
• Deployed data integration platform to connect and manage data flow between different services. Solution consisted of services such as Function Apps, Event Grid, Service Bus, API Management

Azure Data Pipeline (Azure Architecture) Energy Company in Alberta

• Created Data Pipeline Architecture in Visio and documented client’s security standards for Secure Data Pipeline Enablement

IT Operations Risk Assessment and Business Impact Analysis Global American Insurance Company

• Conducted Cobit5-based Risk Assessment. Led workshop interviews across various IT domains such as Cloud Strategy, Enterprise Architecture and IT Project Management.
• Enhanced BIA process based on ISO standards, conducted gap analysis and assisted in developing customized BIA procedure.

Cloud Security Assessment & Cloud Security Framework Financial Institution in Quebec (AWS Security)

• Performed assessment of AWS adoption which included review of security architecture, design, controls, and operating procedures, aligning with industry-leading practices. Strengthened security posture through NIST and Well-Architected framework. Provided future state roadmap for enhanced cloud security program.
• Developed Cloud Security framework with 300+ controls for IaaS, PaaS, and SaaS based on CSA CCM v4, categorized into Level 2 (foundational measures) and Level 3 (specific configurations), ensuring tailored approach for enhanced security posture and compliance.

Cloud Security Remediation Canadian Gold Mining Organization (AWS Sensitive Data Discovery)

• Implemented and tested Logging and Monitoring solution with 30 use cases for AWS. Enabled sensitive data discovery in AWS Macie and reviewed findings to identify and classify data with developed data identifiers.

Patch Management Enhancement Credit Union in New-Brunswick (ManageEngine Patch Operations)

• Transformed patch management using ManageEngine Desktop Central and NIST guidelines resulting in notable reduction of patch deployment time by 70%. Developed future state policy and procedures and minimized vulnerability exposure by 50%.

Data Enablement Roadmap Retail organization (Azure Data Mesh)

• Provided cost analysis on Azure Storage solutions for data team resulting in cost reduction of 20%. Collaborated with client's Enterprise Data team to validate cybersecurity dependencies, enhance their Azure Data Mesh program, and ensure secured data processing environment by addressing cybersecurity requirements and gaps during onboarding/implementation