Security Delivery Senior Analyst @Accenture

IT Professional with over 6+ years of experience in Identity and Access Management (IAM) with a primary focus on Privileged Access Management (PAM), Cloud Security, Server Management, and IT Operations. Adept at balancing security and business needs while implementing security infrastructure, including threat and vulnerability management. Passionate about streamlining operations through automation to improve team efficiency and deliver exceptional results. Possesses excellent analytical and problem-solving skills, capable of collaborating effectively across multiple domains and organizations.

CliftonStrengths: Learner | Discipline | Restorative | Self-Assurance | Strategic

* Whilst I work for GoDaddy, my opinions are my own and are not posted on behalf of or reflect the views of my present or past employer.

Suprabhat Das ☁🔐

ComfortDelGro

ComfortDelGro is one of the largest land transport companies in the world with a global workforce, a global shareholder base and a global outlook. The Group was formed on 29 March 2003 through the merger of two land transport companies - Comfort Group and DelGro Corporation. Both had started out in the 1970s and had, by the time of the merger, grown to become successful listed land transport companies.

►Achievements:
🎖 ComfortDelGro IT Employee of the Month Jan, 2024

Cyber Security & Infrastructure Manager

Chartered Accountants Australia and New Zealand

Chartered Accountants Australia and New Zealand (CA ANZ) represents more than 139,000+ financial professionals & followers, supporting them to make a difference to the businesses, organisations and communities in which they work and live. Chartered Accountants are known as Difference Makers. The depth and breadth of their expertise helps them to see the big picture and chart the best course of action.

CA ANZ promotes the Chartered Accountant (CA) designation and high ethical standards, delivers world-class services and life-long education to members and advocates for the public good. We protect the reputation of the designation by ensuring members continue to comply with a code of ethics, backed by a robust discipline process. We also monitor Chartered Accountants who offer services directly to the public.

Our flagship CA Program, the pathway to becoming a Chartered Accountant, combines rigorous education with practical experience. Ongoing professional development helps members shape business decisions and remain relevant in a changing world.

We actively engage with governments, regulators and standard-setters on behalf of members and the profession to advocate in the public interest. Our thought leadership promotes prosperity in Australia and New Zealand.

•Lead Internal Auditor/Implementer for ISO27001 | PCI DSS audits & certifications.
•Team Lead on a team of 5+ Senior Engineers.
•Lead Engineer & valued member of CAANZ ARB (Architecture Review Board).
•Lead Engineer & valued member of CAANZ ARC (Audit & Risk Committee).
•Planned & implemented multiple security projects to support critical business transformations on multiple cloud platforms.
•Point of contact and trusted advisor for Information Security Advice.

►Achievements:
🎖 Chartered Accountants Australia & New Zealand "The difference Maker" Award (Collaboration & Accountability) – Jun 2021.

Senior Cyber Security Engineer

Viewpoint

Cloud & Cyber Security SME, APAC lead for one of Australia’s largest construction software companies within this sector where I successfully:

•Lead Internal Auditor/Implementer for SOC2 type 2 & ISO27001 audits & certification in 2018/2019/2020 (achieved).
•Planned & implemented multiple security projects to support critical business transformations on multiple cloud platforms.
•Team Lead on a team of 15+ Engineers, managing our AWS, Microsoft Azure, Google Compute Cloud (GCC), VMware & Neverfail cloud platforms, managing Viewpoint VDI offerings on over 3000 VMs, being the primary decision maker on all infrastructure changes across our APAC data centers and 8000+ global clients transformation/migration projects to these cloud platforms.  
•Supported & troubleshot security platforms including Cisco ASA, Palo Alto, Juniper SRX, Fortinet, IPS/IDS, WAF, VPN & proxies.
•Revised security architecture for scalability, performance & manageability according inline with best practice.
•Point of contact and trusted advisor for Information Security Advice.
•Zero Trust Architecture
•Hands-on design, managing vendor suppliers throughout the design process in line with BAU and operational needs.
•Ensure architecture governance requirements are met, in addition to the needs of the program
•Identity and Access Management
•Security Risk Assessment
•Network Security Design
•Network Segmentation
•Vulnerability Management & Assessments
•Security Architecture Reviews
•Security Incident Response
•Pen testing

►Achievements:
🎖 Viewpoint Spot Award (Cloud Ops SOC2 & Pen Testing) – Dec 2020.
🎖 Viewpoint Spot Award (InfoSec) – Nov 2019.
🎖 Viewpoint Spot Award (SOC2 type II) – Apr 2019.

Cloud & Cyber Security Technical Lead

Technical Lead (Cloud & Security) Operations.
Viewpoint is a global leader in construction software & ERP systems, headquartered in Portland, Oregon, US, Viewpoint has built its reputation on 40 years in the construction business. We know the problems that contractors, subcontractors, project managers, foremen, estimators, and architects face in today’s construction world, and our solutions provide the right tool for the job to help them succeed, other global offices in UK & Australia.

►Key responsibilities:
•Senior cloud operations & lead Engineer.
•Global multi cloud footprint in AWS, Azure, Google Compute Cloud (GCC) & Neverfail cloud.
•SaaS & DaaS, multi tenancy cloud for 8000+ global customers.
•Infrastructure transformation & migration project delivery.
•In charge of APAC cloud operations & infrastructure.
•Assisting clients connecting to our cloud from Citrix VDI XenDesktop sessions via NetScaler.
•Tier 3/4 escalations for all cloud operations.
•PowerShell / PowerCLI scripting for task automation and Reporting.
•Maintaining a VMware infrastructure with 500+ VMs, HA, DRS, SRM.
•Microsoft AD for over 10000+ users & Windows server implementation & deployments.
•Citrix NetScaler, Virtualisation, Director, Storefront, Delivery Controller, XenApp/Xen Desktops.
•PDQ Enterprise Deploy roll outs.
•Infrastructure monitoring using SCOM & Solarwinds.
•Clavister NGFW for cloud infrastructure firewalling & Brocade VTM.
•Splunk implementation & monitoring.
•Lead Auditor/Implementer for SOC2, ISO27001 & ASD compliance and certification, pen testing execution & remediation schemes for cloud security.

►Achievements:
🎖 Viewpoint Spot Award (Cloud Ops) – Oct 2018.

Senior Cloud Operations & Cyber Security Engineer

Cover-More Group

Cover-More ranks top three global travel insurance providers, with a global footprint that includes offices in Australia, the United Kingdom, China, India, New Zealand, Malaysia and the United States. We have over 1000 employees and business partners that include some of Australia's and Asia's.

►Key responsibilities:
•Solutions architecture and consultancy engagement to infrastructure (network, servers, storage, security implementation & compliance) projects.
•Infrastructure transformation (upgrade, migration, relocation) project delivery.
•2IC on a team of 7 & tier 3/4 lead escalation point for network & system issues.
•Lead engineer for PCI DSS audits.
•Maintaining a VMware infrastructure with 30+ ESXi clustered Hosts and 300+ VMs, HA, DRS.
•Migration projects to AWS, Azure & Office 365, with multiple SSO supported cloud vendors.
•Maintaining a large scale MPLS network with 30 global remote office sites.
•Cisco ASA5520 firewalls in HA mode with SSM20.
•Checkpoint firewalls.
•Microsoft AD, Exchange, DFS, ADFS, Ping Federate IDP.
•Office 365 migration for 2500 inboxes, ProofPoint Email Protection, Targeted Attack Prtoection (TAP).
•MS-SQL clustered environments.
•Installing and Configuration of Cisco UCS & DELL Chassis/Blade systems for VMware ESXi, MS Hyper-V Hosts Cloud Infrastructures or dedicated physical application servers.
•SAN, LUN creations, masking, FC Brocade switch zoning, iSCSI.
•Disaster Recovery & VMware SRM.
•Splunk.
•PowerShell / PowerCLI scripting for task automation and Reporting.
•Monitoring, Optimisation, Troubleshooting virtualised infrastructure with System Center, designing, Implementing Hybrid Cloud, Solarwinds NPM, NTA, IPAM, SCOM, SCCM.
•SharePoint Farms.
•Trend Micro ISWVA & SquidProxy server migrations.
•Citrix XenApp/Xen Desktops (VDI) & Net Scalers.

►Achievements:
🎖 Cover-More "Going Extra Mile" Award – Aug 2017.
🎖 Cover-More "Infrastructure Legend" Award – Oct 2017.
🎖 Cover-More "IT Commitment" Award – Dec 2017.

Senior Systems & Cyber Security Lead Engineer

Armada Solutions

Armada Solutions is one of Australia’s leading IT Services providers, Armada Solutions have been providing technology services and solutions to Australian companies since its inception in 1998. We work with our customers to help them at every stage of the technology solution cycle - from evaluation right through to implementation and support - to ensure the most successful outcome. We care about our clients because your business is our business. At Armada Solutions, we’re combining big business experience with small company ﬂexibility to give organisations a real choice when it comes to the implementation and maintenance of their technology systems.

►Key responsibilities:
•Infrastructure transformation (upgrade, migration, relocation) project delivery.
•Tier 3/4 escalation point for network & systems issues.
•Lead engineer for PCI DSS & GS007 audits for multiple clients.
•Maintaining a VMware infrastructure with 200+ VMs.
•Maintaining AWS cloud for Dev/Prod environments.
•Cisco ASA NGFW & Juniper SRX & Screen O/S firewalls in HA mode with IPS.
•Office 365 migration for 1500 inboxes.
•Checkpoint firewalls implementation.
•Disaster Recovery & VMware SRM.
•SIEM using Tripwire & Splunk.
•PowerShell / PowerCLI scripting for task automation and Reporting.
•SharePoint Farms & CRM Dynamics, SCCM.
•Citrix XenApp/Xen Desktops.
•F5 (VE), LTM, GTM, WAF.
•Monitoring, Optimisation, Troubleshooting virtualised infrastructure with System Center, designing, Implementing Hybrid Cloud, SCOM.

CMD Solutions Australia

CMD Solutions provides tailored technology services to maximise the performance of your ICT operations. Our experienced, professional consultants work in partnership with you and your business goals to add real value to your bottom line.
CMD Solutions is a Cloud and Infrastructure consulting company focused on enabling organisations to concentrate on their core business by managing the complexity of the IT Operation. We exploit our team’s extensive corporate experience to apply best practice and innovative solutions tailored for the size of your business to improve efficiency, productivity, reliability and availability.

►Key responsibilities:
•Providing infrastructure SME support for a major government Superannuation sector - one of Australia’s leading superannuation administration providers with more than $100 billion in funds under administration across 1.1 million member accounts (First State Super, State Super, AON, Commonwealth Super Corp & Australian Defense Force).
•Solutions architecture & consultancy engagement to infrastructure (network, servers, storage, security implementation & compliance) projects.
•Infrastructure transformation (upgrade, migration, relocation) project delivery.
•Tier 3/4 escalation point for network & systems issues.
•Lead engineer for GS007 audits.
•Maintaining a VMware cloud environment with 30+ ESXi clustered Hosts and 600+ VMs.
•Office 365 migration for 2000 inboxes.
•Checkpoint firewalls implementation.
•Cisco UCS & HP Chassis/Blade systems for VMware ESXi, MS Hyper-V Hosts Cloud Infrastructures or dedicated physical application servers.
•SAN, LUN creations, masking, FC Brocade switch zoning, RDM and presenting LUNs to physical hosts.
•Disaster Recovery, Replication systems management Actifio & VMware SRM.
•SIEM using Splunk, Tenabe Nessus.
•F5 (VE), LTM, GTM, WAF.
•Citrix XenApp/Desktops.
•PowerShell / PowerCLI scripting for task automation and Reporting.
•Monitoring, System Center, designing, Hybrid Cloud, SCOM, SCCM, SCVMM.

Senior Infrastructure Engineer

Cabcharge Australia Limited

►Key responsibilities:
•Managing three level#1 PCI DSS compliant data centers with Mobile Payment Application System, connecting to & compliant with APCA COIN on daily basis, executing major tasks for annual PCI DSS Audit process for this global company with multiple remote offices.
•Leading & executing PCI DSS annual audits, gap analysis, penetration testing (Kali & BackTrack Linux), vulnerability scans, mitigation management, & remediation schemes, using Solarwinds, New Relic & PagerDuty, Keeping CDE compliant & secure, IT strategy planning & execution BCP.
•Infrastructure Solution Architect of Postilion Payment Gateway, Mobile Payment Systems & Prognosis Payment Transaction Management Servers for Postilion for over over 25,000 payment terminals.
•Leading APCA COIN compliance projects, response statements & datacenter compliance.
•Managing, upgrading & monitoring infrastructure, routers & Layer 3 switches with HSRP, VRF, IRF, VRRP & MPLS/VPLS configurations, firewalls, servers, Load Balancers, Voice Gateways, Video Conferencing Endpoints & AVAYA VOIP switches.
•Implementing network projects and change requests assigned by solution architects, participating in developing Knowledge Base, processes and procedures, identify process or project improvements to enhance services.
•500 AD users over multiple branch offices across Australia, many IT platforms with the latest Linux (Ubuntu, Centos), Microsoft technologies including Windows 2012R2 & 2008R2 servers, MSSQL Server 2008R2 & 2012R2, Exchange & Sharepoint Server 2013, DHCP, VMware ESXi 5.5 & 6 hosts in HA mode with vMotion & Storage vMotion, NSX.
•Configuring vCentre Server, vSphere, Virtual Storage Appliances using VMware, Cisco ASA/Switches, IDS/IPS, HP Proliant/Procurve network equipment, HP SAN P4800 Blade Lefthand SAN/iQ administration HP CMC, iSCSI, FCoE, virtualization on both HyperV & VMware.
•Configuring backup & disaster recovery using VMware VDP, expertise using Tripwire & Log Center FIM, Splunk.

Senior Systems & Security Engineer

First Focus IT

►Key responsibilities:
•Managing two PCI DSS compliant data centers with DR/Backup site on daily basis for this large MSP environment.
•Managing Level 3/4 escalations within our Engineering team using Kaseya & Connectwise.
•Executing & managing PCI DSS | ISO27001 | GS007 compliance, risk, gap analysis & mitigation, compensating controls, executing DR annual excercises.
•Managing & upgrading infrastructure, Cisco routers & Cisco/HP/Dell Layer 3 switches with VRF, IRF, VRRP & MPLS configurations, Cisco ASA 5550, Checkpoint firewalls, Cisco & HP L3 switches & servers, VOIP Gateways, Video Conferencing Endpoints & Cisco Phones.
•Responding to management change requests assigned to Engineering team, participating in Knowledge Base, implementing processes & procedures, identify process or project improvements to enhance services delivered, managing large IT projects for a large number of clients.
•Day to day network engineering duties for over 2000 AD users, many IT platforms Linux (Ubuntu, Centos), Microsoft technologies Windows 2012R2 & 2008R2 servers, MSSQL Server 2008 & 2012, Exchange Server 2013, Sharepoint Server 2013, Lync 2013, Office 365, DHCP, VMware ESXi 5.5 hosts in HA mode with vMotion & S-vMotion, Citrix Xenapp & server
•Configuring & managing vCentre Server 5.5, vSphere & VMware SRM, Virtual Storage Appliances, managing storage LUNs, Cisco ASA/Switches/SSM20 IPS modules, VMware, HP Procurve equipment, HP SAN P4500 G2 Lefthand SAN/iQ, Dell EqualLogic & QNAP SANs.
•Managing backup & disaster recovery using VMware SRM, ShadowCraft, ImageManager, managing high end infrastructure with expertise in FIM (File Integrity Monitoring).
•Executing penetration testing with mitigation management, vulnerability scans & remediation, Solarwinds Orion, IT strategy planning & BCP/DR/UAT.
•Worked closely with business development team by producing solution design presentations, diagrams and use cases.
•Managed FirstFocus SmartCloud cloud hosting infrastructure.

IP Payments

►Key responsibilities:
•Managing three level#1 PCI DSS compliant data centers on daily basis primary, DR and warm site datacentre, executing major tasks for annual Audits for this global company with 3 offices (Sydney AU, NZ & UK), executing pen testing/vulnerability scans & risk assessments, this turned into a DevOps environment dealing with the most critical business components (payment processing).
•Managing, upgrading & monitoring infrastructure, routers & Layer 3 switches with VRF, IRF, VRRP, HSRP & MPLS configurations, firewalls, servers, Load Balancers, Voice Gateways, Video Conferencing Endpoints & VOIP, IVR CentOS servers.
•Implementing network projects and change requests assigned by solution architects on a regular basis, participating in developing Knowledge Base using Confluence.
•Day to day network administration duties for 100 AD users, many IT platforms with the latest Linux (Ubuntu, Centos), Microsoft technologies including Windows 2012R2 & 2008R2 servers, MSSQL Server 2008 & 2012 Migration, Sharepoint Server 2010, DHCP, VMware ESXi 5.5 hosts in HA mode with vMotion.
•Configuring vCentre Server, vSphere, Virtual Storage Appliances using VMware, ESXi VSA platforms, Cisco ASA/Switches/SSM20, Snort IDS/IPS, Tripwire Enterprise solution, AKAMAI, VLANs, Voice VLANs, Brocade SAN Switch, F5 LTM Load Balancer/WAF, ASM, iRules, HP Proliant/Procurve network equipment, 10Gbe iSCSI SAN infrastructure with HP StoreVirtual (LeftHand SAN/iQ) P4500 & VSA storage, multi-nodes storage cluster, CMC, iSCSI, FCoE, virtualization on both HyperV & VMware.
•Configuring backup & disaster recovery using Acronis VMProtect, RDP / VNC, managing high end infrastructure, expertise in FIM (File Integrity Monitoring), AWS S3, Splunk.
•Executing penetration testing & mitigation management, vulnerability scans & remediation schemes, monitoring tools from Solarwinds, New Relic & PagerDuty, Keeping CDE compliant & secure, IT strategy planning & BCP execution.
•Office 365 migration.

Senior IT Infrastructure & Security Engineer

Best Buy Australia Pty Ltd

►Key responsibilities:
•Senior Security Solutions Architect for this level#1 PCI DSS & ISO27001 compliant retail giant in Australia, managing two PCI DSS data centres (PRI & DR Sites) plus remote offices in Sydney & Geelong, providing network design, security implementation, administration, systems support and database administration, this turned into a DevOps environment dealing with the most critical business components (payment processing).
•Lead PCI DSS & ISO27001 annual audits.
•Supervising a team of 3 IT staff and over 50 users on AD at our Sydney & Geelong offices split over SOC & NOC.
•Configuring Brocade Mobility wireless solution with RFS6000, Brocade 300 SAN Switch, Dell PowerEdge/ PowerVault Configuration.
•Configuring VMware ESXi 4.0 hosts in HA mode with vMotion, vCentre Server, vSphere & HyperV.
•Configuring & monitoring Cisco Switches/ VLAN, Microsoft Hyper-V Windows 2008R2 with System Centre 2007 management, Linux Ubuntu & RedHat Enterprise Linux platforms, & Snort IDS/IPS.
•Administering HP SAN P4300 G2 with RAID10+1 HP CMC configurations, M0n0wall Unix Firewalls, HP MSA20 Direct Storage SAN Servers, Microsoft Windows 2003R2/2008R2 Domain Servers, WSUS, XP, Win7, Microsoft .NET, application servers on VMware with SRM, Microsoft Clustering Services with HyperV. 
•Implementing Microsoft Active Directory Implementation, migration from 2003R2 to 2008R2, Linux Mandrake RedHat 9.1, Microsoft Exchange 2003 server & Exchange 2007 Server, Microsoft SQL 2005 Standard Edition database server SQL merge replication Mode.
•Administration of MSSQL Server 2008 Enterprise Edition Migration, Microsoft Office 2007, ARCServe Advanced Ed Backup on TCP/IP, remote access, VPN, Terminal Services, RDP & VNC Enterprise Edition, Windows 2008R2 with Exchange 2007 migration and VMware ESXi4.1 Roll-out for our DR site.
•IPMonitor/SolarWinds, Microsoft SMS Server, IPSEC Policies using encryption, Citrix Xen. 
•Executing BCP & BDRP Testing throughout & multi-site SAN replication.

Cyber Security & Infrastructure Manager at ComfortDelGro |🥇Top 1% TryHackMe|🏅Top 3% BTLO Defender🛡|⚔️PENTESTER|VCP-NV|IBM CySA|3XJNCIS (SP,SEC&DevOps)|2XCitrix CCA-N&V|2XCCNA| HTB rank#550🚩| E|HE | ⎈K8s|Cloud&GRC SME

Cyber Security Lead Engineer & Technical Manager, valued member of ARB (Architecture Review Board), Security Architect, Pentester, Red Teamer & Ethical Hacker, Cloud & GRC Pro (PCI DSS | SOC2 | ISO27001 | GS007 | NIST | ASD8) - Multi Cloud security on (AWS | Azure | OCI | GCP | IBM Private Cloud), Mitre Attack & Defend,  HIPS/NIPS, Digital Forensics (DFIR), CSIRT, GSOC & SIEM focus, AttackIQ Academy Pro Medalist, Threat Informed Defender (TID), RangeForce Community SOC Challenger & CTF Player - 

►Top 1% ranked on TryHackMe - https://tryhackme.com/p/Mack10►PENTESTER ⚔️ [0xD] [GOD] Rank.
►Awarded Red Teamer of the Month (Badge) - https://tryhackme.com/Mack10/badges/redteamcapstone
►Top 3% ranked on BTLO of Defenders - https://blueteamlabs.online/public/user/7c6d8da717ac543a3b93b7►
►Global HTB rank#550 - https://app.hackthebox.com/profile/392506►
►⎈ K8s Helmsman Wall of Fame - https://kubecampus.io/kubernetes/wall-of-fame/►
►Credly - Certs & Badges - https://www.credly.com/users/fady-makar/badges►

An 10x time level#1 PCI DSS Lead Engineer Successor.
15+ years of progressive & diverse experience in plan/design/implement/manage robust & secure network solutions, annual compliance audit projects leading experience & ITIL focused, Network security engineer & winner of multiple awards from most recent employers & academically, Red, Blue, Purple CTF team player on various Cyber Range platforms (TryHackMe, Hack The Box, RangeForce, CyberDefenders, BTLO) & lifelong learner. 

►Key Strengths:
•Experience in leading 15 members & more in a technical team
•Data Center & cloud operational management. Data center relocation & reconfiguration experience
•Strong stakeholder management with the ability to engage at the executive level as well as technical levels
•Lead internal auditor/implementer for ISO27001, SOC2, PCI DSS Level#1, GS007, NIST & ASD8
•C2M2 uplift
•Pen Testing, Red/Blue/Purple teaming

►Skill Matrix:
•Virtualization & Cloud Infrastructure (VMware & Hyper-V), NSX
•Microsoft AD, AAD, Exchange, DFS, ADFS, PingFederate IDP
•Windows Servers, System Center SCOM, SCCM, SCVMM, Advisor
•Microsoft 365, AAD, ATP & AWS/Azure migration projects
•SANs (HP, EMC & IBM XIV)
•Nutanix HCI
•Citrix NetScaler, Xen App & Desktop
•Linux servers infrastructure (Ubuntu & Kali)
•Network Security, Infrastructure Security (Cisco ASA, IPsec VPN, PKI, MFA)
•F5 BIGIP LTM & GTM, Akamai, Cloudflare
•Sentinel, Tripwire TE & TLC, IP360, Splunk, Nessus, IBM Qradar, Sumo Logic
•Prognosis IR Payment Transaction for Postilion

►🎖Achievement Awards (winner of multiple).

taplio

The Battle

Suprabhat Das ☁🔐

Fady Makar, (B.Eng), ISSO, NSE3, CDP, JNCIP-SEC🔐🌩

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?