AboutCVTravelBlogXpress NetBook a call

Zulfikar Ali

Senior Cloud & Security Architect

Birmingham, UK·Working: London·British·LinkedIn

Profile

Cloud leader with 20 years across IT, cloud engineering, cloud security and zero trust leading teams that build secure cloud platforms. I worked my way from IT support, migration, architecture to cloud leadership.

Core Competencies

Cloud Architecture & GovernanceSecurity ArchitectureZero Trust ArchitectureDevOps & Platform EngineeringKubernetes & Container Orchestration (AKS/EKS/OpenShift)GitOps & CI/CDInfrastructure as Code (Terraform)Azure Landing Zone DesignCloud Adoption FrameworkWell-Architected FrameworkFinOps & Cost GovernanceIdentity & Access ManagementSupply Chain Security & SBOMHybrid & Multi-Cloud StrategyDisaster Recovery & Operational ResilienceAzure OpenAI Service & AI FoundryAI Workload SecurityRetrieval-Augmented Generation (RAG) ArchitectureExecutive Stakeholder EngagementArchitecture GovernanceStrategic Road Mapping

Work Experience

Career Break — Personal & Professional Development

Jan 2026 – Present

Break to invest in professional development, personal commitments, and extensive travel.

Cloud Platform & Security Architect

EBRD — European Bank for Reconstruction and DevelopmentJan 2019 – Dec 2025Contract

Led the end-to-end design, build and strategic evolution of the Bank's Azure cloud platform, accountable for architecture, security, resilience, cost governance and hybrid integration across all IT functions. Built and led a 17-strong Cloud, DevOps and Platform Engineering team, driving the transformation from on-premises infrastructure to a secure, scalable cloud operating model. Acted as senior technical authority on cloud across the organisation, partnering with development leads, solution architects, security leadership and executive stakeholders to ensure cloud adoption delivered measurable business value.

Key Responsibilities

  • Enterprise Cloud Architect and Azure SME, accountable for architectural governance, solution design (HLD/LLD), and technical direction across all cloud initiatives
  • Defined and owned the enterprise cloud service strategy, spanning security architecture, disaster recovery, high availability, and operational resilience
  • Executive stakeholder management across Security, Infrastructure, application owners, and strategic vendors including Microsoft, Check Point, and Sonatype
  • Maintained architectural integrity across engineering delivery, balancing senior hands-on involvement with delegated team autonomy

Key Accomplishments

  • Architected secure Azure Landing Zone (CAF-aligned) integrating Entra ID, RBAC, Defender for Cloud, Azure Firewall and observability — achieving security approval for the Bank's first cloud-native framework and first production application
  • Led enterprise AKS adoption, establishing containerisation as a strategic platform capability and enabling secure, repeatable microservices deployment at scale
  • Architected and governed the Azure platform deployment for the organisation's first enterprise AI solution — a private HR chatbot built on Azure OpenAI Service and AI Foundry, with HR data ingested via Azure Blob Storage, scaled from a 100-user pilot to full rollout across 5,000 employees
  • Designed and owned the security framework for the AI platform, encompassing subscription-level RBAC, private endpoint configuration, data classification, Defender for Cloud integration, and audit logging via Azure Monitor
  • Delivered 40% reduction in cloud spend (2021–2023) via WAF-led optimisation and ongoing FinOps governance
  • Established PaaS/SaaS-first strategy underpinned by Terraform IaC, embedding security and governance by default
  • Defined and delivered annual DevOps roadmap aligned to enterprise architecture goals, enabling iterative delivery through Agile practices
  • Senior representative at architecture and security governance boards — led pen test remediation driving rapid resolution of all critical and high-risk findings

Cloud Architect

ClearstreamSep 2018 – Jan 2019Contract
  • Led the end-to-end Azure deployment (HLD, PoC, and Production) for a flagship Investment Services application under strict security protocols
  • Provided cross-border architectural support between Luxembourg and Frankfurt to establish the firm's initial Azure deployment lifecycle

Cloud Architect

GroupMApr 2018 – Aug 2018Contract
  • Cloud SME delivering a Cloud Foundation framework architecture in Azure and AWS
  • Developed cloud security and compliance operations including implementation of a DM VPN

Senior Solution Architect

FujitsuJun 2010 – Mar 2018Permanent
  • Active Directory, Azure AD and multi-cloud expertise (AWS, Azure, OpenStack) — creating reference designs for major UK accounts
  • Architected an Azure PoC for Specsavers that directly secured a £32M contract
  • Designed enterprise identity federation solutions for DEFRA, Crossrail, G4S, and CRH with consistently excellent client feedback

Technical Consultant

Parative2008 – 2010Permanent
  • Multi-disciplinary role covering bid work, pre-sales, proof of concept, technical demos and solution designs
  • Led 20+ enterprise migrations, engaging 50+ customers across all grades from C-level to support staff

Earlier Career

2000 – 2008
  • Migration SME — EDS (MoD DII, DSS/DWP, Barclays) — Contract, 2003–2008
  • Various IT Support & Migration Roles — Contracts, 2000–2003

Certifications

MCP 70-534
Architecting Microsoft Azure Solutions
Microsoft
AWS SAP
Solutions Architect Professional
Amazon Web Services · Expired
MCITP
Enterprise Architect 2008
Microsoft

Education

BSc Psychology
University of Wolverhampton
4 A Levels
King Edward VI Camp Hill Grammar School, Birmingham

Interests

Mentoring with a particular focus on bridging the gap between school, higher education and real-life enterprise IT — supporting young people with limited educational backgrounds into technology careers. Extensive international travel across 20+ countries. Avid follower of Wolverhampton Wanderers FC.