About CV Travel Blog Xpress Net Book a call

Zulfikar Ali

Senior Cloud & Security Architect

Birmingham, UK · Working: London · British · LinkedIn

Profile

Senior Technical Leader and Architect with extensive experience designing and governing enterprise-scale cloud and security platforms. Combines deep expertise across Cloud Architecture, Security Architecture (CCSP), DevOps and Platform Engineering with a track record of leading high-performing engineering teams and delivering complex transformation programmes in regulated environments.

Proven ability to operate across architecture, security and engineering domains simultaneously — translating strategic objectives into scalable, secure, and cost-effective cloud operating models. Experienced in executive stakeholder engagement, governance board representation, and driving measurable outcomes across multi-disciplinary technology functions.

Core Competencies

Cloud Architecture & GovernanceSecurity Architecture (CCSP)Zero Trust ArchitectureDevOps & Platform EngineeringKubernetes & Container Orchestration (AKS/EKS/OpenShift)GitOps & CI/CDInfrastructure as Code (Terraform)Azure Landing Zone DesignCloud Adoption FrameworkWell-Architected FrameworkFinOps & Cost GovernanceIdentity & Access Management (Entra ID, CyberArk, PIM/PAM)Supply Chain Security (Aqua, Sysdig, SonarQube, Nexus)Hybrid & Multi-Cloud StrategyDisaster Recovery & Operational ResilienceAzure OpenAI Service & AI FoundryAI Workload SecurityRetrieval-Augmented Generation (RAG) ArchitectureExecutive Stakeholder EngagementArchitecture GovernanceTechnology Roadmapping

Work Experience

Career Break — Personal & Professional Development

Jan 2025 – Present

Deliberately took an extended career break following contract completion to invest in professional development, personal commitments, and broader life experience.

  • Attained CCSP (ISC2, 2025) and CISM (ISACA, 2026) certifications
  • Continued mentoring four junior technology professionals
  • Developed applied knowledge in AI architecture and emerging LLM deployment patterns
  • Supported family caring responsibilities
  • Extensive international travel across 15+ countries and multiple European road trips

Cloud Platform & Security Architect

EBRD — European Bank for Reconstruction and Development Jan 2019 – Jan 2025 Contract

Led the end-to-end design, build and strategic evolution of the Bank's Azure cloud platform, accountable for architecture, security, resilience, cost governance and hybrid integration across all IT functions. Built and led a 17-strong Cloud, DevOps and Platform Engineering team, driving the transformation from on-premises infrastructure to a secure, scalable cloud operating model. Acted as senior technical authority on cloud across the organisation, partnering with development leads, solution architects, security leadership and executive stakeholders to ensure cloud adoption delivered measurable business value.

Key Responsibilities

  • Enterprise Cloud Architect and Azure SME, accountable for architectural governance, solution design (HLD/LLD), and technical direction across all cloud initiatives
  • Defined and owned the enterprise cloud service strategy, spanning security architecture, disaster recovery, high availability, and operational resilience
  • Executive stakeholder management across Security, Infrastructure, application owners, and strategic vendors including Microsoft, Check Point, and Sonatype
  • Maintained architectural integrity across engineering delivery, balancing senior hands-on involvement with delegated team autonomy

Key Accomplishments

  • Architected secure Azure Landing Zone (CAF-aligned) integrating Entra ID, RBAC, Defender for Cloud, Azure Firewall and observability — achieving security approval for the Bank's first cloud-native framework and first production application
  • Led enterprise AKS adoption, establishing containerisation as a strategic platform capability and enabling secure, repeatable microservices deployment at scale
  • Architected and governed the Azure platform deployment for the organisation's first enterprise AI solution — a private HR chatbot built on Azure OpenAI Service and AI Foundry, with HR data ingested via Azure Blob Storage, scaled from a 100-user pilot to full rollout across 5,000 employees
  • Designed and owned the security framework for the AI platform, encompassing subscription-level RBAC, private endpoint configuration, data classification, Defender for Cloud integration, and audit logging via Azure Monitor
  • Delivered 40% reduction in cloud spend (2021–2023) via WAF-led optimisation and ongoing FinOps governance
  • Established PaaS/SaaS-first strategy underpinned by Terraform IaC, embedding security and governance by default
  • Defined and delivered annual DevOps roadmap aligned to enterprise architecture goals, enabling iterative delivery through Agile practices
  • Senior representative at architecture and security governance boards — led pen test remediation driving rapid resolution of all critical and high-risk findings

Cloud Architect

Clearstream Sep 2018 – Jan 2019 Contract
  • Led the end-to-end Azure deployment (HLD, PoC, and Production) for a flagship Investment Services application under strict security protocols
  • Provided cross-border architectural support between Luxembourg and Frankfurt to establish the firm's initial Azure deployment lifecycle

Cloud Architect

GroupM Apr 2018 – Aug 2018 Contract
  • Cloud SME delivering a Cloud Foundation framework architecture in Azure and AWS
  • Developed cloud security and compliance operations including implementation of a DM VPN

Senior Solution Architect

Fujitsu Jun 2010 – Mar 2018 Permanent
  • Active Directory, Azure AD and multi-cloud expertise (AWS, Azure, OpenStack) — creating reference designs for major UK accounts
  • Architected an Azure PoC for Specsavers that directly secured a £32M contract
  • Designed enterprise identity federation solutions for DEFRA, Crossrail, G4S, and CRH with consistently excellent client feedback

Technical Consultant

Parative 2008 – 2010 Permanent
  • Multi-disciplinary role covering bid work, pre-sales, proof of concept, technical demos and solution designs
  • Led 20+ enterprise migrations, engaging 50+ customers across all grades from C-level to support staff

Earlier Career

2000 – 2008
  • Migration SME — EDS (MoD DII, DSS/DWP, Barclays) — Contract, 2003–2008
  • Various IT Support & Migration Roles — Contracts, 2000–2003

Certifications

MCP 70-534
Architecting Microsoft Azure Solutions
Microsoft
AWS SAP
Solutions Architect Professional
Amazon Web Services · Expired
MCITP
Enterprise Architect 2008
Microsoft

Education

BSc Psychology
University of Wolverhampton
4 A Levels
King Edward VI Camp Hill Grammar School, Birmingham

Interests

Mentoring with a particular focus on bridging the gap between school, higher education and real-life enterprise IT — supporting young people with limited educational backgrounds into technology careers. Extensive international travel across 20+ countries. Avid follower of Wolverhampton Wanderers FC.