Yogesh Gupta

Network International is the largest acquirer of card-based transactions and one of the leading technology / payment solution providers in the UAE.

• Heading Cloud Centre of Excellence (CoE) covering Cloud Architecture, Foundational Engineering, Platform Engineering and DevOps.
• Cloud Governance: Established Group-wide cloud governance framework and setting up target operating model, standards and best practices for cost management, security and metrics.
• Cloud Strategy and migration roadmap: Developed a "cloud-fit" strategy which establishes mechanism to identify service providers in each geography based on compliance and regulatory environment. Roadmap includes migration of more than 300 applications to AWS and Azure across middle-east and Africa.
• Large scale cloud deployment: Lead of multi-domain team (comprising of cloud engineers, security, network, DBAs) for deploying complete stack of Network International solutions in new markets on Oracle cloud (OCI) in Saudi Arabia and on AWS platform in South Africa.
• Cloud Security: Developed cloud security and security standards for Cloud infra security, container security, DevOps Engineering. Established regular cloud security posture monitoring practice
• Cloud Risk Mitigations: Lead a security project to mitigate 58 critical risks across cloud environments which includes risks related to infrastructure, applications, secure development environment and adapting zero-trust solution across group.
• Budgets and cost optimization: Managing a budget of USD 15 million globally across Microsoft Azure, AWS and Oracle cloud (OCI) platforms.
• Team Management: Total team size : 27 which includes managers, engineers, consultants across multiple geographies in Middle-East, Africa and India.

• Developed enterprise cloud security architecture with security controls framework and design patterns.
• Developed Security Standards for cloud computing, DevSecOps and containers
• Represented Infosec in Cloud Center of Excellence (CCOE) and was approval authority for all digital projects and changes,
• Automated cloud security posture reporting through PowerBI and Microsoft defender for cloud. \Conducted workshops on cloud security awareness

• Developed Cloud & Digital Security blueprint for Hybrid cloud infrastructure (on-premises plus Azure as public CSP) which included cloud security reference architecture (including RACI Matrix)
• Developed Secure Cloud Migration Guideline for CCoE (Cloud Centre of Excellence)
• Developed Security Standards for cloud computing, micro-services and container security.
• Developed key security documents for cloud operations – Go-live check lists, SaaS application security check list, security controls for Azure services (Azure Active Directory, networks, SQL, Redis etc.)
• Providing custom security solutions design and conducting workshops Azure security practice
• Cloud Security Posture Management : Azure Security Centre, Azure Sentinel, Log analytics
• Logging & Monitoring: Azure Network Watcher, Azure Sentinel (AS) integration with on- premises Arcsight.

• Project - Ministry of Electronics and Information Technology, Govt. of India: Managed the project (with team size of 5) to assist Ministry with “Meghraj” cloud initiative which included developing cloud security strategy for cloud adoption by government departments, developing security guidelines for empanelment of cloud service providers. We further built an excel-based tool for software / application assessment to decide best candidate for cloud adoption.
• Project - MMTC-PAMP, India: Key assignments under this project were migration of 70 VMs and infrastructure on AWS platform from Singapore Region to Mumbai Region and deployment of DDoS solution. Lead a team of 4 engineers in designing secure AWS
  migration strategy. Team further evaluated vendors - Akamai, Cloudflare and F5 Silverline for DDoS protection services and assisted in developing use cases for PoC and selection of the vendor.
• Project - SBI Cards India: As a trusted advisor to CISO, lead a team of 12 engineers to manage end to end cyber security of SBI Cards which included security architecture, IT risk management, ISO 27001 compliance, SOC operations and Identity & Access Management.
  Team was also instrumental in building cloud adoption strategy and security assessments of SaaS application by SBI Cards.
• Developed Service catalogue and capabilities for cloud security services
• Was in-change of managing cloud security engagements across India.
• Developed presentation decks and reply to RFCs
• Managed and assisted “CISO” function of large government and banking clients

• Sept 2017 to Aug 2018 - Founder & Principal Security Architect - Secloud Guru - digital learning platform and authorized trainer for CCSK courses from Cloud Security Alliance
• Feb 2011 to Aug 2017 - Founder & Principal Security Consultant - NetworkLabs India - Established a successful consultancy providing network and security services. Executed more than 100 projects with clients from US, UK, South Asia and Australia
• Feb 2005 – Jan 2011 - Security Specialist - Cable & Wireless - Provided 2nd Line Managed Security Support for Cisco, Checkpoint, Juniper, F5 products. Key member of RMSG (Risk Management Security Group) and maintaining risk register of Managed Security Services.
  Aug 2004 – Jan 2005 - Network Security Engineer - Vinciti Networks - firewall engineer in Sonicwall TAC Support.
  Jan 2004 – July 2005 - Technical Support Engineer - Mphasis - Tech Support for US ISP - Earthlink