Ishfaque Jahan Rafee

• Strategic Platform Evaluation & PoV Leadership: Orchestrated competitive Proof-of-Value (PoV) engagements and technical validation assessments evaluating major enterprise platforms, including Palo Alto Networks, SentinelOne, and CrowdStrike. Aligned technical solutions to business needs, architecting designs that balanced security and operational efficiency to drive a minimum of $200K CAD in annual savings (a 45% budget reduction for enterprise workloads).

• SecOps & Incident Response: Managed Sentinel SIEM and Defender EDR across 1,400+ endpoints, enforcing CIS baselines and vulnerability patching. Led end-to-end incident response via the MITRE ATT&CK framework and optimized log ingestion to reduce annual SIEM costs by 25%.

• Cloud Security Architecture: Acted as the enterprise security architect to design and manage complex, multi-cloud environments (AWS, Azure, OCI). Implemented AWS Control Tower to simplify implementation of compliance controls such as SOC2, ISO 27001, and ISO 42001.

• Automation & Engineering: Developed custom automation using Python and APIs for change management, achieving a 70% reduction in operational overhead.

• SASE & Zero-Trust Network Design: Positioned and implemented comprehensive SASE and ZTNA (Cloudflare One) architectures to drive secure, identity-centric environments. Partnered with IT to gain buy-in for IAM strategies, encompassing SSO, Microsoft Entra ID conditional access, and phishing-resistant MFA to maximize security posture.

• Penetration Testing Program: Owned annual scoping, vendor selection, and remediation follow-through. Reconstructed multiple years of engagement history into a year-over-year findings analysis, isolating shared local administrator credentials as the persistent root cause behind an earlier full Active Directory compromise.

• Application Security (AppSec): Led PoV engagements across seven different vendors to implement the organization's first DAST solution. Fully owned the application vulnerability management program from discovery, confirmation and remediation using Escape DAST and Jira tracking. Improved operational flexibility and security by transitioning to risk-based traffic scoring, successfully reducing WAF exceptions by 100%.

• Data Security & DLP: Architected Data Loss Prevention (DLP) strategy for 50TB+ of sensitive data. Organized PoV to consolidate tools into a single platform and applied Information Rights Management (IRM) policies to address compliance and security requirements.

• Advanced Protocol Engineering: Developed a video streaming server leveraging experimental QUIC multicast using native UDP multicast over HTTP, writing robust, production-ready code.

• Performance Evaluation: Designed experimental frameworks to evaluate network architectures, benchmarking Golang-based networking libraries against C++ and Java codebases.

• Strategic Account & Technical Sales: Acted as lead technical advisor to secure and expand a major telecommunications account, driving the executive sales cycle from discovery to close for a high-value enterprise deployment.

• Team Orchestration & Delivery: Managed delivery for $194M Tier-4 National Data Center. Shaped proposals, orchestrated delivery teams, and partnered cross-functionally to ensure implementations met strict standards and long-term adoption metrics.

• Pre-Sales & Solutions Engineering: Acted as primary technical advisor, designing data centers and disaster recovery solutions. Led end-to-end technical evaluations and proofs of concept (PoC) demonstrating RTO/RPO advantages and technical value.

• Technical Demonstrations & Discovery: Conducted discovery meetings and delivered product demos translating business challenges into technical solutions. Attended multiple roadshows as part of Huawei's newly formed Cloud Solutions team.

• Infrastructure Modernization: Consolidated complex environments into unified solutions, successfully achieving an 80% footprint reduction and 60% TCO reduction through strategic guidance.

• Startup Growth & Market Penetration: Joined directly out of college as employee #2 for the Cloud Solution Sales team. Partnered closely with management to break into 100% of regional telecom operators via direct negotiation and RFI/RFP processes within the first year of business.