Quazi Rahman

About Quazi Rahman

Motivating, Leadership, Presenter and 12+ years of experience in the IT industry. That\'s what describes me the most.Hi, I\'ve completed my Master\'s in Cybersecurity & Information Assurance with immense interest in IT Cloud security. I also have CISSP from (ISC)². My 12+ year career in several Global Fortune 500 companies demonstrates my work ethic, patience, loyalty, improvement and development as well as continuous growth. I believe in -\"InfoTech is a journey, not a destination\"- as a lifelong learner. If I don\'t know anything today, I\'ve a tendency to learn tonight with a growth mindset. Cybersecurity is not only my profession I\'d rather say it\'s my passion.I believe in facing new challenges with a sharp way of thinking - how to solve them in the best way. My work experiences showcase my growth towards Cybersecurity with additional training and knowledge base of Azure and Microsoft products & Services. I am a fast learner and hard worker.

Experience

1. Lead Cloud Security Engineer

   Finastra

   Jun 2021 — Present

   Azure Cloud Security & Governance• Implemented 40+ Azure security and governance controls across Entra ID, Azure AD roles, Conditional Access, PIM, Defender for Cloud, and resource policies, improving tenant compliance posture by 35–60%.• Designed and enforced Zero Trust architecture, reducing identity-related risks by over 50%.• Deployed secure access models that blocked legacy auth for 100% of accounts, reducing brute-force attempts by 90%.Identity & Access Management (IAM)/ Privileged Access• Configured and governed Azure Entra PIM for high-privilege roles, reducing standing admin accounts by 95%.• Implemented Phishing-resistant MFA for all users, cutting unauthorized access attempts by 98%.• Streamlined role assignments and RBAC, reducing excessive permissions by 70% across multiple departments.Security Monitoring, Detection & Incident Response• Managed and analyzed thousands of security event logs monthly using Azure Sentinel and Microsoft Defender.• Responded to 100+ security incidents, decreasing incident resolution time by 40% with improved triage processes.• Designed KQL analytics rules and alerts, improving threat detection visibility by 30%.Compliance, Audits & Risk Management• Performed governance audits for NIST, CIS, SOC 2, and ISO 27001 control alignment, raising cloud compliance scores by 20–45%.• Documented detailed remediation plans and architecture decisions, increasing audit readiness by 50%.Cloud Infrastructure Security• Hardened Azure resources using NSGs, ASGs, firewalls, Key Vault, and Defender for Cloud, reducing critical vulnerabilities by 60%.• Implemented secure CI/CD and policy-as-code with Azure Policy, restricting unauthorized deployments by 100%.

Education

• National University | Bangladesh

  BS in Accounting

• Asher College

  Computer Specialist & Network Technician Program

  2017 — 2018

• Western Governors University

  MSCSIA, Cyber Security and Information Assurance

  2021