SHUJAT AZIM

Shujat Azim · Cloud & AI Security · Manama, Bahrain

Securing Cloud. Governing AI. Engineering Digital Trust.

Cloud & AI Security Architect · Regulated financial services

  • CISM
  • CCSK
  • Microsoft Certified
  • 10+ years in cybersecurity

Architecting secure cloud ecosystems, advancing Zero Trust security and governing the next generation of intelligent systems.

Explore My Work Download CVConnect on LinkedIn

Reference architecture

Cloud + AI
Layered enterprise security architectureUsers pass through an identity and access layer into cloud workloads and an AI agent zone. A tool gateway separates agent decisions from privileged tools. Telemetry flows to security operations, and governance spans every layer.GOVERNANCE · POLICY · OWNERSHIPUsers & devicesIdentity & accessEntra ID · Conditional Access · PIMCloud workloadsAzure · AWS · GCPAI agent trust boundaryAgent orchestrationTool gatewaySecurity telemetry & responseSentinel · Defender XDR · audit records
Dashed lines show telemetry; the gold dashed outline marks the AI agent trust boundary.

At a glance

  • 10+ years

    in cybersecurity

  • Regulated financial services

    banking security in the GCC

  • Cloud & Microsoft security

    Azure, Defender, Entra, Purview

  • AI security governance

    NIST AI RMF · ISO/IEC 42001

Professional overview

Security Architecture for Complex, AI-Enabled Environments

Core expertise

Seven disciplines, one control model.

The technology areas I work in across cloud, Microsoft security, identity, data, infrastructure, endpoint and DevSecOps.

Cloud Security

  • Microsoft Azure
  • Amazon Web Services
  • Google Cloud Platform
  • CNAPP
  • CSPM
  • CASB
  • Cloud governance
  • Cloud workload protection

Microsoft Security

  • Microsoft Defender XDR
  • Defender for Endpoint
  • Defender for Identity
  • Defender for Office 365
  • Defender for Cloud
  • Microsoft Sentinel
  • Microsoft Entra ID
  • Microsoft Purview

Identity & Zero Trust

  • Identity and Access Management
  • Conditional Access
  • Privileged Identity Management
  • Multi-Factor Authentication
  • Identity Governance
  • Zero Trust Architecture

Data Security

  • Data Loss Prevention
  • Information Rights Management
  • Sensitivity Labels
  • Customer-Managed Keys
  • Azure Key Vault
  • Data Governance

Infrastructure Security

  • Azure Kubernetes Service
  • Web Application Firewall
  • Private Endpoints
  • Azure Policy
  • Kubernetes Security
  • Cloud Network Security

Endpoint & Device Security

  • Microsoft Intune
  • Workspace ONE UEM
  • Microsoft Defender for Endpoint
  • Endpoint Compliance

DevSecOps & Application Security

  • Azure DevOps
  • CI/CD Security
  • API Security
  • OWASP
  • Secure Software Development Lifecycle
  • Container Security
Full technical expertise

Featured projects

Selected Architecture & Research

Each item carries a label so you know whether it is professional experience, a reference design or work still in progress.

All projects and case studies

Professional experience

10+ years, five organizations, one direction.

  1. Apr 2026 — Present

    Cloud and AI Security Architect

    International Turnkey Systems (ITS) · Manama, Bahrain · Regulated banking environment

  2. Jul 2022 — Apr 2026

    Cloud Security Architect

    Unity Infotech — Client: Ahli United Bank (now KFH) · Manama, Bahrain · Tier-1 regional bank

  3. Sep 2019 — Apr 2022

    Cloud Security & DevSecOps Engineer

    Adobe · India

  4. May 2018 — Sep 2019

    Cloud Security Engineer

    Accenture · India

  5. Jun 2016 — Mar 2018

    Cloud Security Analyst

    HCL ISD · India

Full experience

AI Security & Safety

Exploring the Security of Agentic AI

Research focus: Security, Governance and Risk Management of Agentic AI Systems in Financial Services. This is ongoing technical exploration, not published academic research.

  • Prompt injection and untrusted input
  • Excessive agent permissions
  • Unauthorized tool execution
  • RAG data integrity and access control
  • Human approval boundaries
  • AI security governance and risk assessment
Explore AI security research

Credentials

Professional Credentials

ISACA

CISM — Certified Information Security Manager

Awarded Jul 2026

Cloud Security Alliance

CCSK v4 — Certificate of Cloud Security Knowledge

ISC2

ISC2 CC — Certified in Cybersecurity

Microsoft

AZ-500 — Azure Security Engineer Associate

Microsoft

AZ-400 — DevOps Engineer Expert

Microsoft

AZ-104 — Azure Administrator Associate

All credentials

Approach

Architecture With Accountability

01

Security by design

Controls are decided in architecture, not bolted on before go-live.

02

Least privilege

Every identity — human, workload or agent — gets only what the task needs.

03

Defense in depth

No single control, model instruction or filter is the only barrier.

04

Measurable effectiveness

A control is validated against real telemetry, not assumed.

05

Clear ownership

Every risk, exception and control has a named accountable owner.

06

Risk-based decisions

Trade-offs are recorded, with residual risk stated plainly.

07

Secure AI adoption

AI is enabled with guardrails, not blocked or ignored.

Contact

Building Secure Cloud and AI Systems

I welcome professional conversations about cloud security architecture, AI security, governance, and challenging enterprise security problems.

Get in Touch