SECURITY ARCHITECTURE · CLOUD · DEVSECOPS

Architecting secure systems
from code to cloud.

Security & Cloud Architect, DevSecOps Specialist and cybersecurity leader with 15+ years spanning enterprise cloud, application security, infrastructure, SOC, automation and governance.

15+Years in security & IT
17Professional credentials
16+Years research & teaching
4Languages
Mahyar TajDini KYIV · UKRAINE
FOCUSZERO TRUST
CLOUDAWS + AZURE
DELIVERYDEVSECOPS
SECURITY ARCHITECTURE ◆ AWS ◆ AZURE ◆ DEVSECOPS ◆ ZERO TRUST ◆ KUBERNETES ◆ SIEM ◆ INCIDENT RESPONSE ◆ TERRAFORM ◆ 

Security belongs in the
architecture, not after it.

I connect architecture, engineering and operations so security becomes part of how systems are designed and delivered. My work covers enterprise cloud security, CI/CD protection, vulnerability management, identity, infrastructure engineering and security operations.

I combine hands-on implementation with leadership: from SAST/DAST, secrets, containers, mTLS and IaC to SIEM, incident response, ISO 27001 and security governance.

LANGUAGESCommunicating across teams and cultures
EN English FluentFA Persian NativeRU Russian IntermediateUA Ukrainian Elementary

What I bring to the table.

Architecture-level thinking backed by hands-on engineering across cloud, code, networks and operations.

01
☁

Cloud Security Architecture

AWS and Microsoft Azure architecture, IAM, encryption, monitoring, CSPM, hybrid cloud and secure landing-zone controls.

AWS · AZURE · IAM · KMS · SENTINEL
02
⌘

DevSecOps & AppSec

Security gates across CI/CD with SAST, DAST, IAST, secret detection, dependency scanning and vulnerability workflows.

GITHUB · GITLAB · SAST · DAST
03
⬡

Containers & IaC

Kubernetes and Docker hardening, Helm, Trivy, Grype, network policies, Terraform, Ansible and automated compliance.

K8S · DOCKER · TERRAFORM · HELM
04
◎

Zero Trust & Network

mTLS, micro-segmentation, WAF, DDoS mitigation, VPN/IPsec, PKI and secure ingress/egress architectures.

MTLS · CLOUDFLARE · PKI · IPSEC
05
⌁

SOC, SIEM & IR

Threat hunting, log correlation, EDR, incident triage, digital forensics and automated response runbooks.

SENTINEL · ELK · SPLUNK · EDR
06
✓

Risk & Governance

ISO 27001, vulnerability management, red/blue teams, bug bounty, secure code review and OWASP controls.

ISO 27001 · VAM · OWASP · RISK

Experience across the stack.

From network engineering to CISO leadership, cloud architecture and DevSecOps.

PROJECT
Capgemini Ericsson Project

Security Solution Architect

Security requirements, architecture reviews and risk assessments across cloud, infrastructure, applications, identity, encryption and secure communications.

PROJECT
Intellias JoinForma Project

Cloud Security Analyst

Cloud architecture, IAM and configuration assessments with remediation guidance and DevSecOps integration.

1 YEAR
Linumlabs Hibachi & Hashflow

Security Engineer

SAST and secret scanning, mTLS microservices, Cloudflare WAF/anti-DDoS, Datadog detections and bug-bounty triage.

6+ YEARS
Pharmbills

Security Architecture Engineer & Cloud Security Analyst

Azure/Entra/Sentinel architecture, Key Vault, EventHub, Intune, centralized ELK monitoring, security code reviews and SOC leadership.

1.5 YEARS
Fairo RBI Group

Chief Information Security Officer

Cloud security posture, ISO 27001, vulnerability management, DevSecOps policy, incident runbooks and red-team programs.

7+ YEARS
Borys Grinchenko Kyiv University Part-time

Researcher & Professor of Information & Cyber Security

Cloud and web security, IoT/wireless security, sensitive data protection, research papers and technical books.

2 YEARS
DMM & Creditor Group Corp

CISO & Smart Contract / Cloud Engineer

Secure AWS blockchain backends, dApp architecture auditing and transaction-layer API security.

1.5 YEARS
Femto IT Group

CTO & CISO

Cloud/on-prem infrastructure, Azure, firewalls, virtualization, Active Directory, PKI, DNS, WSUS and remote access.

3 YEARS
Petro Gas Co.

Network & Information Security Consultant

ISO 27001, network security, two enterprise data-center designs and security simulation exercises.

Credentials built over a career.

Professional certifications across cloud, security, networking, Linux, incident response and forensics.

PROFESSIONAL CERTIFICATIONS17

Tools I use to turn
architecture into reality.

Cloud, DevSecOps, infrastructure, security operations, development, data and AI.

Have a security challenge?
Let’s solve it.

Open to Security Architecture, Cloud Security, DevSecOps and cybersecurity leadership opportunities.

KYIV, UKRAINE • AVAILABLE FOR PROFESSIONAL OPPORTUNITIES