$ whoami
Pratik Mohite
Head of DevOps, Security, AI Platforms & IT Administration · Dubai, UAE
DevOps · DevSecOps · Security · AI · Platform Engineering
01 About
DevOps and Cybersecurity Leader with 7+ years of experience architecting secure, scalable, and highly available cloud infrastructure across fintech and digital asset platforms. I combine hands-on technical depth in AWS, Azure, DevSecOps and infrastructure automation with strategic leadership — driving ISO 27001, SOC 2 and PCI-DSS compliance, strengthening security posture, and optimizing cloud performance and cost.
- 7+Years in DevOps & Security
- AWS · AzureCloud platforms secured
- ISO 27001 · SOC 2 · PCI-DSSCompliance programs driven
02 Experience
Head of DevOps & Security
ARP Digital · Dubai
Jun 2025 — Present
- Technical leadership. Lead DevOps, cloud infrastructure, cybersecurity and IT operations — owning architecture, engineering standards, security governance and platform reliability.
- AWS architecture. Architect highly available infrastructure on ECS Fargate, ALB, Global Accelerator, Route 53, RDS, ElastiCache, VPC, IAM and Secrets Manager across production and staging.
- DevSecOps & CI/CD. Secure deployment automation with GitHub Actions, AWS OIDC federation, ECR and infrastructure-as-code — eliminating long-lived cloud credentials.
- Security & compliance. Drive ISO 27001 implementation, risk assessments, vulnerability remediation, penetration-test coordination and enterprise security policy.
- Enterprise security ops. Run CrowdStrike Falcon EDR, NinjaOne RMM, endpoint encryption, identity management and MFA enforcement across corporate infrastructure.
- Observability. Centralized monitoring and alerting with Grafana, CloudWatch and Slack to sharpen visibility and incident response.
- Digital asset security. Oversee security controls around Fireblocks custody infrastructure and Chainalysis KYT.
- Optimization & AI. Cloud cost optimization, automation, and evaluation of AI-powered tooling for engineering and security productivity.
Security Engineer — Cloud & Infrastructure
Pyypl · Dubai
Mar 2023 — Jun 2025
- Network architecture. Designed secure AWS VPCs with subnets, route tables, NAT gateways and site-to-site VPNs.
- Perimeter controls. Configured AWS WAF, Cloudflare and NACLs for intrusion prevention, bot protection and zero-trust segmentation.
- Endpoint security. Deployed CrowdStrike Falcon, tuned detection policies and fed alerts into centralized dashboards.
- Compliance. Led PCI-DSS certification efforts and ISO 27001 controls implementation across infrastructure, applications and access.
- SIEM. Built centralized log monitoring with Grafana, CloudWatch and ELK to correlate events and alert on suspicious activity.
- Container security. Image vulnerability scanning, Kubernetes RBAC reviews and hardened Docker/EKS configurations.
- Access & audits. Enforced privilege separation with IAM roles and OIDC; remediated IAM, security group and routing misconfigurations against CIS and NIST.
DevOps Engineer
Mastercard · Mumbai
Jun 2021 — Mar 2023
- Azure security. Assessed AKS, ACR, Azure AD and network rules against internal, ISO and NIST benchmarks.
- Secure SDLC. Embedded SonarQube and Checkmarx (SAST/DAST/IAST) into GitLab pipelines.
- Privileged access. Implemented CyberArk (Vault, CPM, PVWA) across cloud and on-prem workloads.
- Detection. Integrated CrowdStrike with Splunk and Azure Monitor; handled incidents, ran RCAs and improved detection logic from IOC patterns.
- M365 audit. Reviewed permissions, audit logs, DLP rules and MFA enforcement across Microsoft 365.
System Engineer
Nelito & Katalyst · Mumbai
Feb 2019 — Jun 2021
- SWIFT systems. Managed secure deployments of SWIFT payment applications on Linux and Windows.
- Hardening. System hardening, firewall rules and patch management for PCI-grade environments.
- Virtualization. Administered Hyper-V clusters and segmented virtual networks with SCVMM.
03 Skills
Cloud
- AWS (expert)
- Azure
- GCP (basic)
- ECS Fargate
- EKS / AKS
- Docker
Infrastructure as Code
- Terraform
- Ansible
- AWS CDK
- CloudFormation
- GitHub Actions
- GitLab CI
Security
- CrowdStrike Falcon
- CyberArk
- AWS WAF
- Cloudflare
- SonarQube
- Checkmarx
- Defender for Endpoint
Identity
- IAM
- OIDC
- OAuth2
- SAML
- SSO
- MFA
Observability
- Grafana
- Splunk
- ELK
- CloudWatch
- Sentry
Compliance
- ISO 27001
- SOC 2
- PCI-DSS
- NIST
- CIS Benchmarks
Networking
- TCP/IP
- DNS
- VPN
- NAT
- VLAN
- BGP / OSPF (basic)
Automation
- Python
- Bash
04 Contact
Open to conversations about cloud security, DevSecOps, platform engineering and leadership roles.