$ whoami

Pratik Mohite

Head of DevOps, Security, AI Platforms & IT Administration · Dubai, UAE

DevOps · DevSecOps · Security · AI · Platform Engineering

01 About

DevOps and Cybersecurity Leader with 7+ years of experience architecting secure, scalable, and highly available cloud infrastructure across fintech and digital asset platforms. I combine hands-on technical depth in AWS, Azure, DevSecOps and infrastructure automation with strategic leadership — driving ISO 27001, SOC 2 and PCI-DSS compliance, strengthening security posture, and optimizing cloud performance and cost.

02 Experience

  1. Head of DevOps & Security

    ARP Digital · Dubai

    Jun 2025 — Present

    • Technical leadership. Lead DevOps, cloud infrastructure, cybersecurity and IT operations — owning architecture, engineering standards, security governance and platform reliability.
    • AWS architecture. Architect highly available infrastructure on ECS Fargate, ALB, Global Accelerator, Route 53, RDS, ElastiCache, VPC, IAM and Secrets Manager across production and staging.
    • DevSecOps & CI/CD. Secure deployment automation with GitHub Actions, AWS OIDC federation, ECR and infrastructure-as-code — eliminating long-lived cloud credentials.
    • Security & compliance. Drive ISO 27001 implementation, risk assessments, vulnerability remediation, penetration-test coordination and enterprise security policy.
    • Enterprise security ops. Run CrowdStrike Falcon EDR, NinjaOne RMM, endpoint encryption, identity management and MFA enforcement across corporate infrastructure.
    • Observability. Centralized monitoring and alerting with Grafana, CloudWatch and Slack to sharpen visibility and incident response.
    • Digital asset security. Oversee security controls around Fireblocks custody infrastructure and Chainalysis KYT.
    • Optimization & AI. Cloud cost optimization, automation, and evaluation of AI-powered tooling for engineering and security productivity.
  2. Security Engineer — Cloud & Infrastructure

    Pyypl · Dubai

    Mar 2023 — Jun 2025

    • Network architecture. Designed secure AWS VPCs with subnets, route tables, NAT gateways and site-to-site VPNs.
    • Perimeter controls. Configured AWS WAF, Cloudflare and NACLs for intrusion prevention, bot protection and zero-trust segmentation.
    • Endpoint security. Deployed CrowdStrike Falcon, tuned detection policies and fed alerts into centralized dashboards.
    • Compliance. Led PCI-DSS certification efforts and ISO 27001 controls implementation across infrastructure, applications and access.
    • SIEM. Built centralized log monitoring with Grafana, CloudWatch and ELK to correlate events and alert on suspicious activity.
    • Container security. Image vulnerability scanning, Kubernetes RBAC reviews and hardened Docker/EKS configurations.
    • Access & audits. Enforced privilege separation with IAM roles and OIDC; remediated IAM, security group and routing misconfigurations against CIS and NIST.
  3. DevOps Engineer

    Mastercard · Mumbai

    Jun 2021 — Mar 2023

    • Azure security. Assessed AKS, ACR, Azure AD and network rules against internal, ISO and NIST benchmarks.
    • Secure SDLC. Embedded SonarQube and Checkmarx (SAST/DAST/IAST) into GitLab pipelines.
    • Privileged access. Implemented CyberArk (Vault, CPM, PVWA) across cloud and on-prem workloads.
    • Detection. Integrated CrowdStrike with Splunk and Azure Monitor; handled incidents, ran RCAs and improved detection logic from IOC patterns.
    • M365 audit. Reviewed permissions, audit logs, DLP rules and MFA enforcement across Microsoft 365.
  4. System Engineer

    Nelito & Katalyst · Mumbai

    Feb 2019 — Jun 2021

    • SWIFT systems. Managed secure deployments of SWIFT payment applications on Linux and Windows.
    • Hardening. System hardening, firewall rules and patch management for PCI-grade environments.
    • Virtualization. Administered Hyper-V clusters and segmented virtual networks with SCVMM.

03 Skills

Cloud

  • AWS (expert)
  • Azure
  • GCP (basic)
  • ECS Fargate
  • EKS / AKS
  • Docker

Infrastructure as Code

  • Terraform
  • Ansible
  • AWS CDK
  • CloudFormation
  • GitHub Actions
  • GitLab CI

Security

  • CrowdStrike Falcon
  • CyberArk
  • AWS WAF
  • Cloudflare
  • SonarQube
  • Checkmarx
  • Defender for Endpoint

Identity

  • IAM
  • OIDC
  • OAuth2
  • SAML
  • SSO
  • MFA

Observability

  • Grafana
  • Splunk
  • ELK
  • CloudWatch
  • Sentry

Compliance

  • ISO 27001
  • SOC 2
  • PCI-DSS
  • NIST
  • CIS Benchmarks

Networking

  • TCP/IP
  • DNS
  • VPN
  • NAT
  • VLAN
  • BGP / OSPF (basic)

Automation

  • Python
  • Bash

04 Contact

Open to conversations about cloud security, DevSecOps, platform engineering and leadership roles.