Raja Saqib Y.

Senior Manager IT Infrastructure & Cyber Security

HBL • Full-time

Mar 2024 - Present • 2 yrs 6 mos

Information Security • Led a team of IT staff to enhance system performance and security. • Coordinated and managed responses to security breaches, conducting root cause analysis and implementing recovery plans. • Enforced security guidelines regionally, ensuring devices are secure and up-to-date with the latest patches. • Collaborated with key stakeholders (IT Security, Risk, Legal, Compliance, Audit) for continuous project governance and regulatory alignment. • Data Governance & Risk Management established data classification, retention, and governance policies while implementing enterprise risk assessments aligned with ISO 27001, NIST, and PCI-DSS standards. • Collaborated with Regulatory frameworks, aligning enterprise policies with global standards. • Led advanced SOC operations including log correlation, alert triage, threat hunting, and escalation using SIEM platform (Azure Sentinel,). • Conducted forensic investigations, malware analysis, evidence collection, and incident containment aligned with regulatory and legal standards. • Managed cyber defense strategies across 57+ branches and remote sites, maintaining unified governance, monitoring, and compliance. • Ensured compliance with internal audit and IT security policies during all IT operations. • Designed and managed Microsoft Azure & M365 security frameworks (MFA, Conditional Access, CASB, Defender for Cloud) ensuring hybrid cloud resilience and compliance. • Advanced Application Security, Performed application security reviews, API security validation, penetration testing coordination, and integrated DevSecOps practices for enterprise applications. • Architected secure network infrastructures with firewalls, NAC, IPS/IDS, VPNs, DLP, and segmentation controls across banking networks. • Deployed and managed advanced endpoint security solutions (EDR/XDR, ASR, AV, Microsoft Defender ATP, Sophos, Palo Alto Cortex), enabling proactive threat detection and remediation. • Implemented role-based access control

Senior System Administrator

DataQ Health • Full-time

Sep 2023 - Feb 2024 • 5 mos

Problem & Incident Management Enhancements • Led the end-to-end Problem Management lifecycle, including problem identification, documentation, RCA, and resolution planning using ITIL v4 framework. • Conducted post-incident reviews and blameless problem-solving sessions to ensure long-term corrective actions. • Used trend analysis on recurring incidents to initiate permanent solutions, reducing critical system outages by 99% (customize with actual value if possible). • Collaborated with cross-functional teams to investigate and resolve high-impact problems affecting banking operations. • Documented Known Error Records and leveraged ServiceNow for problem tracking, RCA, and change correlation. • Performed in-depth incident trend analysis using Power BI dashboards and Excel for proactive risk mitigation. • Proficient in KQL query development for security monitoring and log analysis. • Developed and implemented Information Security Management System (ISMS). • Configured Azure security services: Defender, Conditional Access, and RBAC. • Led end-to-end lifecycle of vulnerability management and patch compliance. • Executed security audits and SIEM correlation rules using Microsoft tools. • Managed MDM and MAM policies for device security using Microsoft Intune. • Build and maintain a comprehensive controls matrix mapped to relevant frameworks such as ISO, NIST, HIPAA. Cloud & Microsoft Services Management • Troubleshot and managed Azure Cloud Services, Office 365, MEM, SCCM, Azure Active Directory, IAM, and Microsoft 365 Authentication Services. • Administered and configured Azure Virtual Desktop to support seamless remote work environments. • Managed Microsoft servers, DNS, Azure infrastructure, Office 365, backups, and centralized wireless solutions. • Managed and administered Active Directory (AD) environments, including user/group management, GPOs, replication, and directory services. • Ensured high availability of AD services including Domain Controllers.

Senior System Engineer

BoK • Full-time

Apr 2023 - Sep 2023 • 5 mos

Project Management & Infrastructure Leadership • Led infrastructure projects, collaborating with IT Project Managers (ITPMs) and project managers to plan, architect, and implement solutions. • Ensured successful project execution, focusing on meeting functional, technical, and performance objectives. • Used Incident management tool (ITSM) MFA & Security Management • Configured multi-factor authentication (MFA) in Azure AD to enhance user security and protect access to critical systems. • Performed server security hardening, patching, and vulnerability remediation for Windows OS to maintain a secure environment. • Implemented PAM (BeyondTrust) and DLP to secure core banking operations. • Hardened Windows Servers and applied security baselines across infrastructure. • Deployed WSUS, SCCM and MEM for centralized security patching. • Enforced MFA and Azure AD Identity Protection to mitigate identity-related threats. • Monitor Data Loss Prevention (DLP) compliance and follow up with responsible teams for remediation. • Collaborate with IT operations and business units to ensure timely resolution of non-compliance issues and vulnerabilities. Privileged Access Management (PAM) • Managed privileged access accounts, ensuring security and compliance using the “PAM-360” solution. • Implemented and managed the “Beyond Trust” PAM solution to secure sensitive access points and maintain regulatory compliance. Cloud & Azure Services • Troubleshot and managed Azure Cloud Services, Office 365, SCCM, Azure AD, IAM, and Microsoft 365 Authentication Services to maintain a robust cloud environment. • Monitored Azure cloud systems using tools such as Azure Monitor, Log Analytics, and Trusted Advisor to optimize performance and resolve issues proactively. • Deployed and managed Nutanix Acropolis Hypervisor (AHV) environments for virtualized workloads. • Maintained VMs, optimized performance, and conducted upgrades and patches. • Implemented backup and disaster recovery strategies.