About

Cloud & AI security, for institutions that can't afford to get it wrong

I'm a cloud and AI security architect based in Calgary, Alberta, Canada, currently serving as Director, Cloud Security Architecture at RBC. My work sits at the intersection of multi-cloud security architecture and the emerging discipline of AI Security Posture Management (AI-SPM) — designing zero-trust, transferable security frameworks rather than one-off fixes.

My path here runs through critical infrastructure and international programs: early-career systems engineering in Sri Lanka and the GCC, nearly six years securing sovereign toll and transit infrastructure across Bahrain and Saudi Arabia, utility-grid defense at Toronto Hydro in Canada, and today, cloud security accountability spanning RBC's UK entities alongside its OCC-regulated U.S. banking subsidiary.

Where I've worked

Experience

Career

Director, Cloud Security Architecture 2024 — Present

Royal Bank of Canada (RBC)

Cloud security control owner for City National Bank (U.S.) and RBC's UK entities (Brewin Dolphin, BlueBay Asset Management); enterprise CNAPP and AI-SPM strategy across Azure and AWS.

Director, Azure Cloud Security 2024

Royal Bank of Canada (RBC)

Migration security lead for RBC's acquisition and technology cutover of HSBC Bank Canada.

Cloud Security Architect 2023 — 2024

Royal Bank of Canada (RBC)

Enterprise cloud security controls, proactive threat modeling, and regulatory audit ownership.

Information Security Consultant 2021 — 2023

Toronto Hydro

Critical-infrastructure security architecture for SCADA/OT networks and utility-grid perimeter defense.

Senior Infrastructure Security Architect 2015 — 2020

King Fahd Causeway Authority

Fault-tolerant toll-collection and transit-security infrastructure across sovereign programs in Bahrain and Saudi Arabia.

Systems Engineering & Technical Support 2010 — 2015

Sri Lanka & Bahrain

Early career in systems administration, virtualization, and technical support across Sri Lanka and the GCC, including HA clustering and SQL Always-On environments.

Education

Education & Qualifications

MSc, Cybersecurity Policy 2023

Georgia Institute of Technology

Cybersecurity policy and strategy, 3.9 GPA.

Executive Leadership Essentials 2025

University of Toronto

Organizational leadership.

BSc (Hons), Information Technology 2017

University of Hertfordshire

Computer Science, First Class Honours.

Professional Graduate Diploma, Computer Science 2013

British Computer Society (BCS)

Recognition

Standing in the field

Wiz MVP

Wiz

Recognizing cloud security leaders who serve as trusted advisors and shape industry practice.

Technical Reviewer 2025

Packt Publishing

Learning Kubernetes Security, Second Edition.

DFIR NetWars Challenge Coin

SANS Institute

Hands-on incident response and forensics competition.

Cybersecurity Leadership Challenge Coin

SANS Institute

Leadership Award

Royal Bank of Canada (RBC)