Cloud Infrastructure & Cyber Security Executive

Munish Kaistha

Naperville, Illinois 630-***-**** *******@*******.***

EXECUTIVE SUMMARY

Visionary IT Executive, Cloud Infrastructure and Cyber Security Leader with 20+ years of experience designing, governing, and optimizing secure enterprise architecture. Proven ability to align core infrastructure security with business strategy, reduce risk and technical debt, and build scalable, compliant, and high-performing environments across cloud, hybrid, and on-premises systems. I've been instrumental in designing cloud-enabled payment and e- commerce products (B2B, B2C) with real-time integration into systems such as SAP, JDEdwards, EBS, & Microsoft Dynamics. Skilled in mentoring teams, chairing architecture reviews, and translating security frameworks (PCI-DSS, SOCII, Hi-Trust) into actionable standards and reference architectures. Recognized for measurable results in risk reduction, automation, and innovation while collaborating with C-suite leaders. Spearheaded cloud infrastructure modernization to support an industry-leading payments platform, implementing a secure, scalable architecture that processes billions of dollars in transactions. CORE COMPETENCIES

• Infrastructure Management – Cloud, Hybrid, On-Premises Data Center Operations

• Cloud Foundation and Architecture – Azure, AWS, OCI (VMs, VPC, VNet, Dockers, Kubernetes, Helm Charts, DNS), Redis Cache, Kafka

• Cloud Security & Governance – CSPM, RBAC, MFA, SSO, PAM

• Network Security & Zero Trust – Firewall, VPN, IDS/IPS, DMZ, TLS/SSL, WAF

• API Gateway – Apigee, Azure APIM

• Load Balancer – Azure Application Gateway, Traffic Manager, Front Door, Azure LB

• End-User & Endpoint Protection – EDR, DLP, encryption, remote access security

• Identity & Access Management – IAM, JIT Access, Privileged Access Management, Ping Federate, SAML, Passkeys, OAuth2, and Cryptographic services

• Risk & Compliance – NIST CSF, ISO 27001, PCI-DSS, SOC II, Hi-Trust

• Infrastructure as Code & Automation – Terraform, ARM, GitOps /CI-CD Pipelines

• DB and Data Analytics: Azure SQLMI, MSSQL, Cosmos, Synapse, Fabric, Power BI

• Threat Modeling & Risk Assessment – Mapping controls, prioritizing remediation

• Leadership & Governance – Architecture Review Boards, Team Mentorship

• Logging and Monitoring – Splunk, Dynatrace, Thousand Eyes, Grafana, Uptrends PROFESSIONAL EXPERIENCE

Fiserv – Naperville, IL

Vice President of Technology & Cloud Services Aug 2019 – Present

• Lead and mentor a team of 10 cloud engineers and product specialists, designing and implementing cloud foundational architectures and landing zones across enterprise Azure environments.

• Grew transactions from $3B to $25B and expanded client base from 50 to 800 within four years across SnapPay’s commercial and non-commercial segments.

• Achieved 99.98% uptime for Multi-Tenant and Single-tenant products on MS Azure.

• Spearheaded enterprise-wide Identity & Authentication initiatives, leveraging OAuth2, SAML2, Passkeys, and cryptographic services (PKI, HMAC, JWT, and Voltage) to deliver secure, modern authentication for millions of users.

• Designed and governed OAuth2 authorization frameworks, token lifecycle management, and API security and governance, integrating with Azure AD, Ping, and custom IDPs.

• Led end-to-end Managed Services operations across onshore/offshore teams, delivering 24x7 support with consistent SLA and KPI achievement.

• Led resolution of P1/P3 incidents with cross-functional engineering teams, driving root- cause analysis and preventing recurrence.

• Created & configured API proxies on Apigee and integration with backend services.

• Implemented Redis Caching to reduce database load and improve API response time.

• Collaborated with internal partners for application and infrastructure scans (FOD, FOP, Pentest, Network, WebInspect, Voltage Data Encryption, and WizIO)

• Implemented Kafka for reducing data processing latency and system reliability

• Migrated commercial application from standalone Azure to Fiserv Azure backbone.

• Applied CISM-aligned practices to enterprise security strategy and risk programs

• Ensure SOCII, PCI-DSS, and Hi-Trust compliance to secure applications & protect cardholder data. Led the company through a third-party audit.

• Improving system response time by 30% and led cross-functional team through a complete IT infrastructure overhaul to achieve centralization.

• Led migration from Azure Synapse to Microsoft Fabric, improving reporting efficiency and enabling advanced analytics for actionable business insights

• Utilizing Splunk, Dynatrace, Uptrend, and Thousand Eyes for application logging & monitoring tools to enable real-time detection and corrective actions.

• 25 % Reduction in downtime by implementing ITIL services for operational efficiency.

• Worked with partners (MasterCard, Goldman, CardX) for product integration.

• Working in an Agile environment with a Scrum Master, Scrum meetings, Backlogs, Sprints,

& deliverables. Using JIRA & Confluence for collaborative documentation.

• Designed and executed complex Managed Services transitions involving cloud migrations, platform modernization, and legacy system decommissioning

• Optimized Azure hosting costs by 20% through strategic migration and cost governance practices from standalone Azure to Fiserv commercial Azure.

• Oversee annual disaster recovery and business continuity drills to ensure system availability and meet RTO and RPO goals.

First Data – Naperville, IL

Director, Systems and Operations Dec 2017 – Jul 2019

• Manage a team of local and remote engineers to ensure day-to-day operations and projects are completed.

• Oversaw data center and cloud hosting operations across four major product lines.

• Create and oversee operational and capital budgets and reduce operating costs by 20% in 12 months.

• Design, implement, and manage hybrid cloud infrastructure in Microsoft Azure

• Coordinated enterprise-wide upgrade of IT infrastructure, improving system performance by 35%

• Implemented a robust problem management process, eliminating recurring issues and improving service availability

• Ensure compliance with all products hosted on-premises and cloud (Microsoft Azure)

• Participated in an organization-wide identity modernization roadmap, including application onboarding to centralized IAM, user lifecycle management, provisioning, de-provisioning, and access governance

• Managed Active Directory, group policies, role assignments, and identity workflows across Windows and Linux environments.

• Hands-on experience with LDAP integrations for internal applications and SaaS platforms.

• Improved access requests and approval processes, reducing provisioning time by

~30%.

• Assisted in implementing MFA across the organization using early versions of token- based or OTP authenticators.

• Configured and supported federated SSO via Azure AD

• Strengthened privileged account controls by implementing PAM workflows (CyberArk).

• Integrated Infrastructure with First Data infrastructure with connectivity to First Data- owned payment gateways – Card-Connect and IPG.

• Re-architect SnapPay multi-tenant cloud application, thereby increasing SaaS revenue.

• Worked with a cross-functional team to convert old legacy applications acquired by First Data and merge them into SnapPay.

• Ensure customer satisfaction with 99.95% system uptime. CDI Technology – Naperville, IL

Head – IT Infrastructure & Procurement May 2003 – Dec 2017

• Designed and managed data center operations for six product lines. Help move data center operations from one location to another with minimal disruptions.

• Designed, implemented, and managed ERP’s SAP, JDE Edwards, and MS Dynamics for enterprise customers.

• Part of building four products ground up: enterprise payments product SnapPay, B2B e- commerce product ERP2Web, SnapVSS, and Snap Email

• Collaborated with the engineering team to integrate SnapPay with several payment gateways

– PayPal Payflow Pro, BluePay, authorize.Net, etc., to grow the business

• Supported IAM components in hybrid cloud environments and contributed to zero-trust identity strategies.

• Partnered with security architecture teams to define identity standards, onboarding patterns, and application integration guides.

• Worked with certificate management and token-signing keys to support API authentication.

• Managed the implementation of virtualization technologies, reducing hardware costs.

• Engage with Microsoft, Oracle, and SAP for product integration and partnership.

• Manage Office 365 agreement and Exchange Online account for internal IT via Enterprise Agreement with Microsoft

Lucent Technology – Lisle, IL

Systems & DB Administrator Sep 2000 – Apr 2003

• Managed fifty-plus websites hosted on 100 + physical machines in the Lucent data center.

• Install managed Operating system, database, and backup operations.

• Implement a basic monitoring solution and 24/7 operation. EDUCATION & CERTIFICATIONS

• Bachelor of Technology, University of Pune

• Microsoft Certified

• ISACA CISM® trained

Contact this candidate