Bojan
Djokić

Cloud security architecture and enterprise integration consulting for international clients. Security architecture reviews using Azure Security Benchmark and CIS Azure Foundations. Designing secure landing zones with integrated Azure Policy, RBAC, and network segmentation. Delivering threat models, security control matrices, HLD/LLD aligned with NIST CSF and Azure Well-Architected Framework. Currently conducting PoC on AI workload security: agent isolation, AKS micro-segmentation, prompt injection detection, PII redaction, and OPA-based policy engines for LLM agent deployments.

Enterprise-scale security for healthcare applications across 2,400+ Azure subscriptions. Implemented Azure WAF policies defending against OWASP Top 10. Designed Ingress-as-a-Service security architecture for consistent AKS controls at scale. Security analysis identifying HIPAA compliance gaps. Security automation scripts with GitHub Actions GHE pipelines. Secure containerisation with Podman including vulnerability scanning and image hardening.

Ahold Delhaize — Secure-by-design architecture per Azure Well-Architected Framework. Azure API Management (OAuth 2.0, rate limiting, threat protection). CI/CD with Key Vault secrets management — deployment time ↓30%. RBAC and least privilege — security exposure ↓40%. Security-focused HLD, LLD, threat models.

Willis Towers Watson — Azure Managed Applications with Pulumi IaC security controls. AKS: network policies, pod security standards, RBAC. Azure Key Vault secrets management. Azure Monitor and Log Analytics for security event tracking.

Erste Bank — AD security assessment and remediation, CIS Benchmark server hardening, RBAC/MFA/Conditional Access, security logging for regulatory compliance, SCCM patch management.

Vivanco & Telco — Fault-tolerant DRaaS architecture, Azure Backup (BaaS) with encryption controls, retention policies, risk analysis, comprehensive HLD/LLD documentation.

Maersk Tankers — ADFS to PTA migration, MFA, Conditional Access, secure API auth, threat models/HLD/LLD.
RSA Ireland — Azure CAF, Enterprise-Scale Landing Zones, Azure Policy enforcement, Azure Blueprints (ISO compliance), Azure DevOps YAML pipelines.
COOP Denmark — PKI assessment, certificate management, hybrid integration, server hardening (2012 R2 → 2019).
Fujitsu London — MSSP architecture, security governance for multi-tenant environments.

UPM — Zero Trust: Azure AD, PIM, RBAC, Conditional Access, PAM, Rights Management Services (RMS), HLD/LLD.
DNB Bank — Database encryption, HA DHCP Failover Cluster, AD IAM with RBAC and GPO hardening.
Anglo-American — Azure AD SSO, Application Proxy for secure remote access, PIM governance.
Unilever — AD DS LLD for 5-forest Azure AD integration.
Equinor — Azure SQL encryption, SCCM Technical Lead.
easyJet — Windows Autopilot, M365, ADFS, SCCM, GPO hardening.

Secure infrastructure for Norwegian government. Architected AD with hardening and access controls. PKI design for certificate-based authentication. DirectAccess always-on VPN with device authentication. Hybrid cloud architecture combining on-premises and Azure (IaaS/PaaS/SaaS). PoC: Azure Data Lake, Azure Stream Analytics, Azure SQL Elastic Pools with encryption and RBAC.

Designed PKI for NATO, Petoro, University of Stavanger, and Premier Oil. Secure authentication: DirectAccess, RADIUS, certificate-based. SQL encryption and Failover Clustering for DNB and SpareBank1. High-availability datacentre achieving 4–5 nines uptime. Pre-sales security architecture for enterprise bids, HLD/LLD, and architecture design sessions with C-level stakeholders.

Full-time IT specialist delivering Windows Server and AD administration, Exchange Server maintenance, VPN administration, and pre-sales technical assistance for SMB and enterprise clients across Iceland. Foundations in infrastructure engineering that underpin 18 years of career growth.