Samiur Rahman — Cloud DevOps Engineer, ex-Microsoft, EASA PPL

Samiur Rahman

Cloud Engineer & Trainee Pilot
LEO Pharma Formerly Microsoft Gdańsk, Poland
Procedures over hope.
200+ Subscriptions
15,000 Users
DKK 570K · €76K Annualised · 9 mo · ’25
36 Certifications
94% EASA PPL · GS

About

At LEO Pharma I am responsible for the Azure platform: 200+ subscriptions, a 15,000-user tenant, forty production virtual machines, and 190 RPA bots. The infrastructure is governed in its entirety by Terraform and operated under my on-call rotation. I am also accountable for the deployed generative AI models — principally Anthropic Claude and OpenAI GPT families — across their full lifecycle as Cloud/DevOps work: deployment, ongoing management, updates, and ensuring the AI API backends remain reachable and reliable for LEO Pharma applications that consume them.

The role spans cloud governance (Azure Policy, RBAC, and Management Group hierarchy across the estate), enterprise networking (ExpressRoute, segmentation, and global network incident response), identity administration for 15,000 users in Microsoft Entra ID, Azure DevOps CI/CD, and full SRE practice for the production fleet — SLOs, blameless postmortems, and observability through Azure Monitor and Application Insights. Through cloud financial operations across the estate, I have delivered DKK 570,000 (≈ €76,000) in annualised savings within three quarters of 2025, and the figure has continued to grow since.

Before LEO Pharma, I served as a Senior Cloud Network Engineer at Microsoft, working the global escalation queue — the incidents that customer organisations had been unable to resolve within their own teams. The work concerned ExpressRoute, Azure Kubernetes Service, private peering, and DNS failures of unusual scope and complexity. In that role I advised the cloud and infrastructure engineering teams across Fortune 50 enterprises and several government bodies — including the Government of the United Kingdom, the British Transport Police, and the Government of South Australia — on the resolution of such incidents and on the architectural decisions that prevent their recurrence. Their networks remain in service.

Earlier positions were held at BNP Paribas in Kraków and Honeywell in Katowice. Different rooms; the same discipline.

I am also in training for a Private Pilot Licence. The EASA PPL Ground School was completed at ATO Avioner in Warsaw with a final score of 94%, and I now fly privately within the practical phase of the course. Aviation teaches me to trust procedures over hope. The cloud teaches me the same lesson, in different units.

Career

Cloud DevOps Engineer

LEO Pharma — present

Responsible for the Azure platform: 200+ subscriptions, a 15,000-user tenant, forty production virtual machines, and 190 RPA bots. Terraform IaC end-to-end, Git-managed. ExpressRoute, network segmentation, identity, and secrets management. Same Cloud/DevOps accountability extends to production generative AI models (Anthropic Claude, OpenAI GPT): deployment, lifecycle management, updates, and reliable API connectivity for internal applications that depend on them. SRE practice for the production fleet — service-level objectives, on-call rotation, blameless postmortems, and runbooks. Through cloud financial operations across the estate, I have delivered DKK 570,000 (≈ €76,000) in annualised savings within three quarters of 2025, with further savings realised since. Multi-cloud integrations (Azure / AWS) where required.

Partner with the Information Security Managers on Intune endpoint security policy governance — custom configuration profiles (OMA-URI / CSP) and XML policy authoring for App Control for Business and Defender device control. Lead internal training sessions and workshops for junior engineers across cloud and security topics.

Senior Cloud Network Engineer

Microsoft

Global Azure networking escalations: ExpressRoute, AKS and ACI networking, private peering, DNS, and cross-tenant connectivity. The work concerned incidents whose failure modes carried national consequences.

IT Specialist (L2)

BNP Paribas · Kraków

Escalation engineer for the world's eighth-largest bank by total assets. Identity administration via Microsoft Entra, system upgrades, and network triage. The process discipline learned in financial services is not easily unlearned.

Senior CX Specialist

Honeywell · Katowice

Honeywell UK B2B operations — CRM and ERP platforms, with complex customer escalations across a Fortune 100 industrial estate. The grounding before the flight.

Education

BSc in Computer Science - IT Security
WSB University, Poland
BSc in Transport - Aviation
Silesian University of Technology, Poland
EASA Private Pilot Licence — Ground School (94%)
ATO Avioner, Warsaw, Poland
Completed 2023 · Practical training ongoing
US High School Diploma
United States Department of Education

Certifications

Thirty-six professional certifications in cloud, security, networking, and compliance.

2025

Azure Containers - ACI Specialist

Microsoft Mar 2025

Azure Containers - AKS Specialist

Microsoft Mar 2025

Power Platform Connectors

Microsoft Mar 2025

Security & Compliance - MIP - DLP Specialist

Microsoft Mar 2025 Data Loss Prevention
2024

Hybrid Networking - MSEE Troubleshooting

Microsoft Nov 2024 Network Engineering, Network Infrastructure

Azure Networking - Front Door Specialist

Microsoft Nov 2024 Network Engineering, CDN

Azure Networking - IP Services

Microsoft Nov 2024 Cloud Networking, Network Engineering

Azure Networking - VPN Specialist

Microsoft Nov 2024 Network Security

VWAN Specialist

Microsoft Nov 2024 Virtual WAN

Azure Networking - Advanced

Microsoft Oct 2024 Cloud Networking, Network Engineering

DDoS Protection Specialist

Microsoft Oct 2024 DDoS, Cybersecurity

Palo Alto Networks Cybersecurity Professional

Palo Alto Networks Oct 2024 DDoS, Cybersecurity

Azure Networking - Firewall Specialist

Microsoft Jul 2024 Firewalls, DDoS

Ethical Hacker

Cisco Jul 2024

Azure IaaS Foundations Training (AIFT)

Microsoft May 2024

Azure Architecture

Microsoft May 2024 Cloud Networking, Cloud Migration

Azure Core Networking Specialist

Microsoft May 2024 Virtual Networks, Cloud Networking

AZ-700: Designing & Implementing Azure Networking

Microsoft Apr 2024 Microsoft Azure, Cloud Networking

Azure Management Tools and Security Solutions

Microsoft Mar 2024 Azure, IaaS

Network Security

Cisco Mar 2024 DDoS, Cybersecurity

Network Defense

Cisco Jan 2024 Firewalls, Network Infrastructure

AZ-500: Manage Identity and Access

Microsoft Jan 2024 Azure, System Administration

Cyber Threat Management

Cisco Jan 2024 Firewalls, DDoS

Endpoint Security

Cisco Jan 2024 Firewalls, DDoS

Cisco-certified Network Technician

Cisco Jan 2024 Virtual Networks, Network Infrastructure
2023

Microsoft Security, Compliance & Identity Fundamentals

Microsoft Oct 2023 Cybersecurity, Network Security

IT & Cybersecurity Risk Management Essential Training

IIBA Oct 2023 Incident Management, Cybersecurity

Cisco Network Security: Core Security Concepts

Cisco Oct 2023 Cisco Networking, Cybersecurity

ServiceNow IT Leadership Professional Certificate

ServiceNow Oct 2023

Technical Support Fundamentals

Google Aug 2023 Azure, Network Infrastructure

Fundamentals of Cyber Security Awareness

Honeywell Jun 2023 Troubleshooting

Responsible Corporate Citizen Training

Honeywell Mar 2023

EASA Aviation Legislation Course

Honeywell Mar 2023

Sanctions and Embargoes Training

Honeywell Mar 2023

Export Compliance General Overview

Honeywell Feb 2023
2022

IELTS Academic Band Score 7.0 CEFR C1

British Council Jul 2022 Communication

Contact

For matters of cloud architecture, site reliability, or network engineering — or, on occasion, aviation — please feel welcome to write. Email reaches me first; LinkedIn is also open.