Summary
Overview
Work history
Education
Skills
Certification
References
Training
References
Timeline
Generic

Wasi Idris

Southwark,London

Summary

Certified solution architect with 18 years of experience in cloud transformation, integration, and cyber security projects. Expertise in multiple domains including telecommunications, public sector, and finance, utilizing methodologies such as TOGAF, ISO, and ITIL. Previous role at Tesco involved advocating for security architecture in mission-critical services, providing strategic governance and guidance to system owners. Proven ability to engage with business decision-makers and develop comprehensive enterprise architecture skills.

Overview

25
25
years of professional experience
3
3
years of post-secondary education
1
1
Certification

Work history

Solution Architect

Tesco Plc
01.2025 - 06.2025
  • Advocated for security architecture and compliance on TLR program enhancing enterprise resilience against cyber-attacks.
  • Accessed security architecture patterns and design artefacts for identity and access management, cloud infrastructure, and networking.
  • Conducted feasibility studies on design options while supporting business units in their transition.
  • Defined platform security design requirements to mitigate inherent security threats effectively.
  • Reviewed platform architecture changes, providing security design advisory for enhancements.
  • Assessed mission-critical systems ensuring recovery elements are validated prior to sign-off.
  • Developed architecture diagrams illustrating interactions across 150+ systems using ArchiMate modelling.
  • Utilised technologies including Azure, GitHub, AWS, Terraform, and VMware to support project objectives.

Solution Architect

Royal Mail Group
10.2023 - 11.2024
  • Directed CRM re-platforming, ensuring compliance with design principles and enterprise vision.
  • Collaborated with architects to assess design implications and technical debt through option papers.
  • Contributed to the architectural forum, proposing standards for improved deliverables.
  • Presented solution options to the governing board for informed decision-making.
  • Ensured supplier solutions' assurance and governance; identified suitable technologies.
  • Mitigated security threats by making decisive security choices for proposed solutions.
  • Led telephony platform upgrade to cloud-based CTI, enhancing customer service capabilities.
  • Restructured marketing analysis system from manual to API-driven connectivity approach.

Retail Solution Architect

Welsh Waters
02.2023 - 08.2023
  • Responsible and a member of design authority on all projects, ensuring compliance of new solution designs aligned to the agreed strategic and architectural roadmaps
  • Projects:
  • Baas-lite (open banking) integrated solution to offer a quick and fast (real-time) payment journey for all B2C retail customers, realizing a significant reduction in operating costs of payment acceptance, a 50% reduction in call volumes into the digital team and offering a better customer journey;
  • SaaS solution developed for a more efficient customer engagement (Salesforce) across retail divisions to improve on service provisioning and slowly migrating away from manual processes currently in place;
  • PaaS solution developed to provide B2C (190,000+) retail customers an improved user experience, a self-service capability, and in turn, allowing agents to be more productive in their day-to-day work activities.
  • Technologies and platforms involved: Rapid7Xtra, Salesforce, SAP, SPA, MuleSoft, ServiceNow, Figma, GitHub, Azure DevOps pipeline, AAD, PingID, OAuth, Logic App, ADF, Functions, Azure Blob/table storage, SQL DB / manage instance, Databricks, Data lake, PBI, Data explore, Event Hub, Mailjet, ASP.Net Core, RESTful API, APIM, App gateway, SOAP, WAF, CDN, DNS, VNet, Express route and more.

B2B Solution Architect

Shell
10.2021 - 03.2023
  • Developed solution-specific architecture for multiple projects, adhering to GDPR guidelines.
  • Led RFI activities to evaluate feasibility of Salesforce SaaS versus in-house solutions.
  • Engineered a Salesforce SaaS solution for commerce platforms, enhancing sales representative capabilities during peak demand.
  • Created managed contract service platform integrated with ETRMs, streamlining business processes for various teams.
  • Designed PaaS solution to support B2B customer experiences via Azure-hosted common user interface.
  • Utilised technologies such as Salesforce, React, MuleSoft, and Azure services to optimise project outcomes.

Infrastructure Solution Architect

Shell
09.2019 - 05.2020
  • Solution architect responsible for development of an enterprise recovery programme, mainly focussing on infrastructure services from functional to non-functional requirements of the end-to-end solution.
  • Projects:
  • Developed HLD for an enterprise recovery (Secure Vault) hosting environment (Hybrid cloud) to increase the readiness from unforeseen cyber-attack, comprising technologies and platforms such as Azure cloud (AD, IAM, load-balancers, Bastion, VMs, V-Net, API gateways, ExpressRoute, Data box, Data Factory, Data Lake, Logic Apps, Blob storage etc.), AWS cloud (Direct Connect, Splunk, Crowdstrike, VMs, S3 storage), Infoblox DDI (DNS, DHCP, IP Management), Microsoft 365, CA, AD, RDP, Anti-virus, Palo Alto firewalls, Zscaler (Internet proxy into SaaS), Cisco SD-WAN, WAN, PingID, Akamai;
  • Redesigned the security footprint to simplify the technology landscape and offer additional assurance in identifying, detecting, containing, and protecting against the spread of potential cyber-attacks;
  • HLD developed for a cloud base (SaaS) Zoom+ platform integrated with Hive streaming solution to provide webinar capabilities for 5000+ employees across the enterprise securely and efficiently.

Enterprise Network Architect

Gatwick Airport Limited
08.2016 - 04.2018
  • Projects:
  • Replacement of an aging Cisco estate consisting of core, distribution and access layer (3 tier architecture) to a fully mesh HPE spine and leaf architecture;
  • Upgraded and redesigned the perimeter and data centre security (Palo Alto, FortiNet, Panorama, Tufin, Cisco ISE) within the enterprise to align with the target architecture (security segmentation);
  • Replacement of 4000 CCTV cameras across 80 sites to meet aviation compliance and government regulation standards;
  • Deployment of private cloud (Direct Connect into AWS and VPN gateway into Azure) to provide secure capability for Flight Information Displays (FIDs) units, Data & Insight systems and mission-critical business applications such as Microsoft 365 (SharePoint, Exchange, Teams, O365 etc), ERP, Salesforce CRM;

Solution Architect / Pre-sales

Virgin Media Business
05.2014 - 06.2016
  • Projects:
  • Produced LLD to implement a virtual desktop infrastructure (VDI) platform based on Cisco, VMware and Netapp product line to support 5000+ end-users hosted across 2 x data centre in a high availability setup for a local authority;
  • LLD produced to implement WLAN infrastructure based on Cisco Unified Wireless enterprise architecture (WLC 5508, C3650, C3850, LAP2700, LAP3700, ISE, MSE, Prime Infra) to offer mobility working, secure connectivity for a rail service organisation. The solution was based on highly secure segmented WLAN platform (Corporate/Guest) capable of servicing 5000+ end users and in line with AP12 (Architectural Pattern 12, CESG manual Y) security guidance and best practises;
  • HLD develop based on highly resilient Cisco unified communication (ESXi 5.5, UCS C series, CUCM, IM&P, CUC, UCCX, Jabber, CUBE, ISDN30, ATA-190) solution for a retail organisation to provide the capability to leverage on their existing IPVPN WAN to securely carry both voice and data across their entire organisation (20+ sites).

Various roles and responsibilities

01.2000 - 01.2014
  • With extensive experience as a Network and Infrastructure Architect, I have led the design, development, and delivery of large-scale IT and network solutions across diverse industries including broadcasting, telecommunications, government, and finance.
  • My roles have included consolidating and modernizing enterprise platforms, developing security-driven architectures, implementing resilient LAN/WAN infrastructures, and managing data centre migrations.
  • I have successfully delivered projects for high-profile clients such as Turner Broadcasting (CNN), Virgin Media, AOL, BT, Tesco, and UK Government bodies, ensuring alignment with business needs, compliance standards, and enterprise architectures.
  • Skilled in stakeholder management and leading technical teams, I bring a proven track record of delivering secure, scalable, and business-aligned network solutions.

Education

BSc (Hons) - Computer Networking

London Metropolitan University
London
09.2010 - 07.2011

HND - Electronic Product Technology

University of North London
London
09.1998 - 07.2000

Skills

  • API design and development
  • Serverless architecture
  • Cloud computing
  • Results orientation
  • Cybersecurity practices
  • Network topology
  • IT infrastructure planning
  • Customer focus
  • Security frameworks
  • Security compliance
  • Enterprise integration
  • Technical architecture design
  • Software as a service (SaaS)
  • Process improvement
  • E-commerce platforms

Certification

  • Azure Solutions Architect Expert (#H538-2263)
  • The Open Group Architecture Framework (TOGAF 9 certified #72122)
  • Cisco Certified Internetwork Expert - Data Centre (CCIE #52751)
  • ITILv3 Foundation
  • PRINCE2 Foundation

References

References are available upon request

Training

  • July 2023 Salesforce Platform App Builder
  • Oct 2021 BiZZdesign Enterprise Studio Foundation & Advance
  • June 2020 Microsoft Azure Architect in Design and Technologies
  • Nov 2015 Certified Cloud Security Professional (CCSP)
  • June 2015 Certified Information Systems Security Professional (CISSP)
  • June 2014 AWS Certified SysOps Administrator - Associate Level

References

References available upon request.

Timeline

Solution Architect

Tesco Plc
01.2025 - 06.2025

Solution Architect

Royal Mail Group
10.2023 - 11.2024

Retail Solution Architect

Welsh Waters
02.2023 - 08.2023

B2B Solution Architect

Shell
10.2021 - 03.2023

Infrastructure Solution Architect

Shell
09.2019 - 05.2020

Enterprise Network Architect

Gatwick Airport Limited
08.2016 - 04.2018

Solution Architect / Pre-sales

Virgin Media Business
05.2014 - 06.2016

BSc (Hons) - Computer Networking

London Metropolitan University
09.2010 - 07.2011

Various roles and responsibilities

01.2000 - 01.2014

HND - Electronic Product Technology

University of North London
09.1998 - 07.2000

Similar Profiles

Create profile
Wasi Idris