Decision rights are the cheapest reorg you'll ever run.
Most 'org issues' aren't structural — they're decision-rights issues in disguise. A short framework for clarifying who decides, who recommends, and who needs to know.
I'm Ammar Shareef — Cybersecurity Expert, A solution architect and ICT consultant. I help organisations design secure infrastructure, cloud platforms, embed DevOps, and harden their estate with battle-tested cybersecurity engineering and penetration testing.
I've spent the last decade in ICT consulting — designing cloud platforms, building DevOps pipelines, and hardening environments against real-world attackers. My work sits at the seam most IT teams struggle with: translating an ambitious technology roadmap into infrastructure that actually ships, scales, and stays secure.
Today I partner with engineering and IT leadership on the decisions that compound — cloud platform design, DevOps adoption, security architecture, and offensive testing that proves it. Engagements are deliberately small so the work stays close to the engineers in the room.
Earlier in my career I led Infrastructure, platform engineering for a regulated enterprise, ran red-team operations for a managed-security provider, and architected multi-region cloud landing zones for clients across finance, healthcare, and the public sector. Training and Certifications include Microsoft MCP, VMware VCA, EC-Council CCISO, IS2 CC, CCSP, Fortinet and Microsoft Azure Stack.
Engagements are scoped tight — usually four to twelve weeks, with a clear deliverable and a single point of contact. Fluent across cloud, security, and the messy middle where they meet.
Independent advice across infrastructure, networks, identity, and end-user computing. Roadmaps that match your stage — and your budget — instead of a vendor's quarter.
Landing zones, migrations, and platform engineering on AWS, Azure, and GCP. Production-grade architectures, multi-account governance, FinOps from day one.
CI/CD pipelines, infrastructure as code (Terraform, Bicep), GitOps, container platforms (Kubernetes), and the developer experience that makes shipping boring.
Security architecture, zero-trust design, SOC enablement, identity hardening, and compliance support (ISO 27001, SOC 2, NIST, GDPR) — built into the stack, not bolted on.
Web, API, network, cloud, and Active Directory pentests, plus red-team exercises. Practical reports your engineers can act on — not 200-page PDFs.
End-to-end architecture for cloud-native and AI-enabled platforms. Trade-off analysis, target operating models, and the architecture-decision records that keep them honest.
The bar I hold myself to: leaders feel sharper, the team moves faster, and the work outlasts the engagement.
Ammar walked into a strategy process that had stalled three times and got us to a plan the leadership team actually believed in — inside six weeks. The operating cadence he set up still runs today.
We hired Ammar to fix our go-to-market and he ended up reshaping how our whole exec team makes decisions. Sharper, faster, more honest. Worth every dollar.
The rare advisor who can sit with a board on Monday and rewire a comp plan with a sales VP on Tuesday. Ammar bridges strategy and execution better than anyone I've worked with.
Long-form thinking on the decisions and rhythms that compound. Roughly one essay a month.
Most 'org issues' aren't structural — they're decision-rights issues in disguise. A short framework for clarifying who decides, who recommends, and who needs to know.
The signals that your commercial motion has outgrown its founder, the failure modes of a too-early VP Sales hire, and how to design the transition.
Why the operating cadence — not the strategy itself — is usually the thing that breaks. A practical guide to building a planning system you'll actually keep.
I take on a small number of engagements each quarter. Drop a note about what you're working on — what's stuck, what's at stake, and a rough sense of timing. I'll reply personally within two business days.