#CYBER SECURITY ENTHUSIAST #MOTORBIKE ENTHUSIAST
I’m Isuru, a Cyber Security Enthusiast and digital guardian who lives for the "aha!" moment when a complex problem finally makes sense. I spend my days building invisible shields for some of the biggest organizations in Sri Lanka, ensuring their digital worlds stay safe and sound. While I've spent over three years mastering the art of stopping "bad actors" and fine-tuning security systems, I believe the best technology is the kind you never have to think about because it just works.
• Manage, hire, and mentor a specialized Application and Data Security team, delivering tailored strategic roadmaps and defense-in-depth solutions for high-profile enterprise clients.
• Lead the design, implementation, hardening, and troubleshooting of enterprise-grade Web Application and API Protection (WAAP) solutions, with deep technical expertise in F5 ASM/AWAF, F5 Cloud WAAP and Imperva.
• Architect and troubleshoot high-availability Application Delivery Controller (ADC) solutions, including F5 LTM/DNS/CGNAT, F5 Cloud CDN, Barracuda, and Array, to optimize application performance and reliability.
• Deploy and manage comprehensive Email Security frameworks using Trend Micro, Symantec, and Check Point Harmony to mitigate advanced email threats.
• Provide expert-level implementation and advanced break-fix support for diverse security ecosystems, includingF5, Imperva, Barracuda, Array, Trend Micro, Symantec, and Check Point Harmony.
• Lead end-to-end WAAP operations across F5 and Imperva platforms, including provisioning, application onboarding, policy tuning, and incident response in high-availability enterprise environments.
• Drive the full project lifecycle—from requirements analysis and Proof of Concepts (POCs) to final optimization, while partnering with pre-sales teams to influence solution design and secure high-value client acquisitions.
• Strategize and execute critical network operations, including Disaster Recovery (DR) drills, platform migrations, and large-scale upgrades, consistently meeting 24/7 Service Level Agreements (SLAs) for high valued clients.
• Delivered implementation, configuration, and break-fix support for multi-vendor firewall environments, including Check Point and Palo Alto Networks platforms.
• Integrated and supported Zscaler SASE cloud proxy solutions, ensuring secure internet access, policy enforcement, and reliable connectivity for enterprise users.
• Provided targeted technical sessions on security protocols, WAF operations, and threat mitigation strategies, improving operational readiness and security awareness of the customers.
• Completed a 6-month internship, gaining hands-on experience with Checkpoint, Palo Alto, and SonicWALL firewalls, as well as cloud security proxy applications (Zscaler), supporting deployment, configuration, troubleshooting, and security monitoring across multiple projects.
Second Class Upper Division (GPA 3.60 | Included in the Dean's List for the Semesters 1,6,7,8)
Mathematics Stream | Z-score 1.9446
View All Digital Badges On Credly
Web Application Firewall configurations and fine tuning (F5, Imperva) | F5 Distributed Cloud WAF | Imperva Cloud WAF | Cloudflare WAF | Networking | NG Firewalls | Reverse Proxy | Load Balancers | SSL offloading and certificate Life-Cycle management | Email Security | DDoS Protection | Data Protection | API Security | Secure Web Gateways | SIEM | Vulnerability Management (Nessus, Qualys) | Network Monitoring and Traffic Analyzing | Scripting and Automation (REST API, Ansible, Terraform, Python, Bash) | Identity and Access Management (SAML, OAuth, OIDC, Kerberos, LDAP, Radius) | BOT Protection | DDoS L3-L7 | OWASP | Linux | Advanced Troubleshooting | F5 BIG-IP (LTM/ASM/APM/DNS/CGNAT/iRules) | F5 Distributed Cloud | Imperva | Palo Alto | Checkpoint | Barracuda ADC | Zscaler | TrendMicro | Symantec | Splunk | QRadar | Wireshark | Git | Linux (RHEL, Ubuntu) | Windows Server | Docker | Python | Bash
Feel free to reach out via email or find me on social media: