Arunkumar Nadar

s

stackdnow - Fintech Savings & Banking Platform

Apr 2026 - Current (3 months)

Mobile-first fintech platform for committed savings, smart deals, and enterprise payroll banking. URL: stackdnow.com | Business portal: busines.stackdnow.com Key features: • High-yield committed savings with AI-powered smart deals advisor • Low-interest personal loans for individuals • Enterprise payroll account onboarding with rebates • KYC & account management portal • Isolated ERP for enterprise payroll operations • Consumer mobile apps (iOS & Android) — 60% complete • Website and bank management portal — 80% complete Infrastructure powered by decentro.tech banking API stack. Built with AI-assisted development (GitHub Copilot). Part of my personal startup portfolio funded through cybersecurity consulting.

S

Synchrony Financial — Zscaler to Netskope Migration

Oct 2025 - Mar 2026 (6 months)

Client: Synchrony Financial (via CBTS India) | Oct 2025 – Mar 2026 Led the end-to-end migration of Synchrony Financial's cloud security stack from Zscaler to Netskope, ensuring zero-downtime cutover across a global enterprise environment. Key Deliverables: • Assessed existing Zscaler ZIA/ZPA policies, PAC files, and tunnel configurations • Designed Netskope equivalent architecture covering SWG, CASB, ZTNA (NPA), and DLP • Migrated security policies, URL categories, SSL inspection rules, and user group mappings • Configured Netskope Real-time Protection policies aligned to Synchrony's compliance requirements • Performed phased cutover with parallel-run validation to ensure business continuity • Conducted post-migration traffic analysis and f

H

HTX — Robotic Patrol SDWAN over Private 5G, MPLS & NFC

Sep 2022 - Nov 2023 (1 year 3 months)

Client: HTX (Home Team Science & Technology Agency) – Singapore Police Force (via NCS Singapore) | Sep 2022 – Nov 2023 Delivered a next-generation SDWAN network architecture to support autonomous robotic patrol units across SPF premises, integrating multiple transport technologies. Key Deliverables: • Deployed FortiGate as the SDWAN controller across private 5G, MPLS, and NFC (Near Field Communication) transport links • Configured dynamic path selection policies to ensure seamless failover across 5G, MPLS, and NFC links based on SLA thresholds • Integrated robotic patrol units with SDWAN overlay for real-time telemetry and command-and-control traffic • Secured traffic using IPsec tunnels with FortiGate HA (active/passive) for resilience • C

L

LTA Singapore — 3-Tier Firewall Management (Check Point, FortiGate, Palo Alto)

Sep 2022 - Nov 2023 (1 year 3 months)

Client: Land Transport Authority (LTA) Singapore (via NCS Singapore) | Sep 2022 – Nov 2023 Managed and supported a complex 3-tier firewall architecture for LTA Singapore, covering operational support, policy management, and compliance across multiple vendor platforms. Key Deliverables: • Managed Tier 1/2/3 firewall stack: Check Point (perimeter), FortiGate (internal/DMZ), and Palo Alto NGFW (application layer) • Centralised FortiGate policy management via FortiManager; Palo Alto managed via Panorama • Leveraged AlgoSec Analyzer for firewall rule analysis, cleanup, and risk assessment • Performed security policy reviews, rule optimisation, and compliance reporting • Coordinated change management for firewall rule additions, modifications, an

M

Max — AWS EC2 P4 GPU Deployment for AI-Powered Parking System

Jan 2022 - Jun 2022 (6 months)

Client: Max (via Upwork) | Jan 2022 – Jun 2022 Deployed and configured Amazon EC2 P4 GPU instances on AWS to support a startup's AI-powered parking management system, enabling real-time offense detection using machine learning. Key Deliverables: • Provisioned Amazon EC2 P4d instances (NVIDIA A100 GPUs) optimised for ML inference workloads • Configured VPC, security groups, IAM roles, and S3 storage for the ML pipeline • Set up Auto Scaling and load balancing to handle variable traffic from parking camera feeds • Integrated EC2 instances with the client's ML model pipeline for real-time vehicle offense detection (illegal parking, traffic violations) • Optimised GPU utilisation and instance costs using spot instances and savings plans • Docum

B

Beacon Red (UAE) — Managed Security Infrastructure

Jan 2021 - Dec 2021 (1 year)

Client: Beacon Red (via Halian, Abu Dhabi UAE) Beacon Red is a UAE-based cybersecurity firm (subsidiary of EDGE Group) specialising in cyber threat intelligence, red teaming, and managed security services for government and critical infrastructure clients across the Middle East. Responsibilities: • Managed and maintained Beacon Red's core security infrastructure • Supported network security operations across a high-security, government-adjacent environment • Maintained firewall policies, VPN configurations, and network segmentation • Assisted in hardening network infrastructure aligned with UAE government security standards • Coordinated with internal security teams on infrastructure changes and incident response support Context: Deployed v

U

Upwork SME Projects — Network & Security Consulting (2018)

Jan 2018 - Dec 2018 (1 year)

Multiple SME client projects delivered via Upwork | Jan 2018 – Dec 2018 🔹 JGT Unlimited, Inc (US) — DD-WRT Bridge Extension Reconfigured DD-WRT WiFi router in bridge mode to extend LAN/DHCP network for wireless printer and users. Performed UAT with client team. 🔹 Federal Reserve Bank — National IT, Richmond VA — Cisco 2504 WLC Setup Designed and configured Cisco 2504 WLC for guest WIFI access. Configured VLANs, STP, VTP on Cisco 3560 core and 2960 edge switches. Set up L3 SVI with DHCP for guest wireless clients. Performed UAT. 🔹 VGCIT, Inc (US) — Cisco Firepower to Palo Alto PA-3020 Migration Replaced Cisco Firepower NGFW with Palo Alto PA-3020. Extracted and migrated all interfaces, routes, firewall objects, and security policies. Exec

L

Logicalis Singapore — Enterprise Network & Security Projects (2015–2017)

Aug 2015 - Dec 2017 (2 years 5 months)

Key client projects delivered as Network Security Engineer / Team Lead at Logicalis Singapore | Aug 2015 – Dec 2017 🔹 MediaCorp — Check Point to FortiGate UTM Migration Perimeter security hardware replacement as part of hardware lifecycle & office relocation. Extracted CP policies, staged FortiGate HA (active/standby), executed phased migration, delivered ASBUILT docs. 🔹 Telin 3 Data Center (PT Telekom subsidiary) — Full DC Infrastructure Build Built network infra from scratch: Cisco ASA HA, ISE HA (AAA/DOT1X), WLC HA with multi-SSID, Catalyst 4500/2960X access/core switches, Nexus 3K, Firepower in monitor mode, IPsec remote access VPN. Led team of network, security, and ISE engineers. 🔹 SEA Group / Shopee — Enterprise Network Setup Full

S

Singtel — Global VPN & MPLS Service Provisioning (2011–2015)

Aug 2011 - Aug 2015 (4 years 1 month)

Global VPN/MPLS provisioning and operations at Singtel Singapore | Aug 2011 – Aug 2015 Key engagements across MPLS L3VPN, VPLS, IPsec, and carrier migration projects for global enterprise clients: • Global bank (Australia) — MPLS provisioning with carrier/POP diversity, dual VPN routing, multi-COS • Global glass manufacturer — Migrated 200+ sites to Singtel/Bharti and Singtel/China Telecom IPVPN with 98% QoS accuracy • Singapore global bank — Link upgrades with carrier diversity and Jumbo Frame support • Global oil & gas — Full L3VPN migration across Singtel partner providers, multi-COS with DCP • Regional logistics company — MPLS L3VPN service upgrade • Global freight management — Policy-based routing for dual-VPN load balancing • Global f

A

Apex Adversary - ZTNA Cybersecurity Startup

Cybersecurity startup focused on Zero Trust Network Access (ZTNA) — apexadversary.com Building Apex Aegis: a next-generation Single Packet Authorization (SPA) solution with: • Custom PKI-based OTP encryption using client/server certificate model (replaces standard fwknop UDP approach) • Integrated Secure Web Gateway (SWG) • Cloud Access Security Broker (CASB) • AI security proxy capabilities • Zero Trust architecture enforced at the packet level The solution extends the fwknop concept with encrypted OTP and identity verification, making port-knocking genuinely cryptographically secure. Built using open-source components with custom source code modifications. Stage: Proof of concept / active R&D. Not yet registered as a legal entity. Built w

I

IPv7 — IETF Internet-Draft (draft-subbiah-ipv7-00) + Rust Reference Implementation

Authored and submitted draft-subbiah-ipv7-00 to the IETF Datatracker — a proposed Standards Track network-layer protocol specification for IPv7, alongside a full Rust reference implementation. IETF Draft: https://datatracker.ietf.org/doc/draft-subbiah-ipv7/ GitHub (Rust): https://github.com/46y9qkpkjc-ui/ipv7-stack IPv7 introduces an Identity-Centric addressing model to solve problems IPv4/IPv6 cannot: • Variable-Length Identity Block (VLIB) — carries Ephemeral Identity Tokens (EIT) and cryptographic Origin Signatures per packet • Source-Provider Validation (SPV) — first-hop routers verify packet origin; proxy-routed packets fail validation and are dropped at the edge • Quantum-Resistant Cryptography — CRYSTALS-Dilithium (NIST PQC / FIPS 20

L

Logicalis Singapore — SME Client Security Projects (2015–2017)

Additional SME client projects at Logicalis Singapore | Aug 2015 – Dec 2017 🔹 Dymon Singapore — Network Assessment Full network maturity assessment: L2/L3 architecture, STP/VPC/FHRP, QoS, multicast, traffic profiling, capacity planning, device hardening, NMS analysis. 🔹 DS Global Singapore — FortiGate Internet Gateway Setup FortiGate as secure internet gateway with LAN/DHCP, NAT, SSL VPN split tunnel, 2FA via FortiToken. 🔹 Star Hub / RHB Singapore — Hardware Lifecycle Management Replaced and upgraded Cisco hardware for RHB bank across multiple locations. Config backup, conversion, staging, UAT. 🔹 Star Hub / Capitol Office — FortiGate Secure Office Setup FortiGate internet gateway with LAN/DHCP, NAT, SSL VPN split tunnel. 🔹 H&C Singapor

About

Detail

Timeline

Résumé