Skip to content
Abu Dhabi, United Arab Emirates25+Years in technology

Shabeer Mangattu Parambil

Technology & Digital Transformation Leader

Building secure, resilient and future-ready enterprise technology across infrastructure, cybersecurity, cloud, identity and AI-enabled transformation.

Certified

  • CISM
  • CISSP
  • ITIL v3
  • Dell Zero Trust Design
  • CCNA

Profile

Enterprise perspective. Hands-on leadership.

Senior technology leader with experience guiding complex, multi-entity environments across higher education and diversified group organisations. Focus areas include enterprise architecture, datacenters, networks, identity, cybersecurity, cloud, disaster recovery, service operations and responsible AI adoption.

The work sits deliberately across two disciplines. On one side: architecture and engineering — virtualization and hyperconverged infrastructure, multi-site disaster recovery, Zero Trust security, identity and access management, Microsoft 365 and Azure, enterprise networking and unified communications. On the other: strategy and governance — budget ownership, RFP authoring and vendor evaluation, compliance, service management and the AI adoption roadmap.

That combination is the point. Infrastructure decisions are business decisions, and the leaders who can hold both the technical detail and the commercial case are the ones who deliver programmes that actually land — on budget, on schedule, and without disrupting the people who depend on them.

25+ years across infrastructure, security and digital transformation
CISM and CISSP certified; CISO of the Year, 2024
Multi-entity Shared Services IT across university and holding-group organisations
Owns annual budget planning and enterprise RFP governance

Operating focus

  • 01

    Enterprise architecture

    Datacenter, hybrid cloud, HCI and multi-site resilience

  • 02

    Security leadership

    Zero Trust, managed SOC, IAM/PAM and compliance

  • 03

    Transformation

    Modernisation, automation and enterprise AI adoption

  • 04

    Commercial governance

    Budget ownership, RFPs and vendor performance

Education

  • MScInformation Technology
  • MBAManagement Information Systems
  • BachelorInformation Technology

Expertise

Eight disciplines, one operating model.

Enterprise technology only works when the layers hold together. These are the domains I own end to end — from physical infrastructure through to the AI capabilities running on top of it.

Career

Twenty-five years, one direction of travel.

From hands-on engineering to owning the technology function for a multi-entity group — each role adding a layer of scope without giving up the technical detail.

  1. Senior Information Technology Manager

    Current

    Abu Dhabi University & NEMA HoldingAbu Dhabi, UAE

    Aug 2016 — Present

    Group IT function reporting to the Group Director of IT & Digital Transformation, NEMA Holding. Centralised Shared Services model across Abu Dhabi University, NEMA Holding, Liwa University, KGC and affiliated entities.

    Responsibilities

    • Direct enterprise infrastructure, datacenter, network and cybersecurity operations across 110+ departments and multiple group entities.
    • Own the IT budget for ADU and Group entities — annual OPEX/CAPEX planning, cost optimisation and vendor/RFP governance.
    • Lead ~18 infrastructure, network and security initiatives within a 70+ project annual digital portfolio (AY 2025–26).
    • Own the Infrastructure & Security portfolio: RBAC/IAM, managed SOC with enterprise SIEM, anti-ransomware, Microsoft 365 Defender and AD/AD CS security auditing.
    • Author and evaluate major enterprise RFPs across IAM, wireless, firewalls, SOC, application VAPT, Teams Phone and Microsoft licensing — building compliance matrices and technical/commercial scoring.
    • Lead a specialist team spanning systems administration, network engineering and project management.

    Key achievements

    • Architected enterprise IAM/PAM and SSO for ~10,000 users across Microsoft Entra ID, Keycloak and Oracle PeopleSoft, automating joiner–mover–leaver, licensing and ID-card workflows.
    • Delivered Microsoft 365 A5 transformation for 672 staff and 7,663 students, including Defender for Endpoint, ATP and security-baseline hardening.
    • Led the enterprise Disaster Recovery programme — multi-site DR across four entities and a datacenter migration from Dubai to Frankfurt.
    • Across 14 protected sites, mitigated 31.6M+ bot attacks and 686K+ WAF violations in a single quarter with no major incident or service disruption.
    • Delivered unified communications migration to Microsoft Teams Phone with a Microsoft-certified SBC, Direct Routing and PRI-to-SIP migration.
    • Maintained 99.9%+ availability across enterprise systems while leading the department transition to Digital Advancement, Transformation & AI (DATA).
    Microsoft 365 A5Entra IDAzureMicrosoft DefenderActive Directory / AD CSVMwareNutanixDell InfrastructureKeycloakOracle PeopleSoftTeams PhoneNGFW / WAFNAC / 802.1XBoomi
  2. Career Progression — IT Leadership

    Abu Dhabi UniversityAbu Dhabi, UAE

    2006 — 2016

    A decade of progressive responsibility from hands-on engineering to institutional IT leadership.

    Responsibilities

    • Built and operated the university's core server, storage and network estate through successive generations of technology.
    • Established infrastructure standards, monitoring and support processes as the institution scaled across campuses.
    • Took on institutional IT leadership, including an acting IT Director mandate covering the full technology function.

    Key achievements

    • Progressed through six roles from IT Support Engineer to Acting IT Director.
    • Delivered the infrastructure and Blackboard Mobile programmes recognised with university project awards.
    • Recognised with the ADU Innovation Award (2016) and Employee of the Year (2007).

    Progression

    • Acting IT Director (concurrent)2016 — 2017
    • IT Manager2013 — 2016
    • Interim IT Head2012 — 2013
    • Senior System Administrator2010 — 2013
    • Network Administrator2009 — 2010
    • IT Support Engineer2006 — 2009
    Windows ServerVMwareCiscoArubaActive DirectoryBlackboard
  3. IT Supervisor

    ADNOC DistributionAbu Dhabi, UAE

    Feb 2003 — Oct 2006

    Responsibilities

    • Delivered end-user support and system maintenance across a distributed enterprise environment.
    • Managed network security controls — access control, anti-virus and backup operations.
    • Coordinated third-party vendors to ensure timely service delivery against operational commitments.

    Key achievements

    • Established consistent support and maintenance practices across a large national distribution network.
    WindowsNetworkingBackup & RecoveryEndpoint Security
  4. Faculty — Information Systems

    Computer College of India (CCI)Kozhikode, Kerala, India

    Jun 2000 — Nov 2002

    Responsibilities

    • Taught information systems and computing fundamentals to diploma and degree cohorts.
    • Developed curriculum and practical laboratory programmes for networking and systems modules.

    Key achievements

    • Built the teaching foundation that still shapes how I brief boards, vendors and engineering teams.
    Information SystemsNetworking FundamentalsCurriculum Design

Awards & recognition

Industry recognition for security and IT leadership

  • 2024

    CISO of the Year

    Future Workspace Summit & Awards

  • 2024

    IT Manager of the Year

    CIO Connect Summit & Awards

  • 2023

    Technology Accelerator of the Year

    SME Tech Innovation Summit & Awards

  • 2021

    Workplace Transformation of the Year — Education

    Future Workspace Awards

  • 2017

    CIO 100 & CXO 50

    IT Leadership Middle East (CPI / CXO DX)

Featured projects

Programmes delivered at enterprise scale.

A selection of the infrastructure, security and transformation programmes I have architected and led — each with the constraint it had to solve and what it changed.

In delivery

Identity & Security · 2024 — 2026

Identity & Access Management Modernisation

Enterprise IAM, PAM and SSO for ~10,000 users, with automated employee and student lifecycle management across the group.

Microsoft Entra IDKeycloakOracle PeopleSoftActive Directory+4
Delivered

Cloud & Security · 2023 — 2025

Microsoft 365 A5 Security Transformation

Advanced Microsoft security, Defender and enterprise identity capabilities rolled out across the full staff and student estate.

Microsoft 365 A5Defender for EndpointMicrosoft ATPEntra ID+2
In delivery

Cybersecurity · 2024 — 2026

Cybersecurity Enhancement Programme

Managed SOC, application penetration testing, Active Directory and AD CS hardening, firewall modernisation and Zero Trust initiatives.

Managed SOCEnterprise SIEMNext-Generation FirewallsWAF+4
Delivered

Networking · 2023 — 2025

Enterprise Wireless Transformation

Modern enterprise wireless infrastructure with NAC, certificate-based authentication, segmentation and a managed service architecture.

Enterprise Wi-Fi802.1XRADIUSNAC+2
Delivered

Infrastructure · 2022 — 2025

Data Center & Infrastructure Modernisation

Servers, storage, virtualization and hyperconverged infrastructure modernisation with architecture optimisation and a hybrid operating model.

Nutanix HCIVMwareDell VxRailDell PowerScale+2
In delivery

Resilience · 2024 — 2026

Enterprise Disaster Recovery Programme

Multi-site disaster recovery across group entities, including an international datacenter migration and defined RPO database backups.

Multi-Site DRDatacenter MigrationOracle Cloud InfrastructureBackup & Replication+1
Delivered

Collaboration · 2025

Microsoft Teams Unified Communication

Teams Phone integration with a Microsoft-certified SBC, Direct Routing and enterprise voice modernisation across campuses.

Microsoft Teams PhoneCertified SBCDirect RoutingSIP Trunking+1
Delivered

IT Operations · 2021 — 2025

Enterprise Monitoring & ITSM

Infrastructure monitoring, IT service management and operational visibility improvements across the group estate.

Site24x7PRTGManageEngineMatrix42+2
In delivery

Digital Transformation · 2023 — 2026

Smart Campus Modernisation

Modernisation of interactive teaching spaces, auditorium AV and LED across the campus estate.

Interactive DisplaysHybrid AVLED SystemsRoom Control+1

Capability map

The enterprise stack, layer by layer.

Not a logo wall. This is how the estate is actually organised — each layer with the platforms I architect, operate and hold vendors accountable for.

01

Cloud & Productivity Platform

The hybrid platform layer where identity, collaboration and workload hosting converge.

  • Microsoft Azure
  • Microsoft 365
  • Microsoft Entra ID
  • Microsoft Teams Phone
  • Oracle Cloud Infrastructure
02

Security & Trust

Controls spanning endpoint, perimeter, identity and application layers under a Zero Trust model.

  • Microsoft Defender
  • Zero Trust Architecture
  • Fortinet / Enterprise Firewalls
  • WAF & Bot Mitigation
  • Enterprise SIEM & SOC
  • AD CS / PKI
03

Identity & Access

One identity fabric driving authentication, authorisation and lifecycle across every system.

  • Active Directory
  • IAM / SSO / MFA
  • Keycloak
  • Privileged Access Management
  • RBAC & Access Governance
04

Datacenter & Infrastructure

Compute, storage and virtualization engineered for availability, density and lifecycle economics.

  • VMware
  • Nutanix HCI
  • Dell VxRail
  • Dell PowerScale
  • Dell Enterprise Infrastructure
  • Windows Server
05

Network & Connectivity

Segmented, identity-aware connectivity across campuses, buildings and device classes.

  • Enterprise LAN / WAN
  • Enterprise Wi-Fi
  • Network Access Control
  • RADIUS / 802.1X
  • Network Segmentation
06

Operations & Service Management

Observability and service governance that turn infrastructure into a measurable service.

  • Site24x7
  • PRTG
  • ManageEngine
  • Matrix42
  • Elastic Stack
  • ITIL Service Management
07

Enterprise Applications & Integration

Core business systems and the integration fabric that keeps their data consistent.

  • Oracle PeopleSoft (HRMS / SIS / FSCM)
  • Boomi Integration Platform
  • Sitefinity
  • Enterprise Web Hosting
08

AI & Automation

Applied AI and automation across productivity, operations and security workflows.

  • Enterprise AI Strategy & Governance
  • Generative AI Productivity
  • Intelligent Automation
  • AI-Assisted Security Operations

Impact

Credible scale, clearly stated.

The operating footprint behind the work, kept to the outcomes that hold up over time rather than a snapshot quarter.

0+

Years in technology

Infrastructure, cybersecurity, compliance and digital transformation

~0K

Users in enterprise IAM & SSO scope

Staff, students and affiliated group users across a single identity fabric

0+

Interactive classrooms modernised

Teaching spaces standardised across the campus estate

0.0%+

Service availability maintained

Sustained across core enterprise systems and infrastructure

Public-facing figures are limited to durable, non-sensitive outcomes supported by the 2026 CV.

Certifications

Credentials that back the architecture.

Security governance, infrastructure and network certifications maintained alongside continuous professional development.

Valid to 2029

Certified Information Security Manager (CISM)

ISACA

Governance, risk management and information security programme leadership.

CISSP

(ISC)²

Security architecture, engineering and operations across all eight domains.

2023

Dell Technologies Proven Professional — Dell Zero Trust Design

Dell Technologies

Zero Trust reference architecture and design principles for enterprise environments.

ITIL v3 Foundation

EXIN

Service management lifecycle and IT operations governance.

Cisco Certified Network Associate (CCNA)

Cisco

Enterprise routing, switching and network fundamentals.

Aruba Certified Mobility Professional

HPE Aruba

Enterprise wireless design, deployment and troubleshooting.

VMware Cloud Director

VMware

Virtualization and cloud infrastructure management.

Nutanix Platform Professional

Nutanix

Hyperconverged infrastructure architecture and operations.

F5 BIG-IP ASM v12 & LTM

F5 Networks

Application security management and local traffic management.

Continuing development

Ongoing programmes across cloud, AI and leadership

  • AWS Architects
  • Azure Administration
  • Generative AI Productivity (Microsoft & LinkedIn, 2024)
  • AI for Business Leaders
  • Creating Your IT Strategy
  • PRTG Monitoring Expert
  • The 7 Habits of Highly Effective People (FranklinCovey, 2025)

Technology leadership is not only about deploying infrastructure. It is about creating secure, scalable and resilient platforms that enable people, improve operations and prepare organisations for what comes next.

Shabeer Mangattu ParambilTechnology & Digital Transformation Leader

01

Resilience before features

Availability, recoverability and security are the foundation everything else is built on. A capability that cannot survive a bad day was never delivered.

02

Architecture with a business case

Every design decision carries a cost and a risk profile. The right answer is defensible in an engineering review and a budget review alike.

03

Teams outlast projects

Programmes finish; capability compounds. Building engineers who can own what they deliver is the highest-leverage work a technology leader does.

Knowledge & insights

Notes from inside the estate.

Practitioner writing on the problems that do not fit neatly into a vendor datasheet — security architecture, identity, infrastructure economics and enterprise AI.

CybersecurityComing soon

Zero Trust on a campus network: where the model meets reality

Zero Trust assumes you control the endpoint. A university does not. What the model looks like when a third of your devices belong to people who graduate in four years.

8 min read
IdentityComing soon

AD CS is the quietest risk in your Active Directory estate

ESC1 through ESC8 turned certificate services into a domain-escalation path. A practical account of assessing and remediating a live enterprise PKI.

10 min read
IdentityComing soon

Joiner–mover–leaver: the automation that pays for the whole IAM programme

Federation gets the attention, but lifecycle automation is where identity work converts into measurable risk reduction and reclaimed licensing spend.

7 min read
InfrastructureComing soon

The economics of a hyperconverged refresh

Rack space, power, licensing and support renewals rarely appear in the same business case. When they do, the infrastructure decision usually changes.

6 min read
AIComing soon

Enterprise AI governance before enterprise AI adoption

Data classification, access boundaries and acceptable-use policy are the prerequisites nobody budgets for — and the reason most AI pilots stall at pilot.

9 min read
MicrosoftComing soon

Reading a Microsoft licensing proposal like a CFO

A5 versus A3 plus add-ons is not a licensing question, it is a security architecture question with a licensing invoice attached.

7 min read
CloudComing soon

Your DR plan is a hypothesis until you have failed over

Multi-site recovery across entities with different platforms and regulators — what changed between the documented RPO and the tested one.

8 min read
IT LeadershipComing soon

How to write an RFP that gets you the right vendor

Compliance matrices, weighted technical scoring and the requirements language that separates genuine capability from a well-written proposal.

9 min read
Digital TransformationComing soon

Modernisation fails at adoption, not at architecture

The technical migration is the shorter half of the programme. Notes on sequencing change so that 8,000 people arrive with the platform.

6 min read

Articles are published as they are written. Add or edit entries in src/content/site.ts — set a href to link a published piece.

Contact

Let’s Connect

Open to meaningful conversations about technology leadership and transformation — enterprise infrastructure and security programmes, advisory work, speaking engagements and vendor partnerships.

Based in
Abu Dhabi, United Arab Emirates
Focus areas
Infrastructure · Cybersecurity · IAM · Digital transformation
Typical response
Within two business days

Messages are delivered through a secure form service. No email address is published on this site.