About AI Work Expertise Experience Stack Blog Contact
Always up for a good tech discussion

Hey, I'm Ishan

IT Security & Cloud Leader Zero Trust · SOC 2 · HIPAA Agentforce Specialist AI Agents · RAG · MCP AWS · Azure · GCP MuleSoft · API Governance Okta · Zscaler · IAM

Leading Zero Trust security, SOC 2 & HIPAA compliance, and MuleSoft integration programmes — while building autonomous AI agents and RAG pipelines hands-on. 13+ years turning complexity into secure, scalable, AI-first systems across AWS, Azure, and GCP.

View Experience → Let's Talk
🏆
5× Certified Salesforce 2025
Ishan Khan
Enterprise IT Leader
ZERO TRUST · AI GOVERNANCE · CLOUD ARCHITECT
Rajasthan, India  ·  IST (GMT+5:30)
Architecting AI systems on AWS · Azure · GCP
Connect on LinkedIn
13+
Years
13
Certs
5×
SF Certified
// Who I Am

About Me

Quick Profile

RoleSenior Manager, IT — Security, Cloud & Integration
Experience13+ Years in IT Security, Cloud & AI
DiscussionHappy to connect, guide & share insights
EducationB.Tech Information Technology — 2012
LanguagesEnglish · Hindi · Urdu · Arabic
Agentforce Specialist
SF Admin 2025
AI Associate 2024
Slack Admin 2025
AWS Architect
Fortinet NSE 1&2

I'm a Senior Manager, IT with 13+ years leading IT security, cloud infrastructure, and enterprise integration programmes across AWS, Azure, GCP, and Akamai. I'm currently leading an enterprise-wide Zero Trust programme — replacing legacy perimeter security with cloud-delivered, identity-aware secure access — and a MuleSoft transformation spanning API governance, Anypoint Omni Gateway, Mule Agent Fabric, and MuleSoft-to-Salesforce MCP connectivity for agentic integration workflows.

My specialisation sits at the intersection of Zero Trust & Identity Security and AI Governance & LLM Integration. I own AWS and GCP infrastructure strategy and cost optimisation across business units, and I build AI-driven IT operations hands-on — designing internal agents with n8n and LLM APIs, including a daily-briefing agent, a spend-analytics dashboard, and an automated AI-tool scanner with multi-provider cost routing. I'm also a certified Agentforce Specialist, deploying autonomous Salesforce agents and RAG-powered pipelines using Einstein AI, Claude, and ChatGPT.

On compliance and identity, I run SOC 2 Type 2 and HIPAA programmes end to end — evidence collection, risk assessments, auditor relationships, and policy documentation — and administer Okta for SSO/SAML, SCIM provisioning, adaptive MFA, and device trust. I also administer Slack Enterprise Grid, covering workspace governance, Workflow Builder automation, DLP, e-discovery/legal hold, and SIEM integration in support of SOC 2 and HIPAA controls.

I'm a firm believer in continuous learning — consistently expanding certifications across Salesforce, cloud, and security. I'm also a content creator producing AI explainer videos on YouTube and travel reels on Instagram, bringing a communicator's perspective to complex technical topics.

Get in Touch →
// AI First

AI & Automation

Harnessing next-generation AI tools to automate, augment, and accelerate business outcomes.

AUTO
AI
CLOUD
API
DATA
SEC
⚙️
Digital Labour — The Agentic Shift
Autonomous AI agents at work
AI Ready

Digital Labour is the shift from humans performing repetitive tasks to autonomous AI agents handling them independently — scaling operations without scaling headcount. As a certified Agentforce Specialist, I architect and deploy this digital workforce: agentic pipelines routing real-time alerts into triage channels, Workflow Builder automations provisioning new employees into Slack, incident response bots enabling engineers to query logs directly from threads, and RAG-powered knowledge systems built on Slack Canvas that centralise API docs, onboarding guides, and escalation protocols as persistent institutional knowledge.

Agentforce Agents RAG Architecture LLM Governance Slack Canvas Agentic Pipelines Workflow Builder Einstein AI Knowledge Management
Agentforce & Einstein AI
Deploying autonomous Salesforce agents for intelligent case routing, customer-facing bots, and back-office process automation — the core of enterprise digital labour.
Slack AI Governance & Enterprise Admin
Governing Slack AI features — conversation summaries, enterprise search, automated recaps, custom LLM bots — with prompt libraries, model transparency, and data usage guidelines.
RAG Architecture & LLM Integration
Building Retrieval-Augmented Generation pipelines that connect knowledge bases, Salesforce, Google Drive, and external sources to deliver context-aware AI responses across the enterprise.
Prompt Engineering & AI Automation
Designing advanced prompts and agentic pipelines for Claude, ChatGPT, Gemini, and Grok — from conversational AI to fully automated monitoring and incident response workflows.
// Case Studies

Selected Work

Real programmes and systems I've designed, built, and shipped — problem to outcome.

01 / SECURITY

Zero Trust Access Migration

Problem — A legacy VPN and perimeter security model that no longer fit a remote-first, multi-cloud organisation.

Built — Cloud-delivered secure access on Zscaler ZIA/ZPA with Okta Verify for continuous device and identity posture: adaptive MFA, managed-device trust, disk-encryption checks, and biometric access restrictions.

Outcome — Identity-aware access across the network and device layers, migrating off legacy VPN, with controls mapped to SOC 2.

ZscalerOkta VerifySOC 2
02 / AI OPERATIONS

Fleet-Wide AI Tool Scanner

Problem — Shadow AI: unsanctioned AI tools appearing across the full Mac and Windows fleet, with SOC 2 obligations to meet.

Built — An automated daily scanner integrating LLM-based behavioural analysis, a two-pass architecture to eliminate false positives, and multi-provider API routing to keep inference costs down.

Outcome — Daily fleet-wide visibility of AI tool usage with near-zero false positives and optimised API spend.

LLM APIsMDMAutomation
03 / AI AGENTS

Daily-Briefing & Spend-Analytics Agents

Problem — Task, cloud-spend, and SaaS data scattered across tools — consolidating it burned leadership time every day.

Built — Internal AI agents on n8n and LLM APIs: a daily-briefing agent that consolidates tasks and data into a start-of-day snapshot, and a spend-analytics dashboard with department- and customer-level visibility across cloud, AI, and SaaS.

Outcome — Start-of-day clarity for leadership and recurring savings via license audits, shadow-IT detection, and renewal negotiations.

n8nLLM AgentsFinOps
04 / GOVERNANCE

AI Developer-Tool Governance Framework

Problem — Engineering wanted AI coding tools; the business needed SOC 2-compatible guardrails without slowing anyone down.

Built — A multi-layer framework: admin-enforced policy, MDM-managed configuration, and network firewall rules, with access tiers mapped to SOC 2 controls.

Outcome — The business adopted AI tooling securely — engineering velocity intact, auditors satisfied.

PolicyMDMSOC 2
// What I Offer

My Expertise

Areas where I can offer guidance, share knowledge, or collaborate on technical discussions and problem-solving.

01
AI & Automation Strategy
Designing agentic AI pipelines, RAG architectures, and LLM-powered workflows using Claude, ChatGPT, and Gemini — turning AI adoption from experiment to enterprise reality.
RAG Prompt Eng. Claude LLM Ops
02
Cloud Architecture
Design and deploy scalable, fault-tolerant multi-cloud systems on AWS, Azure, and GCP. Migration consulting, cost optimisation, and infrastructure-as-code.
AWS Azure GCP Migration
03
Agentforce & Salesforce
Deploying Agentforce autonomous agents, Einstein AI configuration, and full-cycle Salesforce administration with Slack integration for enterprise teams.
Agentforce Einstein AI SF Admin Slack
04
Security & IAM
Enterprise IAM implementation with Okta, Onelogin, SSO, MFA, and oAuth/SAML. WAF configuration and SOC 2 / HIPAA compliance implementation.
Okta SSO/SAML WAF Compliance
05
IT Infrastructure
Linux and Windows server administration, cPanel/WHM, email server setup (DKIM/SPF/DMARC), Akamai CDN/WAF, and enterprise SaaS management.
Linux cPanel Akamai Email Server
06
DevOps & Tooling
CI/CD pipeline design and management with Jenkins, Jira/TestRail configuration, MDM with Apple Business Manager & Intune, Google Workspace and Microsoft 365 admin.
Jenkins Jira MDM CI/CD
Start a Discussion →
// Career Journey

My Experience

13+ years across IT security leadership, Zero Trust & compliance, cloud infrastructure, and enterprise integration.

Experience
Dec 2024 — Present
Senior Manager, IT
Leading an enterprise Zero Trust programme (Zscaler ZIA/ZPA, Okta Verify device trust) and owning SOC 2 Type 2 & HIPAA compliance end to end. Driving the MuleSoft transformation — Anypoint Omni Gateway, Mule Agent Fabric, and MuleSoft-to-Salesforce MCP connectivity. Own AWS & GCP infrastructure strategy, and build internal AI agents with n8n for daily-briefing automation, spend analytics, and AI-tool governance.
May 2021 — Sep 2023
Manager, IT
Led large-scale IT projects including design and deployment of new architecture, systems, and services. Managed Salesforce org, SSO via SAML & SWA, Jenkins CI/CD, and enterprise tools including Jira, TestRail, Okta, OneLogin, and Google Admin.
Apr 2020 — May 2021
Asst. IT Manager
Assessed vendors and developed test strategies for hardware and software. Troubleshot issues, identified problematic areas, and implemented strategic solutions. Conducted system audits, preserved assets, and enforced information security structures.
Apr 2018 — Mar 2020
TL – IT & Cloud Infrastructure · Solution Architect
Led AWS cloud migrations with ELBs for Apache, Tomcat, NodeJS and AutoScaling. As Akamai Service Architect: configured CDN, FastDNS, WAF, AMD, and Image Compression. Administered Linux email servers with DKIM, SPF, and DMARC configuration.
Apr 2017 — Mar 2018
ATL – IT Administration
Management of Linux servers (Red Hat, CentOS, Ubuntu). Managed Shared, Reseller, VPS, Dedicated servers. Handled cPanel/WHM, resolved PCI Compliance issues, and configured VMware virtualization on Windows and Linux including Apache Web Server setup.
Apr 2016 — Mar 2017
Senior IT Administrator
Administered MS Exchange servers, Active Directory, and public folders. Configured ActiveSync for mobile messaging, deployed Lync for multiple clients, and supported system backup and disaster recovery processes.
Oct 2014 — Mar 2016
System Administrator
Provided technical guidance for migration, configuration, and deployment of Lync. Implemented new technologies, administered system backup and disaster recovery, and suggested innovative solutions to improve operational efficiency.
Jan 2013 — Jun 2014
Senior Executive – IT
Configured Windows FTP Server and Linux-based Spontania Server for 1080p-HD video collaboration. Set up Adobe Connect via Blackmagic Intensity Pro. Hosted ERP-Helpdesk and extended C-Band VSAT & internet clients.
Education
2020
MBA — Operations Management
Planning, coordination, supervision of operations. Leadership and business strategy.
2012
B.Tech — Information Technology
Engineering fundamentals, hands-on IT knowledge, practical systems training.
2007 / 2005
XII / X
Secondary & higher secondary education.
Certifications
SF Slack Admin 2025 SF Admin 2025 Agentforce Specialist SF AI Associate SF Associate AWS Solutions Architect Fortinet NSE-1 & NSE-2 CNSS – ICSI Ethical Hacking MS Cloud Expert MCITP WS-2008 CCNA Training RHCE Linux
// Deep Domains

Areas of Expertise

Zero Trust & Identity Security
Leading enterprise Zero Trust architecture with Zscaler ZIA/ZPA and Okta Verify — continuous device and identity posture, adaptive MFA, disk-encryption checks, and biometric access controls, replacing legacy VPN and perimeter security.
Compliance & Risk (SOC 2 / HIPAA)
Running SOC 2 Type 2 and HIPAA compliance end to end — evidence collection across IT, engineering, and HR, risk assessments and security audits, auditor relationships, and policy documentation to close identified gaps.
MuleSoft & Integration
Leading a MuleSoft transformation program defining org-wide API and integration governance — Anypoint Omni Gateway and Mule Agent Fabric enabling agentic workflows, including MuleSoft-to-Salesforce MCP connectivity.
AI & LLM Engineering
Building AI-driven IT operations hands-on with n8n and LLM APIs — a daily-briefing agent, a spend-analytics dashboard, and an automated AI-tool scanner with multi-provider cost routing — plus RAG pipelines and MCP integration across Claude, Gemini, and OpenRouter.
Cloud Infrastructure
Owning AWS and GCP infrastructure strategy, architecture, and cost optimization across business units. Led a cloud governance and remediation initiative across a multi-account GCP environment, strengthening org-policy controls and IAM scoping.
Agentforce & Salesforce
5x Salesforce Certified — Agentforce Specialist, Administrator, AI Associate, and Slack Administrator. Deploy Agentforce autonomous agents, govern AI features, and build RAG-powered enterprise search pipelines integrated with Salesforce.
Endpoint & Device Management
Deploy and manage the Mac and Windows fleet and BYOD security through Mosyle, Microsoft Intune, and Apple Business Manager, with identity-based device-trust enforcement, encryption, and access controls.
Slack Enterprise Grid
Administer Slack Enterprise Grid across the organization — workspace and Grid configuration, Workflow Builder automations, and the app/connector catalog — enforcing governance through DLP, e-discovery/legal hold, EMM, and SIEM integration.
DevOps & Server Administration
Linux (RHEL, CentOS, Ubuntu) and Windows Server administration, Jenkins CI/CD, VMware virtualization, and Jira administration. Full enterprise administration of Google Workspace, Microsoft 365, and collaboration tools at scale.
// Tech Stack

Tools I Work With

Salesforce
AGFAgentforce
AWSAWS
AzAzure
Google Cloud
Cloudflare
Vercel
GitHub
Claude AI
GPTChatGPT
Slack
Okta
Supabase
MySQL
MSMuleSoft
n8n
Salesforce
AGFAgentforce
AWSAWS
AzAzure
Google Cloud
Cloudflare
Vercel
GitHub
Claude AI
GPTChatGPT
Slack
Okta
Supabase
MySQL
MSMuleSoft
n8n
Linux
Windows Server
Google Workspace
M365Microsoft 365
OLOneLogin
Apple Bus. Mgr
MDMIntune
Ubiquiti
VMware
cPcPanel / WHM
Akamai
Fortinet
ZsZscaler
MoMosyle
Linux
Windows Server
Google Workspace
M365Microsoft 365
OLOneLogin
Apple Bus. Mgr
MDMIntune
Ubiquiti
VMware
cPcPanel / WHM
Akamai
Fortinet
ZsZscaler
MoMosyle
Figma
CvCanva
Jenkins
Jira
TRTestRail
RAGRAG / LLM
WAFModSecurity
Gemini
Figma
CvCanva
Jenkins
Jira
TRTestRail
RAGRAG / LLM
WAFModSecurity
Gemini
// Proficiency

Skills & Proficiency

IT Platforms
AWS95%
Okta95%
Google Cloud85%
Salesforce80%
Akamai80%
Azure75%
Languages
English90%
Hindi90%
Urdu80%
Arabic40%
AI Proficiency & Digital Labour
AI Ready Certified · Deployed · Ongoing
AI Readiness
92%
Prompt Engineering92%
Agentforce / Digital Labour88%
AI Workflow Automation88%
Claude / ChatGPT / Gemini90%
Salesforce Einstein AI85%
AI Content Creation80%
IT Skills
Solution Architect90%
Linux Server Admin90%
Windows Server85%
Windows Desktop85%
Knowledge & Competencies
Prompt Engineering RAG Architecture LLM Governance Agentforce Slack Canvas Agentic Workflows SCIM Provisioning DLP Policies SIEM Integration Audit Log Monitoring IAM / SSO / MFA CI/CD Pipeline DKIM / SPF / DMARC Email Server MTA cPanel / WHM AI Automation Website Hosting iOS & Android Dev Mobile-Ready UI SEO / SEM
// Beyond the Code

Content & Creativity

When I'm not architecting cloud systems, I'm creating content — travel reels, AI explainers, and life vlogs.

YouTube Channel
AI Gyan series — explaining AI tools (ChatGPT, Gemini, Grok, Claude) in Hindi & English for everyday people.
Instagram Reels
Travel & life content — mixing stunning visuals with real-life storytelling.
Technical Blog
Deep-dive articles on cloud infrastructure, AI strategy, AWS tutorials, and IT leadership.
AI & Automation Travel Cloud Tips Tech in Hindi
AI Gyan Series
Explaining ChatGPT, Gemini, Grok & Canva AI in Hindi for mass audiences.
Travel & Adventures
Reels from offbeat destinations, iconic landmarks & unplanned road trips.
Nature & Outdoors
Gardens, landscapes & outdoor escapes — because life says "log out for a bit" sometimes.
Life & Interests
Chess, camping, gaming & photography — the other side of a tech mind.
// Latest Writing

From the Blog

Cloud, AI, infrastructure — thoughts from the field.

// Get In Touch

Let's Connect

Happy to share knowledge, discuss ideas, and help with guidance. Reach out and I'll get back to you.

🤝
Guidance
Salesforce, Cloud Architecture, IAM & AI Strategy
💬
Discussion
IT Strategy, Digital Transformation, Tech Decisions
💡
Knowledge Sharing
AI Automation, Cloud Best Practices, Security Frameworks

Find me across social platforms — I'm most active on LinkedIn and Instagram. Use the form to reach out directly.