Home About Ventures Innovation Experience Recognition Certifications Skills Education Community Contact
Cybersecurity · AI/ML · 5G Professional
Serial Entrepreneur · 3 Active Technology Companies
International Speaker
20+ Years Experience in Global Companies

San Fernando

CISSP · CISM · CRISC · AAISM · AWS SA Pro · Azure SA Expert · Google ML Pro · TOGAF 10

Strategic technology leader with 20+ years of expertise spanning three high-demand disciplines: cybersecurity architecture, AI/ML engineering, and 5G network architecture. Founder & CEO of Xenova Systems, Co-Founder & Chief AI Officer of Softzig Solutions, and Founder of EPC Network Limited — delivering enterprise-scale solutions for Nokia, BT Group, and Three UK across global transformation programmes.

United Kingdom British Citizen LinkedIn

Multi-Disciplinary Technology Leader

I am a multi-disciplinary technology leader with 20+ years of hands-on experience across three high-demand disciplines: cybersecurity strategy and architecture, AI/ML engineering and architecture, and 5G network architecture. I have designed and delivered enterprise-scale solutions across global transformation programmes at Nokia, BT Group, and Three UK.

My cybersecurity expertise spans Zero Trust architecture, threat modelling, cloud security across AWS, Azure, and GCP, AI governance, and regulatory compliance — including NIST CSF, NIST AI RMF, ISO 27001, GDPR, PCI-DSS, SOC 2, and GSMA security guidelines. My AI/ML engineering capabilities cover production ML model design, MLOps, model lifecycle governance, Generative AI, and responsible AI. My 5G expertise spans 3GPP-compliant virtualised RAN, 5G Core architecture (AMF, SMF, UPF, NEF, NRF), O-RAN, and mobile edge computing.

As a serial entrepreneur, I founded and lead three technology companies: Xenova Systems Ltd (AI-powered smart infrastructure — proprietary camera-free pothole detection with published research and pending patent), Softzig Solutions Limited (agentic AI platforms for enterprise automation), and EPC Network Limited (specialist cybersecurity and AI consultancy, operating since 2012).

I hold 13+ advanced professional certifications across cybersecurity, AI/ML, cloud, and enterprise architecture. I have been recognised as an international speaker on 5G strategy and enterprise architecture, and maintain a professional LinkedIn following of approximately 5,000 across the global technology, cybersecurity, and AI community.

20+
Years of Experience
13+
Certifications Held
3
Companies Founded
3
Cloud Platforms

Ventures & Companies

Xenova Systems Ltd
Founder & CEO
Feb 2025 – Present
AI Innovation

Founder and CEO of Xenova Systems Ltd — an AI and smart infrastructure company operating at the forefront of artificial intelligence and machine learning. Core product: a camera-free pothole detection solution powered by a proprietary ML model entirely designed, trained, and deployed by me over 18 months — evolving from MVP through to production-ready enterprise deployment. The solution leverages smartphone sensors (accelerometer, gyroscope, GPS) to detect, classify, and geo-tag road defects in near real-time, with a published research paper on Zenodo and an open-source GitHub repository.

End-to-End ML Delivery
Designed, trained, and deployed the ML model from concept to production — integrating sensor data, cloud processing, and real-time alerting.
Smart Infrastructure
Camera-free AI solution for road defect detection applicable to local councils, highway agencies, and smart city platforms at scale.
Published Research
Research paper published on Zenodo and open-source repository on GitHub, demonstrating transparent, published innovation.
Softzig Solutions Limited
Co-Founder & Chief AI Officer
Oct 2025 – Present
Agentic AI

Co-Founder and Chief AI Officer of Softzig Solutions Limited — a cutting-edge technology company focused on agentic AI platform development, building intelligent autonomous AI systems capable of executing complex, multi-step tasks with minimal human intervention. As Chief AI Officer, I lead the company's AI strategy, product architecture, and responsible AI governance — combining deep cybersecurity expertise with production AI engineering to deliver trustworthy, enterprise-grade agentic AI solutions.

Agentic AI Platforms
Designing autonomous AI agent platforms that plan, reason, and act across complex enterprise workflows without continuous human direction.
Secure by Design
Embedding security, privacy, and AI governance into every product from day one — combining cybersecurity leadership with AI engineering expertise.
Enterprise AI
Building AI solutions fit for regulated industries with compliance, explainability, and risk controls built into the product architecture.
EPC Network Limited
Founder & Director
Jun 2012 – Present
Consultancy

Founder and Director of EPC Network Limited — a specialist technology consultancy delivering expert advisory and professional services across cybersecurity, 5G, and artificial intelligence. Founded in 2012, EPC Network provides organisations with the strategic and technical guidance needed to design, secure, and evolve their technology landscapes in an increasingly connected and AI-driven world — drawing on over two decades of hands-on enterprise and telecommunications experience.

Cybersecurity Advisory
Expert security architecture, strategy, and governance advisory for complex enterprise and telecom environments.
5G & Telecom
Specialist 5G architecture and network security consultancy for telecoms operators and enterprise clients.
AI Architecture
AI/ML strategy, architecture design, and responsible AI advisory for organisations adopting intelligent systems at scale.

Innovations & Intellectual Property

AI & ML Innovation
🛣️
Camera-Free Pothole Detection Solution

A proprietary AI and machine learning-powered solution that detects, classifies, and geo-tags road surface defects using only smartphone sensors — with no external cameras required. The custom ML model was entirely designed, trained, and deployed by me, evolving from MVP to production-ready enterprise deployment over 18 months.

Real-time pothole alerts to drivers, directly reducing accident and vehicle damage risk
Government authority dashboard for prioritised maintenance responses by defect severity
Significant infrastructure cost savings through early, precise road defect detection
Scalable across entire road networks via existing mobile infrastructure
Applicable to local councils, national highway agencies, and smart city platforms
Pending Patent
🔐
Owner-Controlled Security for Vehicle Software Updates

A novel invention addressing a critical cybersecurity gap in modern connected and autonomous vehicles. Over-the-Air (OTA) updates increasingly control safety-critical functions — braking, throttling, steering — yet vehicle owners have no technically-enforced consent mechanism. This invention introduces a dual-channel cryptographic authentication system requiring the owner to independently authorise each critical update through separate channels, preventing manufacturer bypass at the protocol level.

Technically-enforced owner consent for safety-critical OTA updates
Dual-channel PIN verification at the secure connection layer (not application layer)
Provides vehicle owners with real control during geopolitical or advisory situations
Closes a security gap not addressable by existing accept/reject mechanisms
⏳ Patent Application Pending

Professional Experience

5G & Security Solutions Architect (Contract)
Nokia Global ↗ nokia.com
Sep 2020 – Present
  • Developed and owned end-to-end cybersecurity strategy and reference architecture across 5G Core, RAN, cloud infrastructure, and enterprise network layers — aligned to NIST CSF, ISO 27001, CIS Controls, and GSMA security guidelines.
  • Designed security controls protecting 5G network systems, APIs, and data flows — covering network slicing isolation, SBA security, NEF/NRF authentication, and inter-operator roaming security.
  • Led security architecture reviews and threat modelling across 5G and enterprise environments; identified risk gaps and drove structured remediation programmes.
  • Assessed AI and Generative AI security risks across enterprise deployments; delivered governance frameworks and risk mitigation strategies aligned to NIST AI RMF.
  • Defined end-to-end 5G system architectures including virtualised RAN, 5G Core (AMF, SMF, UPF, NEF, NRF), and software-defined transport networks aligned to 3GPP Release 15/16 specifications.
  • Designed cloud-native orchestration platforms supporting Open RAN (O-RAN) initiatives, Kubernetes-based containerised network functions (CNF), and network slicing for enterprise and critical infrastructure verticals.
  • Architected mobile edge computing (MEC) solutions and cloud-native service exposure via NEF, enabling low-latency enterprise applications on Nokia's 5G core.
  • Built incident response and disaster recovery capability for critical 5G infrastructure; authored runbooks and validated recovery procedures for core network components.
  • Architected cloud security across AWS and Azure — covering IAM, Zero Trust network access, encryption, security monitoring, and logging.
  • Acted as trusted technical adviser to Nokia engineering leadership and enterprise clients, translating complex business requirements into 3GPP-compliant architectures and delivering HLD/LLD documentation across multiple Nokia programmes.
Principal Solutions Architect
BT Group (British Telecom) ↗ bt.com
Apr 2018 – Sep 2020
  • Designed and governed enterprise security architectures across cloud, hybrid, and on-premise environments for large-scale national transformation programmes.
  • Led secure cloud adoption across AWS and Azure; embedded Zero Trust and security-by-design principles into enterprise architecture patterns.
  • Designed end-to-end AI/ML architectural frameworks for enterprise programmes — defining blueprints for model training, validation, inference pipelines, and production serving infrastructure across AWS and Azure.
  • Established MLOps standards and automated CI/CD pipelines for AI/ML workloads; implemented model versioning, infrastructure-as-code practices, and deployment automation to accelerate model delivery at scale.
  • Developed model lifecycle governance frameworks covering performance monitoring, data drift detection, model retraining triggers, and explainability standards — ensuring production AI systems remained reliable, auditable, and regulation-ready.
  • Architected 5G and LTE network security frameworks for BT's national infrastructure programmes, defining security controls across RAN, Core, and transport layers aligned to 3GPP standards and GSMA guidelines.
  • Supported TOGAF-aligned enterprise architecture planning; collaborated across ICT and business departments to align security strategy with regulatory requirements and enterprise standards.
  • Selected as international speaker — presented at KNect365 VoiceACS Conference, Berlin, on 5G strategy and enterprise architecture for global telecommunications operators.
Senior Solutions Architect — E2E
Three UK (Hutchison 3G UK) ↗ three.co.uk
Apr 2016 – Apr 2018
  • Led end-to-end network and security architecture across major transformation programmes, driving cross-functional delivery teams spanning network engineering, IT, and cybersecurity disciplines.
  • Delivered network security frameworks for 3G/4G mobile infrastructure — implementing access control, encryption, signalling security, and threat mitigation controls across core and RAN environments.
  • Executed security design reviews and structured risk assessments across multiple transformation projects; identified and remediated critical vulnerabilities through rigorous governance and stakeholder-led programmes.
  • Produced end-to-end HLD/LLD documentation and requirements artefacts, ensuring security-by-design principles were embedded and traceable throughout the full programme delivery lifecycle.
  • Aligned architecture decisions across network, IT, and security teams to meet regulatory requirements and industry standards, directly supporting Three UK's strategic network transformation goals.

Earlier Career

Principal Architect
UK Broadband, UK
Jan 2014 – Mar 2016
Network Solutions Consultant
EE (Everything Everywhere), UK
Nov 2011 – Dec 2013
Solution Manager
Telco Arena, UK
Jan 2009 – Oct 2011
Senior Design Engineer
T-Mobile, UK
Jan 2008 – Dec 2008
Design & Planning Engineer
O2, UK
Nov 2006 – Dec 2007
Technical Support Engineer
InterWave Inc.
Jun 2003 – Jul 2006

Industry Recognition & Speaking

🎤
International Speaker — KNect365 VoiceACS
Berlin, Germany

Selected as an international speaker at the KNect365 VoiceACS Conference in Berlin — presenting on 5G strategy, monetisation opportunities, and enterprise architecture for global telecommunications operators. The session addressed the strategic challenges facing Communications Service Providers in the 5G era, including competitive threats from hyperscalers such as Amazon, Microsoft, and Google. This engagement demonstrates recognition of professional standing at an international industry level.

🔗 View Conference Reference
📡
Invited Speaker — SON Conference
Self-Organising Networks & Next-Gen Telecom

Received an invitation to speak at the SON Conference — a specialist industry forum focused on Self-Organising Networks and next-generation telecommunications architecture. Alongside the confirmed KNect365 VoiceACS engagement, this invitation establishes a consistent pattern of external recognition as a thought leader across multiple international industry forums on 5G strategy and AI-driven digital transformation.

🌐
LinkedIn Professional Network
~5,000 Followers

An engaged professional following of approximately 5,000 followers from across the global technology, cybersecurity, and AI community — reflecting the breadth of the professional network and providing independent evidence of standing as a recognised voice within the international technology sector across cybersecurity, AI/ML, and 5G domains.

🔗 View LinkedIn Profile

Certifications & Qualifications

Cybersecurity
🛡️
CISSP
Certified Information Systems Security Professional · (ISC)²
🔗 Verify Credential
🔐
CISM
Certified Information Security Manager · ISACA
🔗 Verify Credential
⚠️
CRISC
Certification in Risk & Information Systems Control · ISACA
🔗 Verify Credential
🤖
AAISM
Advanced in AI Security Management · ISACA
🔗 Verify Credential
🔒
CompTIA Security+
CompTIA
🔗 Verify Credential
Artificial Intelligence & Machine Learning
🧠
Google Professional Machine Learning Engineer
Google Cloud · Google
🔗 Verify Credential
🚀
AWS Certified Generative AI Developer — Professional
Amazon Web Services
🔗 Verify Credential
💡
Microsoft Certified: AI Business Professional
Microsoft
🔗 Verify Credential
🌟
Microsoft Certified: AI Transformation Leader
Microsoft
🔗 Verify Credential
Cloud Architecture
☁️
AWS Solutions Architect — Professional
Amazon Web Services
🔗 Verify Credential
🔷
Azure Solutions Architect Expert
Microsoft Certified · Microsoft
🔗 Verify Credential
Enterprise Architecture
🏗️
TOGAF 10 Certified
Enterprise Architecture · The Open Group
🔗 Verify Credential

Technical Skills & Expertise

🏛️Strategy & Governance
Cyber Security Strategy Security Governance Risk Management Security Roadmaps Executive Engagement Technical Bid & RFP
📡5G & Telecom Architecture
5G Core (3GPP) Virtualised RAN O-RAN Network Slicing Cloud-Native CNF Mobile Edge Computing GSMA Guidelines
☁️Cloud Security
AWS Security Azure Security GCP Multi-Cloud Architecture Cloud IAM Zero Trust
🧠AI/ML Engineering
ML Model Design & Training Production ML Serving Generative AI AI Strategy & Roadmap Responsible AI AI Governance
⚙️MLOps & Data
MLOps & CI/CD Model Versioning Data Drift Detection Model Lifecycle Governance Infrastructure-as-Code Kubernetes
📋Compliance Frameworks
NIST CSF NIST AI RMF ISO 27001 CIS Controls GDPR PCI-DSS SOC 2
🔐Identity & Access
Zero Trust Architecture IAM Privileged Access Network Segmentation Identity Security SIEM/SOC
🔍Security Assurance
Threat Modelling Security Architecture Reviews Incident Response Vulnerability Remediation Third-Party Risk OWASP

Academic Background

🎓
Bachelor of Science (BSc)
Electronics and Telecommunication Engineering
University of Moratuwa, Sri Lanka
Graduated 2003
One of Asia's most prestigious technical universities and consistently ranked as Sri Lanka's premier engineering institution. The degree programme spans electronics, signal processing, communications systems, and core computer science — including programming, algorithms, data structures, and software engineering — forming the interdisciplinary foundation for subsequent specialisations in cybersecurity, artificial intelligence, and machine learning. The University of Moratuwa is affiliated with the Institution of Engineers Australia, meaning its graduates are formally recognised as professionally qualified in Australia.
✓ Washington Accord Accredited ✓ Institution of Engineers Australia Affiliated

Community Leadership & Contribution

Empowered-Edu Foundation C.I.C.
Co-Founder
Jan 2024 – Present
Non-Profit · Registered C.I.C.

Co-founded Empowered-Edu Foundation C.I.C. — a registered Community Interest Company providing entirely free career guidance and professional development mentoring to families and individuals who may otherwise lack access to such resources. The organisation exists solely to empower people at critical life and career crossroads, reducing barriers to opportunity and building long-term pathways to social and economic inclusion for underserved communities. All services are provided entirely free of charge — no fees, no commercial activity of any kind.

🔗 empowered-edu.org
Neighbourhood Watch
Cybersecurity Ambassador
Ongoing
Volunteer Role

Serving as a Cybersecurity Ambassador for the local Neighbourhood Watch scheme — drawing on 20+ years of professional cybersecurity expertise to help protect community members from online crime, fraud, and digital exploitation. Delivering free, accessible guidance on cybersecurity awareness, safe online practices, and fraud prevention to residents who may otherwise have no access to expert advice on these increasingly critical issues. Reflects a deep conviction that cybersecurity knowledge should be accessible to everyone — not only technology organisations and professionals.

🔗 Neighbourhood Watch

Contact Me

Based In
United Kingdom