Fractional Principal-level leadership for regulated European enterprises — sovereign Azure architectures with HYOK encryption, Zero Trust access and DORA / NIS2 compliance built into the design.
I am a Principal Azure and Sovereign Cloud Architect with 26 years of experience designing, securing and modernising mission-critical IT environments in regulated enterprise settings. I work as a B2B contractor and fractional Principal, and I am the Founder of Ne Plus Ultra Global Solutions.
I partner directly with C-suite executives and Enterprise Architects: authoring technical blueprints, defining sovereign cloud guardrails for Tier-1 financial-services clients, and leading cloud extractions and insourcing programmes end-to-end.
My track record covers high-availability architectures, complex Linux infrastructure, and resilient cloud and on-prem platforms with sub-24h RTO/RPO and zero data loss in disaster-recovery execution — with NIS2, DORA and ISO 27001 compliance, access control and operational resilience embedded in the design rather than added afterwards.
Certificate, Unix / C++ · 2000
DORA, NIS2, ISO 27001/27002, CIS, COBIT and NIST alignment. HYOK encryption, customer-owned HSM, data residency and Swiss data-protection guardrails for Azure landing zones.
Disaster recovery and business continuity to defined RTO/RPO, Zero Trust, IAM with PIM/JIT, threat modelling, IDS/IPS, OS and virtualisation hardening, breach response and forensics.
Azure, AWS and hybrid cloud. Linux (Red Hat), VMware, Hyper-V, TCP/IP and IPv4/IPv6 routing. Terraform, Ansible, PowerShell, CI/CD and Infrastructure as Code.
Multi-million-euro OpEx strategies, rightsizing and reservations, payback-driven migration planning, and end-to-end extraction of cloud services from managed service providers.
Measurable outcomes from sovereign cloud, resilience and security engagements. Select a card to read the full study.
End-to-end extraction of core cloud and infrastructure services at Kanadevia Inova: a 3-wave migration of 480 servers and 14 business-critical applications into a sovereign Azure landing zone with HYOK, customer-owned HSM and zero standing privileges.
Read case studyProprietary frameworks for routing Agentic AI and RAG workloads through localised, HYOK-encrypted pipelines for Tier-1 FSI clients.
Fractional Principal-level leadership for Tier-1 FSI clients: technical blueprints, sovereign guardrails and cloud extractions that expanded Azure API capacity.
AWS and Azure environments at Zurich Insurance aligned to NIST, ISO 27002, CIS and COBIT, with cloud-native disaster recovery proven in quarterly drills.
VMware private cloud at AT&T Global Network Services: OS and virtualisation hardening, IDS/IPS rollout, forensics-led incident response and 2h RTO/RPO disaster recovery.
Kanadevia Inova s.r.o · Group Lead Cloud & Connectivity · 2026
As Group Lead for Cloud & Connectivity within Kanadevia Inova's SSC-GID Digital Core Services, I was accountable for core cloud and infrastructure services that had been operated end-to-end by an external managed service provider. The group needed to bring these services in-house, and the contractual timeline left a compressed six-month execution window to do it.
Take over a 480-server estate supporting 14 business-critical applications without disrupting the business, land it in an Azure environment that satisfies Swiss data-protection requirements, and make the investment case stand on its own.
Ne Plus Ultra Global Solutions · Founder & Principal Cloud Architect · 2024 –
Tier-1 financial-services clients want the productivity of Agentic AI and retrieval-augmented generation, but DORA and NIS2 leave no room for personal data to flow uncontrolled into public hyperscaler AI services. Enterprise Architects at these institutions need a pattern they can defend to regulators, not a pilot that has to be unwound later.
Make AI workloads usable inside strict regulatory mandates: route Agentic AI and RAG traffic in a way that guarantees no PII reaches public hyperscalers, while keeping the architecture simple enough to adopt.
Ne Plus Ultra Global Solutions · Founder & Principal Cloud Architect · 2024 –
Through Ne Plus Ultra I provide fractional Principal-level leadership to Tier-1 financial-services institutions. A recurring engagement pattern is the cloud extraction: taking ownership of platforms and spend back from arrangements that have grown opaque or constrained.
Lead extractions that improve the platform's technical headroom and its economics at the same time, with outcomes that executives can measure.
Zurich Insurance · IT Business & Solution Architect · 2022 – 2025
In Business Technology Services at Zurich Insurance, I designed and directed the migration of complex legacy and on-premise systems into cloud architectures that had to satisfy both security and regulatory scrutiny across AWS and Azure.
Move legacy systems into the cloud securely, close the gap between the environments and the control frameworks the enterprise is measured against, and prove recoverability rather than assume it.
AT&T Global Network Services · Senior Systems Engineer · 2012 – 2015
As Senior Systems Engineer at AT&T Global Network Services in Bratislava, I managed a VMware private cloud for a global network operator, where security operations and availability were measured continuously.
Reduce the platform's exposure, respond to incidents faster and with better evidence, and make recovery objectives demonstrable — while raising the operating discipline of the wider team.
Executive-level perspectives on sovereign cloud, compliance, cloud economics and scalable architecture. Select a card to read the full article.
Why HYOK encryption, zero standing privileges and continuous auditing form the backbone of a Zero Trust landing zone that regulators can sign off on.
4 min read · DORA · nDSG · NIS2
Read articleA three-phase FinOps strategy — tagging and visibility, high-velocity MSP insourcing, unit economics — for enterprises whose cloud spend has outgrown their MSP model.
4 min read · FinOps · Cloud economics
Read articleQueue-based ingestion, hot/cold storage tiering and protocol optimisation: the structural changes that let telemetry platforms absorb unpredictable surges without runaway cost.
3 min read · IoT · Event streaming
Read articleArticle · By Sashree Seepersad · Principal Enterprise Architect & Founder, Ne Plus Ultra Global Solutions
European enterprise cloud strategy has fundamentally shifted. Beyond performance and raw scalability, compliance with stringent regulatory frameworks — specifically the Digital Operational Resilience Act (DORA), Swiss nDSG, and NIS2 — has become an existential operational priority.
Traditional multi-tenant public cloud deployments often struggle with data residency enforcement and strict regulatory audit readiness. DORA demands continuous risk assessment, strict ICT third-party risk management, and guaranteed operational continuity during major disruptions. Simultaneously, Swiss nDSG requires explicit control over personal data processing locations and encryption keys.
To resolve the tension between hyper-scale agility and strict compliance, enterprise architects must implement a Zero Trust Landing Zone framework built on three core pillars:
Sovereignty in the cloud is not about avoiding hyperscalers — it is about implementing governance architectures that ensure complete data authority regardless of underlying physical hardware.
Article · By Sashree Seepersad · Principal Enterprise Architect
As cloud investments mature, enterprise organizations frequently reach a tipping point where Managed Service Provider (MSP) markup, unoptimized resource provisioning, and fragmented tagging lead to unsustainable cloud spend growth.
Many enterprise MSP models rely on fixed resource markups or opaque management fees, creating a structural disincentive to rightsize cloud environments. When combined with uncoordinated cloud migrations, organizations often find themselves paying premium cloud rates for legacy operational patterns.
Article · By Sashree Seepersad · Principal Enterprise Architect
Industrial IoT platforms and modern enterprise architectures generate massive, unpredictable surges of telemetry data. Scaling ingestion systems without incurring exponential cloud costs or bottlenecking processing pipelines requires modern decoupling techniques and optimized API architectures.
When processing high-frequency data streams, synchronous processing pipelines suffer from high latency, thread exhaustion, and excessive compute costs during peak loads.
Implementing these structural enhancements can expand data ingestion capacity by over 64% within weeks, providing the scalability needed for enterprise-grade IoT ecosystem demands.
Inquire about sovereign Azure landing zones, DORA / NIS2 readiness, MSP insourcing and cloud extractions, disaster-recovery design, or fractional Principal-level architecture leadership.
Thank you! Your message has been sent directly to Sashree Seepersad.