Prashant Tulsiani, Cloud & AI Platforms — Designed, Built and Run

Prashant Tulsiani

Cloud & AI Platforms — Designed, Built and Run

Scroll to find out more

About Me

Hi, I'm Prashant — a hands-on Cloud & AI Architect based in the UAE. I design, build and run the platforms that drive business growth, balancing technical depth with business acumen to deliver solutions that fit how organizations actually work.

I've spent my career designing secure, cost-effective multi-cloud infrastructure for regulated industries. Today I bring that same discipline to agentic AI solutions integrated through MCP, the AI platforms they run on, and the governance that keeps it all safe.

Fifteen years in, I've built and run platforms for a national cultural authority, a greenfield digital bank, a luxury retail group, one of the region's largest mall and leisure operators, and a global shipping company — starting out in IT services and managed services in Mumbai, India, and working across the UAE since 2018. Across all of them, the technical design was rarely the hardest part. Meeting regulatory requirements, staying inside a budget, and handing over something the operations team can actually run — that is where most of the work sits.

I keep architecture simple, and build security, governance and automation in from the first diagram rather than adding them before go-live. Anything done more than once should be code.

Lately I've been focused on agentic AI — agents in production rather than in a slide deck. I design and build single and multi-agent solutions on Copilot Studio, OpenAI and Claude that take over manual, repetitive processes, connected through MCP servers to the business systems people already use. I also own the platform underneath: I design, build and govern Copilot Studio, the OpenAI Platform, Claude, Microsoft Foundry and the wider AI environment — from tenant setup, identity and access management (IAM) and API keys for developers and applications, to usage limits and token efficiency, with model and MCP traffic routed through an Azure AI gateway for visibility and control.

My Architecture Principles

Great architecture isn't about choosing the newest technology. It's about making the right decisions that balance business value, security, scalability, operational excellence, and long-term sustainability.

Prashant Tulsiani
01

Business Before Technology

Technology exists to create business value, not technical complexity. Every architectural decision should improve scalability, security, operational efficiency, customer experience or cost.

Learn more

What this means

  • Understand the business problem first
  • Challenge unnecessary complexity
  • Deliver measurable outcomes
  • Focus on ROI, not technology trends

A successful architecture is measured by business outcomes, not by the number of services it uses.

02

Security by Design

Security is never an afterthought. It is built into every layer of the architecture, from identity through to data at rest.

Learn more

Core principles

  • Zero Trust
  • Least Privilege
  • Identity First
  • Encryption Everywhere
  • Defense in Depth
  • Secure by Default

Security should accelerate innovation, not slow it down.

03

Simplicity Wins

Good architecture is easy to understand. Great architecture is difficult to misuse. Where several solutions exist, choose the simplest one that satisfies the requirement.

Learn more

What I avoid

  • Kubernetes without a reason
  • Microservices without a reason
  • Overengineering
  • Automation for its own sake

Complexity is a cost someone pays every day after you leave.

04

Automation First

Anything performed more than once should be automated. Infrastructure is software, and everything eventually becomes code.

Learn more

Everything as code

  • Infrastructure
  • Deployments
  • Configuration
  • Compliance
  • Security
  • Testing
  • Monitoring
  • Documentation

If it only exists in someone's head, it isn't architecture yet.

05

Design for Failure

Failures are inevitable. Downtime is optional. Every solution assumes something will break and stays available when it does.

Learn more

Every solution includes

  • High Availability
  • Disaster Recovery
  • Backup
  • Monitoring
  • Self-Healing
  • Observability
  • Resilience

Hope is not a disaster recovery strategy.

06

Governance Enables Innovation

Governance should never block engineering teams. It should provide safe guardrails that let them move faster than they could without it.

Learn more

The guardrails

  • Landing Zones
  • Azure Policy
  • Tagging
  • RBAC
  • Identity Governance
  • Naming Standards
  • Cost Controls
  • Compliance

Guardrails on a mountain road let you drive faster, not slower.

07

Optimize for Total Cost of Ownership

The cheapest solution today often becomes the most expensive tomorrow. Cloud is about value, not just a lower bill.

Learn more

What gets balanced

  • Infrastructure Cost
  • Licensing
  • Operations
  • Maintenance
  • People
  • Security
  • Future Growth

A design that saves 10% and needs three more engineers to run has cost you money.

08

Continuous Evolution

Technology changes and architecture should evolve with it. Every design gets reviewed again rather than defended forever.

Learn more

Questions I keep asking

  • Can it be simpler?
  • Can it be faster?
  • Can it be cheaper?
  • Can it be more secure?
  • Can it be easier to operate?

The best architecture is never finished.

Beyond the Architecture

Designing the system is half of it. The other half is the program around it — the people, the budget, and the case you make to the people who sign it off.

Program & Team Leadership

I lead large-scale cloud transformation programs and translate them for the people who fund them — coordinating technology, finance and business units, managing vendor relationships through contract negotiation and licensing optimization, and mentoring infrastructure, security and application teams on the standards they build against.

Strategy & Commercial

I define cloud strategy and multi-year roadmaps that hold up against business objectives rather than sitting beside them — budget planning, cost forecasting, and FinOps governance across OPEX and CAPEX models, aimed at return on enterprise cloud investment.

Flagship Projects

DCT Abu Dhabi · 2025 – Present

Multi-Tenant Museum Platform

Architected a mission-critical, multi-tenant platform on Azure and Microsoft 365 serving three national institutions — Zayed National Museum, Natural History Museum and Al Ain Museum — from a single governed estate. Scope ran across ticketing, visitor services, exhibits, digital content, finance, security, marketing and education programs, with tenant isolation that lets each museum operate independently.

  • 3institutions
  • 3,000monthly users
  • SLA & SLOmaintained
AzureMicrosoft 365Multi-tenancyExchange OnlineSharePoint OnlineTeamsGovernance

DCT Abu Dhabi · 2025 – Present

Enterprise Generative AI Platform

Built an enterprise generative AI platform on Azure OpenAI, delivering a multilingual visitor chatbot and AI-driven collection cataloging. The harder half was compliance: UAE data sovereignty rules and GDPR were met through native encryption, Key Vault integration and role-based access control rather than bolted on afterward.

  • 8+languages supported
Azure OpenAICopilot StudioKey VaultRBACUAE Data SovereigntyGDPR

DCT Abu Dhabi · 2025 – Present

Computer Vision Visitor Intelligence

Designed and deployed an AI-powered computer vision system on Red Hat OpenShift with NVIDIA GPUs, providing real-time visitor movement tracking, behavioral analytics and predictive security alerting across the museum estates.

  • 30%faster incident response
OpenShiftNVIDIA GPUComputer VisionRHELPredictive Alerting

DCT Abu Dhabi · 2025 – Present

AIOps Framework & Cost Optimization

Layered an AIOps framework over Azure Monitor and Dynatrace for anomaly detection, predictive alerting and self-healing workflows, run in parallel with a cost program of rightsizing, reserved capacity and automated scaling — proving the two goals are not in tension.

  • 15%lower MTTD
  • 20%incidents self-resolving
  • 30%lower monthly spend
  • 15%better performance
Azure MonitorDynatraceSelf-Healing AutomationFinOpsReserved Capacity

Al Tayer Group · 2023 – 2025

AWS Landing Zone & Cloud Governance

Designed an AWS Landing Zone that pulled nine separate accounts under one governance framework, centralizing management, standardizing resource allocation and enforcing best practice across all of them. Defined the operating processes and procedures behind AWS cloud operations to speed up issue resolution across the team.

  • 9accounts unified
AWSLanding ZoneGovernanceCloud Operations

Al Tayer Group · 2023 – 2025

Identity Lifecycle & Endpoint Modernization

Designed Joiner–Mover–Leaver identity lifecycle automation on Entra ID covering secure provisioning, deprovisioning and periodic access reviews, then moved application authentication onto Entra ID (formerly Azure AD) across SAML, OAuth and OpenID Connect. Rolled Microsoft Intune out across Windows, macOS, iOS and Android, with Defender for Endpoint deployed alongside it.

Entra IDJML AutomationSAML / OAuth / OIDCIntuneDefender for Endpoint

Zand Bank PJSC · 2019 – 2023

Greenfield Digital Bank on Azure

Joined the core build team standing up a fully digital UAE bank from nothing. Planned and implemented the entire Azure infrastructure and security estate end to end — Enterprise Agreement setup and tenant provisioning, networking, compute, data and security services — working alongside application architects, DevOps and data teams to keep every solution cloud-native, cloud-agnostic and aligned to 12-factor and microservices principles. Held PCI-DSS, SWIFT and NESA compliance with the CISO team throughout.

  • 0downtime incidents
  • 3regulatory frameworks held
AzureExpressRouteFront DoorCosmos DBSQL Managed InstanceDefender for CloudPCI-DSSSWIFTNESAMulti-Region HA

Zand Bank PJSC · 2019 – 2023

Core Banking Infrastructure as Code

Contributed to the bank's Infrastructure as Code program using Terraform and Python automation across both Azure and Google Cloud, covering the full core banking stack — retail and corporate banking, payments, middleware, CRM, loans, KYC/AML, cards and notifications. Worked with Microsoft's Azure FastTrack and Enterprise Unified teams to keep the estate aligned to the Well-Architected Framework.

TerraformPythonAzureGoogle CloudWell-Architected Framework

Scorpio Marine & MAF Group · 2014 – 2019

Enterprise Cloud Migrations at Scale

Two large migration programs. At Scorpio Marine I led the move from on-premises to Azure end to end — design, sizing, capacity planning and workload placement across IaaS, PaaS and SaaS — migrating 900+ VMs using ASR. At Majid Al Futtaim (MAF Group) I managed a hybrid estate of 1,500+ servers across AWS, Azure and VMware while setting each application's migration path: rehost, rebuild, replatform, refactor or replace.

  • 900+VMs to Azure
  • 1,500+servers managed
  • 5,000+mailboxes supported
Azure Site RecoveryAWSVMwareMigration StrategyOffice 365Exchange Hybrid

Core Competencies

Cloud Platforms

AzureAWSGCPOCIHybrid ArchitectureCloud Migration

Cloud Security & Identity

Entra IDConditional AccessZero TrustSAML / OAuth / OIDCRBACJML Lifecycle AutomationIdentity GovernanceDefender for CloudSentinelKey Vault & HSM

AI & Generative AI

Azure OpenAICopilot StudioComputer Vision (NVIDIA GPU)Text / Audio / Vision ModelsConversational AIAI Governance

Networking & Connectivity

ExpressRouteDirect ConnectSD-WANAviatrixFront Door & WAFDDoS ProtectionFirewall NVAs

Serverless & Containers

AKSOpenShiftAzure FunctionsAWS LambdaEvent-Driven ArchitectureGPU Workloads

Observability & AIOps

Azure MonitorDynatracePrometheusGrafanaOpenTelemetryAnomaly DetectionSelf-Healing Automation

Data Platforms

Cosmos DBAzure SQL & Managed InstancePostgreSQLMongoDBBigQueryData Lakehouse

Governance, Cost & Reliability

Landing ZonesAzure PolicyTagging StrategyFinOpsCost ForecastingReserved CapacityWell-Architected ReviewsDR / Multi-Region HA

Compliance & Audits

PCI-DSSSWIFTNESAGDPRUAE Data Sovereignty

Infrastructure as Code & CI/CD

TerraformTerragruntARM TemplatesGitHub ActionsAzure DevOps

Modern Workplace

Microsoft 365Exchange OnlineSharePoint OnlineTeamsOneDriveIntuneM365 CopilotDefender for Endpoint

Automation & Scripting

PowerShellPythonMicrosoft Graph APIAnsible

Professional Experience

Infrastructure Architect – CloudFeb 2025 – Present
Department of Culture and Tourism (DCT) — Abu Dhabi, UAE
Enterprise Infrastructure – CloudMay 2023 – Feb 2025
Al Tayer Group — Dubai, UAE
Cloud and Infrastructure ManagerJul 2019 – Apr 2023
Zand Bank PJSC — Dubai, UAE
IT Infrastructure EngineerDec 2018 – Jul 2019
Majid Al Futtaim Group (via Alpha Data) — Dubai, UAE
IT Infrastructure Solution ArchitectJul 2014 – Dec 2018
Scorpio Marine Management Pvt Ltd — Mumbai, India
Early Career2011 – 2014
Allied Digital Services & Sparsh BPO Services — Mumbai, India