CRITICAL INFRASTRUCTURE DEFENSE β€’ IT / OT / AI

Mohamed Rifaz Anakaran

Cybersecurity Risk Architect / Industrial OT & IoT Specialist / AI Security Researcher

Seasoned Cybersecurity Architect with 18+ years of hands-on expertise spanning industrial automation, mechatronics, and critical infrastructure risk mitigation across OT/ICS, enterprise IT, IoT, and artificial intelligence environments. Experienced in securing mission-critical petrochemical and water infrastructure compliant with NIST SP 800-82, ISA/IEC 62443, and Saudi regulatory frameworks (NCA).

rifaz.muhammed@gmail.com Jubail, Eastern Province, KSA
18+
Years of Engineering & Cyber Defense Experience
65+
Industrial Operating Facilities & Affiliates Assessed
IEC62443
Critical Infrastructure Standard Alignment
GICSP#1737
Global Industrial Cyber Professional

Professional Certifications

πŸ›‘οΈ

GICSP β€” Global Industrial Cybersecurity Professional

GIAC / SANS Institute credential demonstrating hands-on mastery in securing industrial control systems (ICS), SCADA architectures, and defense-in-depth plant networks.

Credential ID: #1737
βš™οΈ

IEC 62443 β€” Cybersecurity Fundamental Specialist

International standard for the security of industrial automation and control systems (IACS), spanning risk assessment, zone/conduit segregation, and lifecycle controls.

Certified Specialist

Research & Engineering Projects

Distilling a Local Coding Assistant: QLoRA Fine-Tuning on DeepSeek-R1 Reasoning Traces
πŸ§ͺ AI RESEARCH & DISTILLATION
Academic Research (IIIT Dharwad M.Tech) β€’ DeepSeek-R1 to Qwen Student Distillation Pipeline

Engineered an end-to-end knowledge distillation pipeline that transfers frontier reasoning and code generation capabilities from massive cloud models (DeepSeek-R1 600B+) into a compact student model (Qwen3-4B / Qwen 3.5 9B). Designed specifically to overcome enterprise data sovereignty, cloud latency, and recurring API cost hurdles under strict 16GB consumer VRAM constraints.

268,509 Curated CoT Samples
+0.107 ROUGE-L F1 Gain (0.395 vs 0.288)
55.6% Functional Code Equivalence
4.47 / 5.0 LLM Judge (Surpasses Teacher in Completeness)
~167 tok/s Edge Inference Speed
  • Multi-Source Reasoning Dataset Pipeline: Ingested ~1.6M raw samples across AM-DeepSeek-R1-Distilled, Nemotron-OpenCode, Nemotron-SWE, and Hermes. Unified disparate schemas into standard Qwen ChatML conversational formats (including multi-step Chain-of-Thought reasoning, tool invocation calls, and execution feedback), enforced token length limits (64–8,192), and applied priority-weighted xxhash deduplication to isolate 268k high-fidelity coding trajectories.
  • Hardware-Constrained QLoRA Training: Implemented 4-bit NormalFloat (NF4) base quantization with bfloat16 low-rank adapters (rank r=64, alpha=128) using Unsloth. Trained over 3 epochs with sequence packing across 1,707 gradient steps on a single consumer GPU (NVIDIA RTX 5070 Ti 16GB).
  • Empirical Three-Way Evaluation: Executed automated comparative evaluation (Base vs. Distilled vs. Teacher) across 100 matched code generation prompts. The distilled model achieved a +37% relative gain in ROUGE-L F1, 55.6% functional test-case pass parity, and an LLM-as-judge score of 4.47/5.0β€”narrowing the gap with the 600B teacher to 0.22 while outperforming the teacher in response completeness (4.55 vs 4.48).
  • Long-Context Edge Deployment: Merged adapter weights and exported to 3.3 GB Q6_K GGUF with 4-bit KV Cache quantization, enabling local execution at ~167 tokens/sec with complete data sovereignty and zero telemetry.
Knowledge Distillation DeepSeek-R1 CoT Qwen 3.5 / Qwen3-4B QLoRA (NF4 / bf16) Unsloth Tool-Call SFT GGUF Q6_K Export KV Cache 4-bit Quantization RTX 5070 Ti (16GB) Local-First AI
AI-Powered Industrial Cybersecurity Document Analysis Platform
πŸ›‘οΈ APPLIED ENTERPRISE AI
Critical Infrastructure Security Automation & Offline Compliance Engine

Architected an enterprise-grade offline cybersecurity assessment platform that leverages an offline vision-language model (Qwen3-VL) to automate comprehensive technical security evaluations, compliance gap analysis, and threat scenario simulations.

  • Multi-Framework Compliance Mapping: Automated alignment across NIST CSF, CIS Benchmarks, ISO 27001, MITRE ATT&CK, and Saudi National Cybersecurity Authority (NCA) regulatory mandates.
  • Automated Strategic Reporting: Built an end-to-end processing pipeline generating PDF risk documentation with 5x5 dynamic risk heatmaps, gap distribution metrics, and 30/90/180/360-day remediation roadmaps.
  • Local Edge Model Optimization: Tuned 4-bit model quantization achieving a 6-7 GB VRAM footprint with 30-40 tokens/sec generation speed on NVIDIA RTX hardware for zero-data-leak offline deployment.
Qwen3-VL NIST SP 800-82 ISA/IEC 62443 Saudi NCA MITRE ATT&CK PyTorch Transformers vLLM RTX Optimization

Professional Experience & Key Outcomes

Cyber Security Architect
Critical Petrochemical & Industrial Infrastructure
Jubail, Eastern Province, KSA

Lead cybersecurity architect directing security risk governance, threat modeling, and defense-in-depth across critical petrochemical manufacturing, industrial IoT, and enterprise AI ecosystems.

πŸ›‘οΈ Critical OT/ICS Hardening
Architected strict zone/conduit segregation isolating Emergency Shutdown (ESD) & Safety Instrumented Systems (SIS) per NIST SP 800-82 & IEC 62443.
πŸ€– AI & Emerging Tech Risk
Evaluated enterprise AI-driven systems for algorithmic vulnerabilities, model bias, and adversarial data breach vectors.
πŸ“‘ Industrial IoT & LoRaWAN
Designed risk mitigation and cryptographic controls for plant-wide wireless LoRaWAN sensor network integrations.
πŸ”„ Zero-Downtime EOL Migrations
Managed end-to-end lifecycle risk during critical upgrades of legacy DCS, SCADA, HMI, and Engineering Workstations with zero unplanned outage.
  • Executive Threat Briefings: Formulated cyber-physical risk models and delivered strategic threat presentations to C-suite and plant leadership.
  • Vendor & Supply Chain Security: Established third-party assessment criteria ensuring high-risk technology vendors adhere to rigorous industrial cybersecurity standards.
NIST SP 800-82 ISA/IEC 62443 SIS / ESD Isolation Industrial LoRaWAN AI/ML Governance Threat Modeling Executive C-Suite Briefings
IT / OT Risk Analyst
Industrial Risk Governance & Utilities Sector
Jubail, KSA

Spearheaded multi-affiliate cyber maturity programs and designed a flagship industrial risk governance platform while conducting water sector critical infrastructure assessments.

πŸ“Š Enterprise Risk Platform
Conceived, designed, and operationalized a centralized Risk Management platform continuously monitoring security posture across 65+ industrial enterprise operating facilities.
πŸ’§ Water Sector Defense
Conducted deep-dive OT gap analyses under NIST 800-82 for critical municipal water treatment and distribution facilities.
🎯 KPI & KRI Metrics Modeling
Engineered qualitative and quantitative KPI/KRI telemetry enabling leadership to measure control efficacy and prioritize risk remediation budgets.
Risk Governance Platform 65+ Affiliates NIST SP 800-82 Water Sector ICS KPI/KRI Modeling
Cybersecurity Solutions & Infrastructure Security Specialist
Enterprise Defense & Systems Integration
Doha, Qatar

Architected enterprise defense solutions, led technical security engagements, and guided critical infrastructure accounts through ISO 27001 certifications and VAPT audits.

🏭 Critical Infrastructure Architecture
Spearheaded solutions across Petrochemical, Civil Aviation, International Airport, and Government sectors spanning ICS monitoring, Next-Gen Firewalls, and SIEM.
πŸ” VAPT & ISO 27001 Audits
Executed hands-on Vulnerability Assessment, Penetration Testing (VAPT), and ISO 27001 ISMS gap analysis engagements.
βš™οΈ Enterprise Security Portfolio
Field engineering across Forescout SilentDefense (ICS), Fortinet, McAfee, Forcepoint DLP, RSA NetWitness SIEM, and 2FA.
ICS Vulnerability Monitoring Next-Gen Firewalls RSA NetWitness SIEM Forescout SilentDefense ISO 27001 VAPT
Engineering Foundations: Automation, Mechatronics & Code
Industrial Automation, Embedded Systems & Software
India

Formative technical background bridging physical mechatronics, industrial machine automation (PLC/SCADA), embedded electronics, and software development β€” providing a rare hardware-to-cloud security vantage point.

⚑ Industrial PLC & SCADA Programming
Programmed automation logic on Siemens, Allen Bradley, ABB, Fanuc, Omron PLCs and Wonderware InTouch SCADA systems across manufacturing lines.
πŸ”Œ Embedded Hardware Circuits
Designed microcircuitry and control panel hardware for industrial manufacturing machinery.
πŸ’» Full-Stack Web Development
Developed database-driven web platforms and applications using PHP, Ruby on Rails, MySQL, and PostgreSQL.
Siemens & Allen Bradley PLCs Wonderware SCADA ABB DCS Mechatronics Full-Stack Development

Technical Competencies & Knowledge Domains

OT / ICS & SCADA Defense
NIST SP 800-82 ISA/IEC 62443 SCADA & DCS Security SIS / ESD Segregation LoRaWAN Plant Security Industrial Firewalls Forescout SilentDefense
AI Security & LLM Systems
LLM Knowledge Distillation QLoRA & LoRA Fine-Tuning Vision-Language Models Unsloth & Transformers Model Quantization (GGUF/AWQ) AI/ML Security Assessment vLLM Inference Adversarial Robustness
Governance & Frameworks
Saudi NCA Compliance NIST CSF ISO 27001 CIS Benchmarks MITRE ATT&CK for ICS Threat Modeling (STRIDE) KPI & KRI Metric Modeling
Industrial Automation & Core Tech
Siemens / Allen Bradley PLCs Wonderware InTouch SCADA ABB AC 800-MS DCS Mechatronics & Pneumatics Linux Systems & Python DevSecOps & Docker Network Segmentation

Education & Academic Background

Master of Technology (M.Tech)

Data Science and Artificial Intelligence

Indian Institute of Information Technology (IIIT Dharwad)

Hubballi-Dharwad, India

Bachelor of Technology (B.Tech)

Information Technology

Cochin University of Science and Technology (CUSAT)

Kochi, India

Diploma in Engineering

Mechatronics Engineering

Nettur Technical Training Foundation (NTTF)

India