I’m Mark Salam, a technology leader with more than 20 years of experience in infrastructure, information security and cloud. I’ve led engineering and consulting teams, set enterprise cloud strategy and advised executives on architecture, risk and delivery.
My work spans financial services, enterprise technology and consulting. I lead technical teams and help executives assess investment priorities, security requirements and operational risk. That includes responsibility for architecture decisions, delivery, hiring and budget planning.
Examples of my responsibilities and results across security architecture, cloud compliance and operations.
I led security technology decisions and implementation for Interac’s fraud services program. I worked with engineering and business stakeholders to develop threat models, validate security designs and define controls.
I assessed control gaps, presented remediation priorities to executives and addressed PCI DSS controls and PIPEDA privacy requirements.
I directed a DevSecOps team that automated compliance controls during a financial institution’s cloud data platform migration.
The work reduced the time required to demonstrate compliance and incorporated security controls into the delivery process.
I set enterprise cloud strategy and led a team of technical specialists at TMX. I worked with operations teams to strengthen monitoring, response and cloud compliance.
Working with operations teams, I improved cloud infrastructure compliance scores by 10% and reduced remediation time by 50%.
Roles in technology leadership, security, consulting and infrastructure, listed most recent first.
I lead cloud migration and modernization engagements at Ateko, covering VMware, Azure VMware Solution and Azure services. I guide infrastructure assessments, platform selection and migration planning, with attention to sequencing, resilience and operational risk. I work with client infrastructure and security teams to make architecture decisions against business requirements.
I led security technology decisions and implementation for Interac’s fraud services program. I developed and validated threat models and security designs with engineering and business stakeholders, addressing PCI DSS controls and PIPEDA privacy requirements. I assessed risks and control gaps against NIST and CIS frameworks, presented remediation priorities to executives, and worked with security operations on incident escalation, response playbooks and assurance.
I provided information security specialist support to Aquanow on a part-time contract, concurrent with my work at Slalom and Interac.
I led delivery and hiring for Slalom’s technology consulting practice across multiple enterprise client engagements. I advised executives on technology strategy, security and delivery risk, and helped define client roadmaps. My work across Slalom also included cloud compliance automation, site reliability engineering and security assessments against NIST and CIS frameworks.
I guided cloud architecture and deployment with cross-functional delivery teams. I provided technical direction, mentored consultants and aligned architecture decisions with client requirements.
I led cloud adoption work at RBC, drawing on my experience in enterprise infrastructure, cloud engineering and information security.
I advised enterprise clients on technology and information security, applying my experience in infrastructure, cloud and security consulting.
I set enterprise cloud strategy, led a team of technical specialists and managed annual budget planning at TMX. I advised executives on cloud security and compliance while expanding public cloud adoption within financial industry requirements. Working with operations teams, I improved cloud infrastructure compliance scores by 10% and reduced remediation time by 50%. I also introduced enterprise secrets management and dynamic credentials, shortening credential validity periods by 90%.
I designed, deployed and secured cloud services at TMX. I worked with cross-functional engineering teams and implemented improvements to cloud identity and access management.
I developed enterprise security frameworks and hardening standards based on CIS benchmarks, assessed security designs and introduced security practices into the software development lifecycle. I conducted vulnerability assessments and penetration testing, and supported security operations with incident response and threat mitigation.
I led engineers responsible for server infrastructure supporting capital markets, including a real-time risk platform. I directed site recovery design and implementation and Active Directory hardening.
I administered Windows Server and network infrastructure at TMX, before progressing into server engineering leadership, security advisory and cloud roles.
I managed a managed services team at Jolera, with responsibility for team leadership, team development and service delivery.
I worked in enterprise architecture at Jolera, with a technical focus on Windows Server and server architecture.
I managed information systems and IT infrastructure at Weston Forest Products, including Citrix environments.
I worked as a Senior Network Specialist at Paradigm Network Solutions, with a focus on network infrastructure.
I combined project management and technical support at XBASE Technologies, working across IT delivery and ongoing support.
My experience includes security architecture, threat modelling, control assessments and executive risk reporting, with work against NIST and CIS frameworks, PCI DSS controls and privacy requirements.
I’ve led cloud strategy, adoption and modernization, supported by hands-on experience in infrastructure engineering, identity and access management, resilience and operations.
I use AI to develop and evaluate my own application ideas. This is an area of ongoing practical exploration alongside my established work in cloud and information security.
See what I’m makingI compose and write music, and create applications with AI. These projects are a personal part of my life: a place to experiment, build useful tools and develop ideas beyond my professional work.
