Professional background

I design systems and decisions that can survive scrutiny.

My professional experience gives me context. My independent work proves how I think, how I build, and how far I can take a problem when the constraints are mine to solve.

Who I am

I work at the intersection of technical capability, operational reality, and institutional pressure. I am interested in what happens after the architecture diagram: the data semantics, the failure states, the controls, the evidence, and the decisions that make a system trustworthy.

Across approximately seven years, I have worked across the procurement, evaluation, and delivery phases of cybersecurity and infrastructure engagements. That experience taught me how regulated systems are bought, defended, documented, and challenged. My personal projects let me go further: from the operational model and API contract to the frontend control surface and the evidence needed to know whether the system is actually working.

I came into this work from a commercial angle, which shaped how I read technical proposals and vendor claims. I prefer solutions whose value can be clearly articulated—not only to engineers, but also to the decision-makers who own the outcome.

My direction is toward advisory and management roles. Not away from technical depth, but toward positions where that depth serves broader organizational judgment. I am interested in environments where structured thinking, accountability, and clear communication are treated as competitive advantages.

The international dimension is deliberate. Canada and Germany represent operating cultures—documentation-first, compliance-aware, governance-oriented—that align closely with how I already work. I am open to relocation and to remote-first, distributed teams.

The independent work behind the profileFRIDAY / ACTIVE BUILD

FRIDAY Media OS is the clearest picture of how I think.

It brings together production control, date-scoped retrieval, operational states, proxy safety, and evidence-driven decision-making in one personal system. In plain terms: FRIDAY helps an operator know what happened, what is still missing, and what can safely be trusted before a decision is made.

I do not want to be evaluated only by company names on a CV. The stronger evidence is the system: the problem it addresses, the choices behind it, the technology that makes it work, and the judgment required when the answer is not a neat number.

What I have done

My capability has more than one source.

Independent building and professional delivery reinforce each other.

01

Independent work

Built FRIDAY Media OS

Designed a personal operational system around production control, content retrieval, daily contract logic, and evidence-driven state handling.

02

Technical judgment

Refused misleading certainty

Made incomplete pagination, date semantics, proxy boundaries, and stale or failed states visible instead of hiding them behind a convenient number.

03

Enterprise context

Worked across regulated decisions

Contributed across cryptographic security, anti-DDoS, infrastructure, procurement, vendor alignment, and governance-heavy delivery.

“
My role has consistently been to reduce friction between technical complexity and organizational decision-making.

— Tonmoy's operating principle

Keep the conversation moving

Looking for a thoughtful technology partner?

Explore the work or start a direct conversation.

How the capability is built

Solutions are stronger when the stack is visible.

This is the bridge between technical depth and stakeholder confidence.

FRIDAY application layer

React · TypeScript · Vite

Used for a controlled frontend that makes production state, contracts, and incomplete results understandable.

FRIDAY service layer

Python · SQLAlchemy · PostgreSQL

Used for API boundaries, repository logic, structured retrieval, and data semantics that can be inspected and tested.

Professional solution domains

HSM · cryptography · Anti-DDoS

Security capabilities carried into risk communication, vendor alignment, regulatory documentation, and delivery decisions.

Solution range

The systems landscape I understand.

The value is not a list of acronyms; it is knowing how each solution changes risk, operations, cost, integration, and decision quality.

Security operations

EDR / XDR · DLP · SIEM · SOAR

Detection, investigation, data protection, and response automation.

Network protection

Firewall · NDR · ZTNA · WAF · Anti-DDoS

Boundary security, traffic visibility, access control, application protection, and resilience.

Platform & content

Database licenses · DAM · API

Information platforms, licensing decisions, content lifecycle, and integration boundaries.

Cloud & AI

CSPM · CASB · MCP · RAG · LLMs

Cloud posture, access governance, tool-connected intelligence, and retrieval-grounded workflows.