Feras Kanaan

Feras Kanaan VP Digital Infrastructure

  • Digital Infrastructure
  • AI & GPU Clusters
  • AI Security & Agentic
  • Industrial IoT
  • Edge AI & Private 5G
  • CISSP

A digital & security architect, AI agent builder, and offensive security researcher.

For 29+ years, I've been building digital infrastructure, securing industrial systems, and advising boardrooms across MENA and global markets.

Three decades of building systems, securing them, and learning how they break. This timeline is my story—not a resume.

// Work History

The Timeline

2026 — Present
VP of Digital Infrastructure
TAQA Water Solutions
Executive Innovation & Infrastructure
  • ▸Bridges innovation and security for the connected enterprise as VP of Digital Infrastructure.
  • ▸Directs digital strategy and technology transformation for critical large-scale infrastructure.
  • ▸Specializes in securing innovation at scale while managing vendor costs and technical debt.
  • ▸Oversees emerging technology roadmaps including AI/ML, Private 5G, and OT Cybersecurity.
2023 — 2026
Manager Industry 4.0 & Emerging Tech
TAQA Water Solutions
Industrial Industry 4.0 & AI Pioneer
  • ▸Architected private LLMs for secure data processing and developed agentic business roadmaps.
  • ▸Optimized GPU cluster performance and hardware infrastructure for enterprise-grade GenAI applications.
  • ▸Designed private 5G and M2M network architectures for OT/SCADA across 18 distributed sites.
  • ▸Deployed enterprise hybrid SD-WAN, achieving a 70% cost reduction compared to MPLS.
2022 — 2023
Cyber Risk Advisor
TAQA Water Solutions
Digital Resilience & Cyber Risk
  • ▸Directed the successful achievement of ISO 27001 certification within a 10-month timeframe.
  • ▸Re-engineered disaster recovery architecture, reducing RTO and RPO by 70%.
  • ▸Developed an AI-driven Security Operations Center (SoC) for advanced threat detection.
  • ▸Streamlined compliance with regional regulations (NESA, ADDA) through a unified reporting framework.
2017 — 2022
CISO
TAQA Water Solutions
Cybersecurity Governance & Leadership
  • ▸Served as CISO, strengthening Information Security Assurance (IA) to 100% compliance.
  • ▸Implemented the National Cyber Risk Management Framework (NCRMF) for UAE standards.
  • ▸Orchestrated government Data Management programs and established formal data governance committees.
  • ▸Chaired the Information Security Committee to oversee risk monitoring and cross-functional collaboration.
2016 — 2017
Digital Consultant
Andiamo Yacht Charter
E-Commerce & Emerging FinTech
  • ▸Led the system design and full-cycle development of the company's E-Commerce portal.
  • ▸Optimized business intelligence through improved macro and micro location targeting strategies.
  • ▸Participated in the development of a blockchain-based pilot for the company loyalty program.
  • ▸Provided strategic consultancy at the intersection of digital marketing and technical architecture.
2013 — 2016
Information Systems Advisor
Ministry of International Cooperation and Development
National Security & Strategic Advisory
  • ▸Provided security advisory for NESA compliance and UAE Information Assurance frameworks.
  • ▸Developed the Ministry's primary and secondary data center architecture and migration plans.
  • ▸Conducted annual cyber risk assessments and monitored KPIs for national information sharing.
  • ▸Conducted feasibility studies for hosting the UNISDR Global Disaster Risk reduction portal.
2008 — 2013
Information Systems Expert
Ministry of Foreign Trade
E-Government & Standards Implementation
  • ▸Led the implementation of the comprehensive e-Government strategy for the Ministry.
  • ▸Directed the adoption of global security standards including ISO 27001, COBIT, and ITSM.
  • ▸Designed and developed the First UAE Foreign Trade Portal as a secure digital gateway.
  • ▸Implemented the Ministry's Business Continuity (BCP) and Risk Management Frameworks (RMF).
1997 — 2007
Systems Engineering
Early Career
Systems Engineering & Software Development
  • ▸Served as CTO for Qpassion Technology and Senior Developer for Saudi Research & Publishing Company.
  • ▸Developed E-Commerce solutions for Lootah BCGas and product software for Al Aqariya TV.
  • ▸Began technical career as an Information Systems Engineer at Damascus University.
  • ▸Earned a B.Eng. in Electrical and Electronics Engineering from Damascus University.
// What's Next

Emerging Tech Focus

feras@0xFK:~/emerging-tech
feras@0xFK:~/emerging-tech$ cat ./focus-areas.conf
PID 001 | Private LLMs

On-premise large language models. Data sovereignty, custom fine-tuning, and air-gapped deployments for regulated industries.

RAG Fine-tuning Air-gapped GPU Clusters
---
PID 002 | 5G Private Networks

Enterprise 5G for industrial automation, real-time analytics, and ultra-reliable connectivity in manufacturing and energy.

URLLC Edge Computing Industry 4.0 M2M
---
PID 003 | Industrial IoT

Secure sensor networks for predictive maintenance, environmental monitoring, and digital twins across critical infrastructure.

Digital Twins SCADA Predictive OT Security
feras@0xFK:~/emerging-tech$ systemctl status --all
● 3 focus areas running · 12 capabilities loaded · uptime 29y
feras@0xFK:~/emerging-tech$
// deep dive
OT & Enterprise Security Architecture

Why OT security is a different discipline, ISO 27001 in 10 months, and securing 18 distributed sites.
// deep dive
Private LLMs & AI Agents

GPU capacity planning, retrieval-time access control, agent identity, and why pilots stall.
// Credentials

Certifications

feras@0xFK:~/credentials
feras@0xFK:~/credentials$ ls -la --sort=date ./
total 20 certifications — 26 years of continuous learning
ISSUED   AUTHORITY            CERTIFICATION
█ /cybersecurity
2018.02 ISC2 (ISC)² CISSP
2019.01 ISC2 DevSecOps: Integrating Security into DevOps
2019.12 Cisco Cisco Cyber Ops 210-250
------ FIRST CVSSv3 Certificate
█ /offensive-security
2025.11 OffSec Antivirus Evasion Skill Path
2025.11 OffSec Windows Attacks Skill Path
2025.11 OffSec Enumeration Skill Path
2025.11 OffSec MITRE ATT&CK - Lateral Movement
█ /iso-standards
2025.08 UKAS ISO/IEC 42001 AI Quality Infrastructure
2024.05 Bureau Veritas ISO/IEC 20000-1:2018 Lead Auditor
2024.02 Bureau Veritas ISO/IEC 20000-1:2018 Lead Implementer
2022.11 BSI ISO/IEC 27001:2022 Lead Implementer
2021.04 BSI ISO 31000:2018 Advanced Lead Risk Manager
█ /business-continuity
2025.12 The BCI CBCI 7.0 Qualification
█ /governance-process
2016.10 IMF Financial Programming & Policies, Program Design
2016.04 Delft Univ. Certificate for Open Government
2012.04 OMG OMG Certified Expert in BPM
2011.06 BP Group Certified Process Professional Master (CPPM)
█ /foundations
2003.07 Adobe Adobe Certified Macromedia Flash MX Developer
1999.02 Oracle DB Administrator & Oracle 2000 Developer
feras@0xFK:~/credentials$ echo $STATS
20 certifications · 6 categories · 12 issuing bodies · 1999–2025 span
feras@0xFK:~/credentials$
// Offensive Security

0xFK

CTF writeups, HackTheBox walkthroughs, and offensive security research — the other terminal window.

Read the full 0xFK page →
0xFK
@0xfk244
124 subscribers · 14 videos · HackTheBox · TryHackMe · OSCP
Subscribe
BountyHunter HTB
3yr ago
YouTube
14:58
0xFK 0xFK 973 views
BountyHunter — HackTheBox
HTB Linux Easy
THM Windows PrivEsc
3yr ago
YouTube
8:00
0xFK 0xFK 665 views
TryHackMe Windows PrivEsc
THM Windows PrivEsc
Lame HTB
3yr ago
YouTube
4:07
0xFK 0xFK 480 views
Lame — HackTheBox
HTB Linux Easy
█ /writeups
all posts →
[Research]
WhatsApp Zero DNA Policy
Medium · Privacy · Analysis
 [THM]
Breaching Active Directory
TryHackMe · Active Directory
 [HTB]
Lame — HackTheBox
Medium · Linux · Easy
 [HTB]
Explore — HackTheBox
Medium · Android
 [HTB]
Bounty Hunter — HackTheBox
Medium · Linux · Easy
Full docs at 0xfk.github.io/offensive-security →