Cloud Security Careers in Pakistan: The Most Underserved Niche
A team of cloud security professionals collaborating around monitors displaying code in a modern tech office, representing the growing but underserved cloud security career niche in Pakistan.

In 2024, the State Bank of Pakistan issued revised cybersecurity guidelines requiring all commercial banks to implement cloud security frameworks across their digital operations. The directive affected every major bank in the country — HBL, MCB, UBL, Meezan, Bank Alfalah, and a dozen others — and sent their technology leadership scrambling to find professionals who understood both cloud infrastructure and security. The search was largely unsuccessful.

That story repeats across Pakistan’s IT landscape in 2026. Telecoms are securing subscriber data on cloud platforms. Software houses fulfilling ISO 27001 and SOC 2 requirements for international clients. Fintechs managing PCI-DSS compliance for payment processing on cloud-native infrastructure. Government agencies are adopting the cloud under the National Cloud Policy while navigating data sovereignty requirements. Every one of these organizations needs cloud security professionals. Almost none of them can find enough.

Cloud security is the most underserved technical niche in Pakistan’s IT industry right now. The demand is real, urgent, and structurally growing. The supply of qualified professionals is genuinely thin. And the salary premium that results from that gap — for the engineers and architects who do have the skills — is among the highest available in any technical discipline in the country.

This guide maps the complete cloud security career landscape in Pakistan: the roles, the certifications, the sectors hiring, the salary ranges, and an honest roadmap for professionals who want to enter or advance in this field.

Why Cloud Security Is Exploding in Pakistan Right Now

Cloud security has always existed as a discipline, but several converging forces have created an acute shortage in Pakistan’s market in 2025–2026 that shows no sign of resolving quickly.

Regulatory Pressure Is Driving Mandatory Hiring

Pakistan’s financial regulators are the primary driver. The State Bank of Pakistan‘s revised cybersecurity framework, the SECP‘s data protection guidance for financial institutions, and PTA‘s cloud infrastructure directives have collectively created compliance obligations that require dedicated cloud security expertise — not just general IT security awareness.

Banks cannot simply assign cloud security responsibilities to their existing network security teams. Cloud security requires a fundamentally different knowledge base: understanding IAM policies, cloud-native threat detection, shared responsibility models, infrastructure-as-code security scanning, and cloud-specific compliance controls. The compliance timeline is not optional, and the hiring urgency is genuine.

Pakistan’s Digital Economy Expansion

EasyPaisa and JazzCash together process hundreds of billions of rupees in transactions annually. SadaPay, NayaPay, and a growing fintech ecosystem are building cloud-native financial infrastructure from the ground up. Daraz and emerging e-commerce platforms handle sensitive payment and personal data at scale. Every one of these businesses faces the same core challenge: how do you secure customer data and financial transactions on cloud infrastructure that was designed for agility, not the perimeter-based security model of the previous decade?

The answer requires cloud security professionals, and Pakistan doesn’t have enough of them. The fintech sector in particular is willing to pay significantly above-market rates for engineers who can build secure-by-design cloud architectures.

International Client Requirements for Pakistani Software Houses

Pakistan’s software export industry — now exceeding $3.2 billion annually — increasingly works with clients who require formal security compliance. ISO 27001, SOC 2 Type II, and GDPR compliance for European clients are no longer optional for serious software houses. Systems Limited, 10Pearls, Arbisoft, and NetSol Technologies all have clients who conduct security audits and require demonstrated cloud security practices.

This has created a category of cloud security role that didn’t exist at scale in Pakistan five years ago: the DevSecOps engineer who embeds security into the software development and deployment pipeline rather than treating it as a post-deployment concern. Software houses are hiring aggressively for this profile, and the talent pool is thin.

CPEC and Chinese Cloud Adoption

Pakistan’s position within CPEC has accelerated Alibaba Cloud adoption across government agencies, infrastructure projects, and commercial enterprises with Chinese partnerships. Securing workloads on Alibaba Cloud requires specialized knowledge of its IAM model, security services, and compliance frameworks, which is even more scarce than AWS or Azure security expertise in the Pakistani market.

Cloud Security Roles in Pakistan: What They Pay in 2026

Cloud security is not a single job title — it’s a family of specializations, each with distinct technical requirements, career trajectories, and compensation levels. Understanding these distinctions is critical for anyone planning a career in the field.

Role TitleLocal Salary (PKR/mo)Remote (USD/mo)Exp. RequiredKey Cert
Cloud Security EngineerPKR 150,000 – 320,000$1,500 – $3,0002–5 yrsAWS Security, AZ-500
Cloud Security ArchitectPKR 350,000 – 700,000$3,500 – $6,0006–10 yrsCCSP, AWS SAP
IAM / Identity EngineerPKR 120,000 – 280,000$1,200 – $2,5002–4 yrsAZ-500, AWS SAA
DevSecOps EngineerPKR 180,000 – 380,000$2,000 – $3,8003–6 yrsCKS, AWS DevOps
Cloud Compliance AnalystPKR 100,000 – 220,000$1,000 – $2,0001–4 yrsCCSP, CISA
Penetration Tester (Cloud)PKR 200,000 – 450,000$2,500 – $5,0003–7 yrsOSCP, AWS Security
Cloud Security Lead / ManagerPKR 500,000 – 900,000+$5,000 – $9,0008+ yrsCCSP, CISSP

Note: Local salary ranges reflect Karachi, Lahore, and Islamabad market rates as of Q1 2026. Remote USD figures are for professionals working with international clients from Pakistan. Exchange rate: PKR 280/USD. Data sourced from industry contacts and active job postings across Pakistan’s IT sector.

The Roles Explained

Cloud Security Engineer is the core practitioner role — implementing and operating security controls across cloud environments. This is where most people enter the field from a DevOps or general cloud engineering background. The day-to-day work involves configuring IAM policies, setting up cloud security posture management tools, implementing encryption, and responding to security alerts from cloud-native detection services like AWS GuardDuty or Azure Defender.

DevSecOps Engineer is the fastest-growing cloud security role in Pakistan’s software houses. It requires combining DevOps pipeline expertise with security tooling — integrating static application security testing (SAST), container image scanning (Trivy, Snyk), secrets management (HashiCorp Vault), and policy-as-code (OPA) into CI/CD pipelines so security is validated automatically with every deployment rather than reviewed manually.

IAM / Identity Engineer is a specialized but high-demand role, particularly in Pakistan’s banking sector. AWS IAM, Azure Active Directory, and identity federation across cloud environments are consistently underestimated in complexity by organizations until they’ve had a major incident. Engineers who genuinely understand identity and access management — role design, least-privilege principles, service account security, and cross-account trust — are in short supply across all sectors.

Cloud Security Architect is the senior design role. Architects don’t just implement security controls — they design the security posture of entire cloud environments from the ground up, evaluate tool choices, lead compliance programmes, and advise executive leadership on risk. This role is rare in Pakistan and commands the highest local compensation in the field.

Which Sectors Are Hiring Cloud Security Professionals in Pakistan?

Understanding sector dynamics is important because each industry has different technical requirements, compensation structures, and cultural environments. The right sector choice depends on your background, risk tolerance, and long-term career goals.

SectorKey Companies (Pakistan)Cloud Security NeedsHiring Urgency
Banking & FinanceHBL, MCB, UBL, Meezan, Bank Alfalah, NBPSBP compliance, data residency, IAM, zero-trust banking appsVery High
TelecomJazz, Telenor, Ufone, Zong, PTCLNetwork security on cloud, subscriber data protection, SIEMHigh
Software HousesSystems Ltd, 10Pearls, Arbisoft, NetSol, i2cClient security requirements, DevSecOps pipelines, ISO 27001High
Government & RegulatorsNADRA, SBP, PTA, SECP, FBRNational cloud adoption, security, compliance frameworks, and auditHigh
E-commerce & FintechDaraz, EasyPaisa, JazzCash, SadaPayPCI-DSS, fraud prevention, API security, identity managementVery High
HealthcareSehat Kahani, Shifa, Aga Khan HospitalPatient data privacy, HIPAA-equivalent controls, cloud PHI storageMedium

Banking and Financial Services: Highest Urgency, Highest Local Pay

The Pakistani banking sector is in the middle of a cloud security hiring crisis. Regulatory deadlines don’t move. Banks that fail compliance audits face penalties and reputational consequences that dwarf the cost of hiring cloud security professionals. HBL, MCB, UBL, and Meezan Bank are all building internal cloud security competency rather than relying entirely on consulting firms, and they’re willing to pay PKR 300,000–700,000/month for the right architects and senior engineers.

The trade-off is a slower pace than software houses and a more bureaucratic hiring process. But for professionals who want high compensation, stability, and exposure to genuinely complex security problems at scale, banking is the most attractive domestic sector.

Software Houses: Broadest Exposure, Fastest Skill Development

Systems Limited, 10Pearls, Arbisoft, and their peers offer cloud security professionals the broadest technical exposure available in Pakistan. You’ll work across multiple clients, multiple cloud platforms, and multiple compliance frameworks. The pace is fast. The technical variety is high. And the pathway to international remote roles is most direct from a software house background, because you’re already working to international client standards.

Software house cloud security roles typically sit in the PKR 150,000–380,000/month range, depending on level, with faster progression than the banking sector.

Fintech: Highest Remote Potential, Most Technically Interesting

Pakistan’s fintech sector — EasyPaisa, JazzCash, SadaPay, NayaPay — is building cloud-native financial infrastructure from scratch and needs security professionals who think in terms of API security, fraud detection, identity verification, and payment security architecture. These roles are technically sophisticated and often offer equity or performance-linked compensation structures beyond base salary.

Cloud Security Certifications: What to Get and in What Order

Cloud security certifications span a wider range of difficulty, cost, and recognition than almost any other area of the cloud industry. Choosing the wrong certification for your current level or target role is a common and expensive mistake. Here’s the complete landscape with Pakistani-specific guidance.

CertificationExam Fee (USD)Exam Fee (PKR)Best ForDifficulty
AWS Certified Security – Specialty$300PKR 84,000AWS-heavy environments, software housesHard
AZ-500: Azure Security Engineer$165PKR 46,200Banking, enterprise Azure stacksMedium–Hard
Google PCSE$200PKR 56,000GCP environments, tech companiesHard
CCSP (ISC²)$599PKR 167,720Architecture & compliance rolesVery Hard
CompTIA Security+$370PKR 103,600Entry-level foundation, career switchersMedium
CKS (Kubernetes Security)$395PKR 110,600DevSecOps, K8s-heavy teamsHard
AWS Security – Associate path$150PKR 42,000Stepping stone before SpecialtyMedium
Certified Cloud Security Pro (CCSK)$395PKR 110,600Vendor-neutral cloud security foundationMedium

The Right Certification Path by Career Stage

Starting from scratch (no cloud background): CompTIA Security+ first. It establishes foundational security knowledge that will make every cloud security certification more accessible. Then pair it with a cloud fundamentals credential — AWS Cloud Practitioner (PKR 28,000) or AZ-900 (PKR 46,200). This combination gets you into entry-level cloud or security roles where you can build hands-on experience.

Coming from a cloud/DevOps background: Skip Security+ and go directly to a platform-specific security certification. If your environment is AWS, the AWS Certified Security – Specialty is the most direct path. If your organization runs Azure — common in Pakistan’s banking sector — AZ-500 is the most relevant and costs only PKR 46,200. Both are challenging but build directly on the cloud knowledge you already have.

Moving toward architecture and compliance roles: The CCSP (Certified Cloud Security Professional) from ISC² is the most respected vendor-neutral cloud security certification available and is particularly valued in Pakistan’s banking and regulatory sectors. At PKR 167,720, it’s the most expensive on the list, and it requires 5 years of IT experience with 3 years in information security to sit without a waiver. It signals genuine architectural depth and opens doors at the senior level that platform-specific certifications alone cannot.

DevSecOps specialization: CKS (Certified Kubernetes Security Specialist) is the most relevant credential for Kubernetes-heavy DevSecOps roles. Requires an active CKA as a prerequisite. Pairs well with AWS Security Specialty or AZ-500 to create a comprehensive DevSecOps credential profile.

The Technical Skills That Actually Get You Hired

Certifications open doors. What happens in technical interviews is determined entirely by your hands-on skills. Here is what Pakistani hiring managers across banking, software houses, and fintechs actually test for in cloud security interviews.

IAM and Identity — The Foundation of Everything

Identity and access management is the single most important cloud security skill domain. Every significant cloud security incident traces back to an IAM failure — over-privileged roles, misconfigured service accounts, or leaked credentials. Employers test IAM deeply: designing least-privilege IAM policies from scratch, configuring cross-account roles, implementing service control policies in AWS Organizations, or building Conditional Access policies in Azure AD.

This is an area where depth matters enormously. Surface-level familiarity with IAM concepts does not survive a technical interview. You need to be able to write IAM policies, explain the difference between resource-based and identity-based policies, and diagnose access denied errors from policy evaluation logic.

Cloud-Native Security Services

Knowing that AWS GuardDuty exists is not the same as knowing how to tune it, interpret its findings, and integrate it into an automated response workflow. Cloud security employers want engineers who have actually worked with these services: AWS GuardDuty, Security Hub, Macie, CloudTrail, Config; Azure Defender for Cloud, Sentinel, Azure Monitor; GCP Security Command Center. The ability to configure, tune, and act on findings from these services is table stakes at the mid-level.

Infrastructure as Code Security

As Pakistani organizations adopt Terraform and CloudFormation for infrastructure management, securing IaC templates has become a distinct skill requirement. Tools like Checkov, tfsec, and Terrascan scan IaC templates for misconfigurations before deployment. Employers increasingly expect cloud security engineers to integrate these tools into CI/CD pipelines — so that a publicly exposed S3 bucket or an overly permissive security group is caught in the pipeline, not discovered after deployment.

Container and Kubernetes Security

For any DevSecOps or cloud security role at a software house or tech company, container security is non-negotiable. Image scanning (Trivy, Snyk), runtime security (Falco), Kubernetes RBAC, PodSecurityAdmission, NetworkPolicies, and secrets management (HashiCorp Vault, Kubernetes Secrets with encryption at rest) — these are the day-to-day tools. Engineers who can’t demonstrate hands-on experience with at least three of these tools will struggle in technical interviews for DevSecOps roles.

Compliance Frameworks: What Pakistani Employers Specifically Need

Pakistan’s regulatory environment creates specific compliance knowledge requirements:

  • SBP Cybersecurity Framework: Essential for any banking sector cloud security role. Understanding the specific controls, audit requirements, and cloud-specific guidance within this framework is mandatory.
  • PCI-DSS: Required for any organization processing card payments — fintechs, e-commerce platforms, and banks. Cloud-specific PCI-DSS controls (encrypting cardholder data, network segmentation, and access control) are the most in-demand compliance knowledge in the fintech sector.
  • ISO 27001: The most common compliance framework for software houses with international clients. Understanding how cloud security controls map to ISO 27001 Annex A controls is valued across Pakistan’s export-focused software industry.
  • GDPR: Relevant for software houses with European clients. Pakistani engineers working on EU-facing projects need to understand data residency requirements, data processing agreements, and how to configure cloud storage and processing to meet GDPR requirements.

How to Enter Cloud Security: Three Realistic Pathways

Pathway 1: From Cloud/DevOps Engineering

This is the most direct pathway and the one most Pakistani cloud security professionals actually take. If you already have 1–2 years of AWS, Azure, or GCP experience in a DevOps or cloud engineering role, you have the technical foundation that cloud security builds on. The transition involves adding a platform-specific security certification (AWS Security Specialty or AZ-500), learning the security-specific tooling (GuardDuty, Defender, IAM policy design), and deliberately moving into projects with a security focus.

Timeline from decision to first cloud security role: 4–8 months of focused upskilling alongside existing work. Compensation uplift on transition: typically 25–40% above your cloud engineering salary.

Pathway 2: From Traditional IT Security

Network security engineers, SOC analysts, and information security professionals who want to move into cloud security already have the security mindset — the threat modelling, the incident response thinking, the compliance awareness. What’s missing is the cloud-specific technical knowledge.

The transition requires building genuine cloud fundamentals from the ground up. A traditional security professional who doesn’t understand how cloud IAM works, how shared responsibility models differ from on-premises security, or how cloud-native detection services function cannot operate effectively in cloud security. The cloud fundamentals gap is real and takes dedicated time to close — but it closes faster than building a security mindset from scratch.

Timeline: 6–12 months of structured cloud and cloud security training. The CCSK (vendor-neutral cloud security foundation) is a useful first credential that bridges traditional security knowledge and cloud security concepts.

Pathway 3: Fresh Entry from CS/IT Education

For students or recent graduates entering cloud security directly, the most efficient path builds in a specific order: strong Linux and networking foundation, cloud fundamentals certification, then Security+ or equivalent, followed by a platform-specific cloud security certification. The key differentiator for fresh entrants is a demonstrable project portfolio — a home lab with real security scenarios, documented incident response exercises, and IAM policy design examples on GitHub.

Fresh graduates without a portfolio who hold only certifications face a credibility gap in Pakistani hiring. The certification shows you’ve studied the material. The portfolio shows you can apply it. Both are required to get past the initial screening for cloud security roles.

Timeline to first cloud security role: 12–18 months of focused preparation. Starting salary expectation: PKR 80,000–130,000/month, scaling quickly with demonstrated competency.

Cloud Security Career Roadmap: Phase by Phase

PhaseDurationCore ActivitiesTarget Outcome
Foundation0–6 monthsLinux, networking, cloud fundamentals (AWS CCP or AZ-900), CompTIA Security+, basic IAM conceptsEntry-level cloud or security role; solid technical base
Specialisation6–18 monthsChoose a cloud platform, AWS SAA or AZ-104, then AWS Security Specialty or AZ-500; build home lab scenariosCloud Security Engineer role; PKR 150,000–250,000/mo
Depth18–36 monthsCCSP or CCSK for vendor-neutral depth; DevSecOps toolchain (Trivy, OPA, Vault); Kubernetes security (CKS)Senior security role or DevSecOps lead; PKR 280,000–450,000/mo
Architecture3–6 yearsCISSP or advanced certifications; lead compliance programmes; design zero-trust architectures at enterprise scaleCloud Security Architect or Manager; PKR 500,000–900,000+/mo

The most important insight from this roadmap: the certification path and the hands-on experience path must run in parallel. Certifications without hands-on depth produce professionals who can answer questions but can’t do the work. Hands-on experience without certifications produces professionals who are passed over in CV screening before they ever get to demonstrate their skills. Both tracks matter, and both require deliberate investment.

Remote Work in Cloud Security: The Most Significant Career Multiplier

Cloud security is one of the most remote-work-friendly disciplines in the entire technology industry. The work is inherently digital, documentation-driven, and independent of physical location. Security engineers can monitor cloud environments, respond to incidents, design IAM policies, and conduct compliance audits entirely remotely. International companies have been hiring remote cloud security professionals from Pakistan, India, and Eastern Europe for years — and the demand continues to grow faster than supply.

The compensation differential is dramatic. A Cloud Security Engineer earning PKR 220,000/month locally can realistically earn $2,000–$2,500/month (PKR 560,000–700,000/month) in a remote role with an equivalent title and experience level. A senior Cloud Security Architect earning PKR 600,000/month locally might command $5,000–$7,000/month remotely.

The requirements for landing international remote cloud security roles are consistent: a strong platform certification (AWS Security Specialty, AZ-500, or CCSP), documented hands-on experience with cloud security tooling, a GitHub or portfolio demonstrating real projects, and solid English written communication for async work.

The most effective hunting ground is LinkedIn, where international security hiring managers actively search for experienced candidates. Bug bounty platforms (HackerOne, Bugcrowd) are a secondary pathway for cloud penetration testers — Pakistani researchers who have documented cloud-specific findings on these platforms have used them as direct entry points to international security consultancies.

Upwork and Freelance Security Consulting

Cloud security consulting via Upwork is viable for senior professionals but requires careful positioning. Generic “cybersecurity” profiles compete against thousands of low-cost providers. Specific cloud security profiles — “AWS security architecture reviews,” “Azure compliance and hardening,” “cloud penetration testing” — attract clients who are specifically looking for cloud security expertise and are willing to pay the rates that expertise commands. Senior cloud security consultants on Upwork in Pakistan report rates of $60–$120/hour once their profile is established.

Mistakes That Stall Cloud Security Careers in Pakistan

Treating cloud security as a subset of general cybersecurity. Many professionals enter cloud security with a traditional security background and attempt to apply on-premises mental models to cloud environments. Cloud security is not just about firewalls on virtual machines. The shared responsibility model, the IAM-centric access control paradigm, and the ephemeral nature of cloud workloads require genuinely different thinking. The engineers who thrive are the ones who learn cloud-native approaches rather than mapping cloud environments onto familiar on-premises frameworks.

Getting a certification without building a lab. The AZ-500 and AWS Security Specialty exams can be passed with study and memorization. But passing the exam doesn’t mean you can do the job. Every serious cloud security engineer should have a personal AWS or Azure account where they’ve intentionally misconfigured and then hardened their own cloud environment — not as a theoretical exercise, but as a hands-on record of real problem-solving.

Ignoring the compliance dimension. Many technically excellent engineers underinvest in compliance knowledge because it feels less technical and therefore less prestigious than hands-on security engineering. In Pakistan’s market in 2026, where regulatory pressure is the primary driver of cloud security hiring, this is a career-limiting blind spot. The professionals who can translate technical security controls into compliance evidence that satisfies an SBP audit or an ISO 27001 external assessor are the ones who advance to architecture and leadership roles.

Specializing in a single cloud platform too rigidly. Pakistani organizations are increasingly multi-cloud. A bank might run its core banking on Azure while operating its data analytics workloads on AWS. A software house might have clients on three different platforms. Cloud security engineers who are deeply expert in one platform but have no competency in others are limited in the roles they can take. Build depth on one platform first — but build breadth across at least two.

Not communicating risk in business terms. Cloud security professionals who can only speak to a technical audience hit a career ceiling at the senior engineer level. Advancement to architect and leadership roles requires the ability to explain security risk in terms that a CFO, a compliance officer, or a bank’s board understands. A misconfigured S3 bucket is not just a technical finding — it’s a regulatory exposure, a reputational risk, and a quantifiable financial liability. Learning to communicate in those terms is what separates senior engineers from architects.

Building the Skills: Where to Start in Pakistan

Cloud security skills are built through a combination of structured training, hands-on lab work, certification preparation, and real-world project exposure. The challenge for most professionals in Pakistan is finding a structured path that integrates cloud infrastructure fundamentals and security specialization, rather than treating them as separate disciplines.

The most common mistake in self-directed cloud security learning is starting with security before building genuine cloud depth. Understanding AWS Security Hub requires first understanding how AWS organizes accounts, how VPCs work, how IAM evaluates policies, and how CloudTrail captures events. The security layer sits on top of a cloud infrastructure foundation — and trying to learn the security layer without the foundation produces a fragile knowledge base that doesn’t hold up under real-world pressure.

Structured training programmes that integrate cloud infrastructure and security — covering IAM design, network security architecture, encryption management, compliance frameworks, and hands-on labs in real cloud environments — compress the learning curve significantly compared to self-directed study that sequences these topics inefficiently.

Sherdil IT Academy’s multi-cloud programme covers AWS, Azure, GCP, and Alibaba Cloud in an integrated framework that includes security fundamentals across all platforms. With 7,000+ professionals trained and direct connections to hiring companies across Pakistan’s banking, telecom, and software house sectors, the programme is built around what the market actually needs from cloud security professionals in 2026. Details are at academy.sherdil.org

The Gap Is Real. The Opportunity Is Now.

Cloud security in Pakistan in 2026 is a career that offers something rare: a genuine mismatch between supply and demand that works entirely in the skilled professional’s favour. Banks that cannot fill compliance roles. Software houses that cannot meet client security requirements. Fintechs that cannot build a secure payment infrastructure fast enough. Government agencies that cannot secure national cloud migrations.

This isn’t a niche that’s about to be commoditized. The regulatory environment is getting more demanding, not less. The cloud infrastructure being deployed today will need security expertise to maintain and evolve for years. The compliance frameworks that are new and unfamiliar today will need practitioners who understand them deeply to conduct audits, manage programmes, and advise organizations at scale.

The professionals who build genuine cloud security competency now — through real hands-on experience, the right certifications for their target sector, and the ability to communicate security risk in business terms — are positioning themselves at the front of a demand wave that has years left to run.

Pakistan’s most underserved IT niche is also its most rewarding. The question is whether you’ll be one of the professionals who fill it.

About Sherdil IT Academy

Sherdil IT Academy is Pakistan’s pioneer in multi-cloud and DevOps training, based in Karachi. With 7,000+ professionals trained across 22 countries, a 95% certification success rate, and Pakistan’s only authorized Alibaba Cloud and exclusive GCP partnership, Sherdil IT Academy offers the most comprehensive cloud and DevOps training ecosystem in the country. Visit academy.sherdil.org or call +92 331 8367709.