Cloud and Identity Management: Managed Microsoft Identity Servers on Azure Cloud and on-premises Domain Controllers; administered O365 email services on Azure.Virtualization and Cloud Infrastructure: Maintained VMware Cloud Infrastructure utilizing VMware Cloud Foundation.Security Infrastructure: Oversaw on-premises security appliances, including firewalls, SIEM, IPS, web/email security, and antivirus. Managed encryption and key management processes to safeguard data at rest.Network Design and Administration:Designed, managed, and administered university-wide network infrastructure, from core to access layers, including data center setup, optical fiber backbone, and end-user connectivity.Security Compliance and Risk Management: Configured security devices following change management protocols, performed risk assessments, managed incident response, and disaster recovery processes. Conducted regular audits and ensured compliance with industry standards.Security Advisory and Policy Development:Advised senior management on security risk classifications; developed and implemented policies, processes, and procedures for securing information systems.Student Information Systems (SIS) and IT Ticketing:Managed the SIS based on PeopleSoft with Oracle Database HA Cluster and handled IT ticketing through ServiceNow.Secure Access and Traffic Management:Configured two-factor authentication and VPN (Cisco Duo & AnyConnect), managed traffic and load balancing with F5 solutions.Containerized Applications Management:Maintained Kubernetes clusters across development and production environments for RIT campuses globally (US, Europe, UAE), ensuring high availability and scalability. Optimized compute resource allocation and achieved high availability by deploying applications across multiple nodes in clusters.Academic IT Operations Support: Ensured seamless day-to-day IT operations for RIT Dubai, including supporting the Cloud Remote Laboratory Emulation System (RLES).

As a key member of the computing (IT) team at the Rochester Institute of Technology (RIT) Dubai Campus, I was responsible for a range of IT Infrastructure Services:Microsoft Identity Servers (MS Azure Cloud)O365 Email Services (MS Azure Cloud)VMware Cloud Infrastructure (VMware vAutomation)On-premises Domain ControllersDesign, Management, and Administration of University Campus Network Infrastructure (Data Center Design, Optical Fiber Cable Backbone, and End User Connectivity)Google GSuite for Students email services and Drive sharingMyCourses (Brightspace Customized Instance) for LMSStudent Information System (SIS) (PeopleSoft with Oracle Database HA Cluster)ITS Ticketing System (ServiceNow)Two-Factor Authentication and VPN Access (Cisco Duo & AnyConnect)Infrastructure Traffic Management and Load Balancers (F5)Online Classes and Meetings using Zoom with integration of on-premises authenticated access to meetings and recordings.Academic IT Operations:Ensured seamless day-to-day IT operations for the RIT-Dubai Information Systems.Supported the university Cloud RLES (Remote Laboratory Emulation System).Kubernetes Utilization:Containerized Applications: Maintained consistency across development and production environments.Resource Management: Optimized compute resource allocation.High Availability and Scalability: Deployed applications across multiple nodes in Kubernetes clusters across five zones and regions (RIT Main Campus New York USA, RIT Croatia/Kosovo, RIT Dubai, RIT Weihai, Shandong Campus China), ensuring high availability and scalability based on demand.Achievements:Led the deployment and configuration of E5 Microsoft Intune VDI computers for an ICT-funded lab, including Cisco IP Phones and Cisco Webex conferencing solutions.Collaborated on a GPU-based research cluster for compute-intensive research and AI model simulation.Revamped the Cisco NetAcad program from CCNA to CCNP, adding advanced network and cybersecurity curriculum.

As the technical lead overseeing the IT infrastructure of a university, my responsibilities encompass managing the university's Data Center, supervising Contracts, SLAs, and administering both private and public cloud servers. I ensure the security and functionality of diverse components, including DBMS, Business Intelligence, Campus Network (> 22,000 Nodes), and overall IT operations. My role involves maintaining robust controls for monitoring, alerting, vulnerability assessments, and compliance with university objectives across Microsoft, Linux, and UNIX platforms, core network, firewalls, web security, endpoint solutions, and remote access mechanisms.Microsoft Azure Entra ID and Intune VDI:• Implemented and configured a Microsoft identity server on MS Azure.• Enabled synchronization with on-prem Active Directory for centralized authentication and Single Sign-On (SSO).• Facilitated secure access to various on-campus IT services and web apps.Linux Virtualization Cluster:• Deployed a Linux-based Private Cloud virtualization cluster using the KVM platform.• Included High Availability, a 10G backbone network, and Ceph storage for hosting VMs, LXC/Dockers containers, ensuring fault tolerance.Centralized Odoo-based ERP Framework:• Migrated the Oracle-based CMS to a centralized Odoo framework.• Encompassed Academic and Student Lifecycle, Exams, Finance, Payroll, HR, Procurement, Transport, Inventory, and other key tasks.• Provided complete visibility, data analytics, and performance metrics through Business Intelligence Dashboards.Cisco WLAN:• Designed, deployed, the Cisco Wireless N/W with blanket coverage and EduRoam services.• Integrated Cisco 9800 Series WLC, 575 indoor access points, and 15 outdoor access points with Wi-Fi 6 support.• Deployed and configured a centralized web hosting Linux cluster for various university web applications.• Deployed Microsoft O365 solution integrated with the University LMS for virtual classrooms using Microsoft Teams.

Technical Lead for university IT infrastructure to implement, secure and administer university network, Information Systems, DBMS & IT operations. Maintaining controls for monitoring and alerting, application and system vulnerability assessment, MS and UNIX platform servers, core network, information systems with associated applications, firewalls, web security, endpoint solutions, remote access and other mechanisms to compliance with university objectives.Monitor the university networks for security breaches and investigate a violation when occurs. Conduct penetration testing to look for vulnerabilities before they can be exploited. Performs gap analysis between university’s current practices and approve standards. Deployed & supervised IBM high-end power machines, AIX system administration, oracle RAC with frontend PeopleSoft applications like Campus Management System (CMS) for faculty, staff and students record management. Configure, maintain and supervise IBM SAN with backup schedules on a tape library by using Tivoli backup solution. Deployed and administrating RedHat High-Performance Computing clusters of 60 nodes (4 Clusters) used by our researchers and postgraduate students for their academic research work.Analyzes and evaluates Information System operations and provides technical direction and recommendations to improve utilization. Acts as a liaison between internal and external user communities. Conducts training and directs the efforts of end users and less experienced staff. Design and create user manuals, training kits for in-house applications and get approved SOP for daily based IT operations of Information Systems.Works as a technical lead, collaborate and coordinate with different vendors regarding IT equipment, software technologies and finalize feasible IT solutions as per university management requirements. Worked in national level projects of (HEC) like CMS, PERN-1, PERN-2, EDU-ROAM and SMART Universities etc.

Network and System Administration and handling of operation of terminal servers, firewalls, security systems, routers, switches, wireless connections as per ISP IT Management requirements. Squid Server with transparent Proxy and implementing Access List to provide the internet access to Corp LAN & different properties like Marriott Hotel, dialup users etc. DNS Server Configuration in Linux for domain DNS ns.net21pk.com for domain net21pk.com Domain Controller, Additional Domain Controller for user management Provide the internet facility using Microsoft ISA / Squid server with Bandwidth Manager Software to control the internet usage, MRTG configuration & GFI Web Monitor for bandwidth monitoring and web logging respectively. Configuration of Linux Sendmail Server mail.hashoogroup.com to provide corporate email facility to Hashoo Group and its different properties. Configuring the MS Exchange 2003 and McAfee Group Shield as a mail antivirus for PC Hotel Peshawar staff to provide the mail facility. Microsoft Windows Software Update Services (WSUS) for corporate office LAN to automatically installation of Security Patches, Service Packs etc Responsible for application server like File Server (with proper permission for internal organization file sharing within various departments), Print server etc. Management of Router , Cisco Catalyst Switches and LinkSys WiFi Access Points for Internet connectivity that contains routing, troubleshooting WAN/LAN connectivity etc. Configure Switches with VLANS and inter-switch communication (for more security with in office environment). Network Deployment supervision in different properties of the Hashoo Group (From Survey to Final Testing). Collaborate and co-ordinate design of network topology designs and schemes at project sites with IT Manager and IT personnel.

Design, implement & manage 120 nodes LAN having more than 1000 clients in Army Medical College, Rawalpindi. Installation and Configuration of Domain Controller MS 2003, Additional Domain Controller, Proxy server, Firewall (Cisco ACLs, IP Tables), Antivirus Server and Application Server. Connect to the WAN of NUST constituent Colleges/Institutes under Network Enhancement and up gradation project of Higher Education Commission (HEC). Maintained and upgraded the network as per requirement of higher management. Design, implement & manage Network for CPL Military Hospital Rawalpindi. Updating and managing 120 nodes, having more than 800 hundred clients in a campus wide network. Serve as the department point of contact for technology support & services. Delivered excellent customer services, solutions and gained respect of client management and end users.