Deployed and configured a GitLab server on Ubuntu 22.04 LTS, creating multiple projects and providing developers a guide to set up Git clients and push their code in their  respective project branches.
Implemented a CI/CD pipeline using the GitLab CI tool, automating build, test, and deployment processes, and configured a dedicated GitLab runner.
Integrated the pipeline with Docker and Kubernetes for seamless application deployment.
Configured automated testing and code quality checks to uphold high software delivery standards.
Deployed and configured internal container registry to maintain customized container images locally.
Deployed Kubernetes cluster using Kube Adm with one control plane and two worker nodes.
Configured networking components (Calico/Flannel for pod networking and ingress controllers for external access).
Integrated Helm, Prometheus, and Grafana for improved cluster management and observability.
Containerized a PHP/MySQL web application and deployed it using Helm charts in the Kubernetes cluster, automating the process with the GitLab CI/CD pipeline.  

Configured and managed Opnsense Networks' threat prevention, including URL filtering, IDS/IPS (Snort), Stateful Packet Inspection (SPI), and Deep Packet Inspection (DPI, Open-App-ID) for malware protection.
Deploy and manage Azure resources, such as virtual machines (VMs), virtual networks, storage accounts, and application services.
Configure and monitor Azure Virtual Networks (VNets), subnets, and network security groups (NSGs).
Implement and manage resource groups to organize and control Azure resources.
Manage Azure subscriptions, tagging, and billing structures.
Performed firewall upgrades and applied security patches, ensuring up-to-date threat protection.
Migrated network traffic from Sophos to Opnsense, optimizing configurations for seamless performance.
Developed and managed security policies, objects, and high-availability configurations.
Established IPsec site-to-site tunnels between Sophos and Opnsense and opened OpenVPN for secure remote user VPN access.
Configured Opnsense to utilize dual WAN for redundancy and implemented Squid forward proxy for web caching, enhancing reliability and throughput.
Led migration of on-premises application servers to Azure cloud VMs and transitioned user domains to Azure AD.
Demonstrated advanced Linux skills by deploying Docker Swarm with Caprover Server, migrating WordPress sites from Raidbox to Caprover using the WordPress All-in-One plugin.
I configured MFP printers for scan-to-email and scan-to-file functionality, troubleshooting and resolving related issues.

Successfully deployed Charmed OpenStack using MAAS and Juju, configuring core components—Nova, Neutron, Glance, and Keystone—for a private cloud environment.
Installed and managed VMware ESXi 7 on 8 physical nodes, creating a scalable, high-performance, and reliable virtual infrastructure.
Configured DRS (Distributed Resource Scheduler) and HA (High Availability) to ensure balanced resource allocation and minimize downtime across the ESXi cluster.
Managed and scaled an 8-node ESXi and vSAN cluster, integrating shared compute and storage resources to support dynamic scaling based on workload demands.
Integrated vSAN with data protection solutions, ensuring secure and reliable data backups and facilitating business continuity.
Configured snapshot-based backup policies on vSAN to protect virtual machines, maintaining data integrity across the ESXi cluster.
Optimized vSAN performance by tuning cache and storage policies, enhancing data locality, and reducing latency across the virtualized environment.
Deployed and configured a Samba file server for user data backups and set up iSCSI and NFS shared network storage to attach remote data stores in VMware ESXi, supporting high VM availability.
Managed USC's DR site using VMware vCloud Director at PTCL Data Center (DR Site, Lahore), deploying VMs with LVM-based dynamic partitioning for Ubuntu.
Assessed virtualization platforms—Xen XCP-ng, Citrix Hypervisor, Oracle VM Server, Red Hat Virtualization, and Proxmox 7—in a test environment for performance, scalability, and reliability.
Configured Veeam for guest-level VMware backups, ensuring comprehensive data protection and quick recovery capabilities.

Configured and managed Oracle Linux operating systems, ensuring the integrity and reliability of network components and enhancing system performance.
Upgraded and patched OS, microcode, and firmware, ensuring the latest security updates and enhancements were implemented.
Deploy the Pfsense Virtual Firewall Appliance and Configure the OVPN server on the Firewall to manage Port forwarding/DNAT and allow Remote access for the Oracle EBS application.
Deploy Synology NAS Storage hardware appliance for persistent data storage of all users' data backups centrally. Integrate and mount external iSCSI (Block storage) across cluster nodes. Periodically, take incremental snapshots of the whole VM and restore the VM in case of any failure.
Deployed VMware ESXi 7.0 via iLO BMC and configured a three-node HA cluster.
Implemented VMware vCenter7 Virtual Appliance for centralized management of all the ESXi hosts, enabling real-time performance monitoring and automated failover.
Ensured high availability and disaster recovery readiness through effective storage and network configuration.
Conducted in-depth troubleshooting to identify and resolve issues in the data center environment, minimizing downtime and optimizing system performance.

Managed Windows Server OS, Active Directory, Group Policy, DNS, DHCP, and related technologies to ensure smooth and secure network operations.
Troubleshoot and fix various network printer-related issues and Upgrade graphics-based servers to improve their performance while using the Photoshop application for design.
Set up firewall policies, rules, and zones based on organizational security requirements.
Implement an Intrusion Prevention System (IPS) and URL filtering to block malicious websites and activities.
Monitor firewall performance to ensure minimal latency and optimal throughput.
Deploy content filtering, malware protection, and threat prevention modules.
Implemented a Samba Linux-based File Server for seamless data sharing between Windows and Linux servers.
Develop and maintain security policies, configurations, and rules for Barracuda and Kerio firewalls.
Create and maintain backup configurations for firewalls to ensure quick recovery during system failure.
Keep the firmware and software up to date for enhanced performance and security

Design and implement virtualized environments using Microsoft Hyper-V on clustered environments.
Set up and configure Hyper-V hosts, virtual switches, and virtual machines (VMs) to meet business requirements.
Configure and manage virtual networking, storage, and failover clustering for high availability.
Negotiated contracts and managed vendor relationships, ensuring high-quality products and services while optimizing costs.
Configured MS Active Directory and MS Exchange Server 2013 on Windows Server 2012, managing Group Policies, user access, and print/File server sharing.
Deployed and configured SCCM/SCOM on Windows Server 2012 for endpoint protection, patch management, OS deployments, and software distribution.
Maintain a comprehensive inventory of server and end-user computer hardware and spare parts.
Perform root-cause analysis of recurring or critical hardware failures and recommend solutions.
Dispose of obsolete or non-functional hardware following eco-friendly and data-secure methods.

Managed and supported Linux-based machines for an infrastructure of high-end servers and over 500 workstations across 40 sites nationwide.
Provided user support for OpenOffice and IBM Lotus Symphony, working exclusively with Linux CLI.
Configured and installed PFsense on Unix FreeBSD OS and tested site-to-site VPN using OpenVPN protocol.
Installed and configured Samba Server for Linux-to-Windows printer sharing and created Ubuntu OS master image templates using Clonezilla for deployment.
Troubleshoot dual-boot machines with Windows/Linux OS.
Designed and audited IT security for servers and systems, while delivering strong documentation and system diagrams.

Configure and Deploy Windows roles and features like DHCP, DNS, IIS, and File Services. Configure and troubleshoot DNS and DHCP services and manage file and print services.
Perform routine checks to monitor system performance, uptime, and health.
Apply updates, patches, and hotfixes to servers to ensure security and stability.
Maintain logs of server performance and address any system alerts.
Performed hardware repairs, upgrades, and replacements to maintain optimal system performance.
Assisted with software installations, updates, and compatibility issues to ensure smooth operations and user satisfaction.
Resolved network connectivity issues (LAN, Wi-Fi, internet) to ensure uninterrupted access for users.
Diagnose and troubleshoot hardware, OS, and application performance issues.
Optimize disk space usage and manage server resources efficiently.

Managed backup and recovery for all laptops and desktops in the environment.
Provided IT support for local and remote Warid Telecom franchises, contact centers, business centers, regional offices, and GSM engineering departments, resolving issues via phone or onsite.
Configured and troubleshot TCP/IP networks (LAN/WAN/WLAN) and hardware for servers, desktops, laptops, and network printers.
Logged and tracked incidents via a centralized help desk, supporting CSR on JAVA-based TABS software.
Installed and configured IP phones (CTIOS and Global software) and optimized Outlook email client configurations, including SMTP/POP3 protocols, and .pst file backup/restoration. Developed and implemented policies to enhance technical support services.