Windows Server, AD DS, DNS, DHCP, GPO, Linux, VMware vSphere/vCenter, Nutanix and enterprise backup environments.
INFRASTRUCTURE • CLOUD • CYBERSECURITY
Building infrastructure that is secure, resilient & ready to scale.
Infrastructure and defensive cybersecurity professional focused on Windows & Linux administration, network security, cloud platforms, virtualization, monitoring, backup, automation and CIS-aligned hardening.
InfrastructureWindows • Linux • VMware
SecurityFortiGate • Sophos • SIEM
CloudAWS • Azure • OCI
INFRASTRUCTURE & SECURITY
Engineer / Consultant
01Secure by designHardening • segmentation • policy review
02Automate the repeatablePowerShell • Python • Ansible
01 / PROFILE
Technical depth with an operations mindset.
I work across the layers that keep business technology available and secure — from identity and operating systems to firewalls, virtualization, cloud, monitoring, backup and security operations.
Firewall policy review, IPS/IDS, DoS controls, segmentation, endpoint security, vulnerability remediation, CIS benchmark assessment and SIEM visibility.
AWS, Azure and OCI with PowerShell, Bash, Python, Ansible, Terraform and Docker for repeatable infrastructure operations.
Monitoring, capacity planning, patching, backup validation, restore readiness and incident troubleshooting for production environments.
02 / EXPERTISE
What I can deliver.
Practical services designed around security, availability, maintainability and measurable operational improvement.
01
Network Security
Design and review FortiGate and Sophos security policies, NAT/DNAT, VPN, IPS, application control, web/DNS filtering, DoS protection, spoof prevention and segmentation.
02
Windows & Identity
Active Directory, DNS, DHCP, GPO, Windows Server hardening, patch management, authentication controls, service troubleshooting and enterprise administration.
03
Linux Engineering
Linux server administration, SSH hardening, service management, firewalling, storage, logs, package management, scripting and production troubleshooting.
04
Cloud Infrastructure
Secure cloud foundations, compute, storage, network controls, IAM principles, backup strategy, cost-aware architecture and operational readiness across major cloud platforms.
05
Virtualization & Backup
VMware vSphere/vCenter, Nutanix, Veeam Backup & Replication, capacity planning, snapshot awareness, recovery workflows and disaster-recovery readiness.
06
Security Operations
Endpoint security, SIEM onboarding, alert investigation, vulnerability management, configuration audits and evidence-driven remediation aligned with security benchmarks.
04 / TECHNOLOGY STACK
A broad stack, connected by one objective.
Operating Systems
Windows Server · Windows 10/11 · RHEL · AlmaLinux · Ubuntu
Networking & Security
FortiGate · Sophos Firewall · VPN · IPS · DNS Security · DLP · Endpoint Security
Virtualization
VMware ESXi · vCenter · Horizon · Nutanix
Cloud
AWS · Microsoft Azure · Oracle Cloud Infrastructure
Automation
PowerShell · Python · Bash · Ansible · Terraform
Monitoring & Backup
Zabbix · Veeam · vROps · ManageEngine · OpManager
Security Platforms
Kaspersky · SentinelOne · Trend Micro · Morphisec · Wazuh · Nessus
DevOps & Containers
Docker · Git · CI/CD concepts · Infrastructure as Code
03 / TECHNICAL SKILLS
Technical capability across the full infrastructure stack.
A practical skill set spanning enterprise servers, virtualization, cloud, network security, monitoring, endpoint protection, automation and day-to-day infrastructure operations.
01
Server & Infrastructure Management
- Windows Server Administration
- Linux Administration
- Active Directory (ADDS)
- DNS & DHCP Configuration
- Microsoft Exchange Server
- Server Upgrades & Patch Management
- Multi-site Infrastructure Management
- Data Center Operations
02
Virtualization & Cloud
- VMware vSphere & vCenter
- VMware Horizon (VDI)
- Nutanix Administration
- OCI Cloud Server Management
- Huawei Cloud Server Management
03
Network & Security
- Firewall Management — FortiGate, Sophos, pfSense
- Network Configuration & Device Installation
- VPN Configuration
- Intrusion Detection Systems
- Barracuda Email Security
- Vulnerability Assessment & VAPT Remediation
- IOC Blocking
- Phishing Assessment
- Deception Technology (Dejavu)
04
Monitoring & Backup
- Zabbix Monitoring
- VMware vROps Monitoring
- OP Manager Administration
- Backup & Recovery Management
- Security Monitoring
05
Endpoint & Antivirus Management
- SentinelOne
- Kaspersky
- Trend Micro
- Morphisec
06
Automation & Scripting
- PowerShell
- Ansible — Windows & Linux
- Server Configuration Automation
07
Infrastructure Operations
- Hardware Management
- Storage Management
- System & Infrastructure Updates
- Configuration Management
- Compliance & Security Standards
08
Professional Skills
- Technical Troubleshooting
- Complex Problem Solving
- Documentation & Reporting
- Project Support & Execution
- Operational Analysis
- Team Coordination
WINDOWSLINUXADDSVMWARENUTANIX
FORTIGATESOPHOSPFSENSEZABBIXVROPS
SENTINELONEKASPERSKYPOWERSHELLANSIBLE
05 / SELECTED PROJECTS
Projects that show how I think.
Examples of the type of consulting and engineering work this portfolio is built to represent.
01
SECURITY AUDIT
FortiGate / Sophos CIS Configuration Review
Audit firewall configurations against CIS-style controls, identify failed controls, map observations to risk, validate CLI evidence and produce remediation-ready findings.
- Policy review and least privilege
- IPS / application / DNS controls
- Local-in, DoS and spoof protection
- Logging, administration and hardening
AUDIT
→
→
02
AUTOMATION
Windows Patch & Compliance Automation
PowerShell-driven inventory and validation for patch status, CPU, memory, disk capacity, hostname, IP configuration and remediation readiness.
03
MONITORING
Zabbix Enterprise Monitoring
Build monitoring coverage for infrastructure services, capacity, availability and operational health with actionable alerting and dashboards.
04
CLOUD & DR
Cloud Backup & Recovery Architecture
Design cost-conscious backup patterns for cloud workloads with retention, recovery objectives, restore testing and operational documentation.
05
SIEM / SOC
Wazuh Security Visibility
Centralize endpoint and server telemetry, establish useful detections, normalize operational alerts and improve investigation visibility.
06
DEVOPS
Infrastructure Automation with Ansible
Convert repetitive administration into reusable playbooks for software deployment, service configuration, security baselines and fleet operations.
06 / EDUCATION & CREDENTIALS
Academic foundation.
Continuous technical learning.
B.Sc.
COMPUTER SCIENCE
Bachelor of Science
Sardar Patel University
Principal subject: Computer Science · Awarded in 2020
07 / DELIVERY METHOD
From problem statement to production-ready outcome.
01Discover
Understand architecture, dependencies, constraints and the business impact of the problem.
02Assess
Collect evidence, inspect configuration, identify technical debt and prioritize risks.
03Engineer
Implement secure, maintainable changes with rollback awareness and documentation.
04Validate
Test functionality, security controls, monitoring and recovery paths before handover.
08 / CLIENT ENGAGEMENT TIERS
Choose the level of infrastructure support your environment needs.
Flexible engagement models designed for organizations that need reliable infrastructure operations, security hardening, automation, or end-to-end technical execution.
FOUNDATION01
Infrastructure Support
Best for small and mid-sized environments that need structured administration, troubleshooting and ongoing operational support.
- Windows & Linux server administration
- ADDS, DNS & DHCP support
- VMware / Nutanix administration
- Patch and upgrade planning
- Monitoring with Zabbix / vROps
- Backup & recovery assistance
- Technical documentation & reporting
PROTECTION02
Security & Hardening
For organizations looking to improve firewall security, endpoint protection, vulnerability posture and compliance readiness.
- FortiGate / Sophos / pfSense review
- Firewall policy & rule audit
- IPS / IDS and VPN review
- VAPT remediation support
- IOC blocking & threat response
- Endpoint security administration
- CIS-oriented configuration reviews
TRANSFORMATION03
Cloud, Automation & Projects
For larger initiatives requiring engineering, migration, automation, multi-site delivery and repeatable infrastructure operations.
- OCI / Huawei Cloud server operations
- PowerShell automation
- Ansible for Windows & Linux
- Server build & configuration automation
- VMware / VDI project support
- Multi-site infrastructure execution
- Migration, documentation & handover
AVAILABLE FOR PROJECTS
Have an infrastructure or security challenge?
Let's discuss your environment, the problem you need solved and the outcome you want to achieve.
kyadaharshil9790@gmail.com