~/Work
Experience
IT Infrastructure Engineer
FEB 2025 — PRESENT- Translated business specifications into functional infrastructure designs, collaborating with software developers, DevOps, and cloud architects to ensure smooth, secure distributed hardware implementations.
- Provision and maintain multi-cloud and on-premises environments across Microsoft Azure, AWS, and on-prem datacenters, configuring VPCs, subnets, route tables, firewalls, and VPNs to ensure high availability and network segmentation.
- Execute physical datacenter operations, including rack installations, hardware provisioning, network cabling, and component-level diagnosis and replacement for high-density enterprise servers and switches.
- Deploy, configure, and patch enterprise Windows Server and Linux environments (RHEL, CentOS, Ubuntu), hardening operating systems and automating core service roles across bare-metal and cloud infrastructure.
- Provision, configure, and isolate dedicated computing environments for enterprise AI applications, implementing strict compute-hardening and access controls to protect sensitive model data and endpoints.
- Architected, provisioned, and optimized enterprise compute clusters powered by NVIDIA H100 and H200 GPU servers, deploying specialized driver stacks, container runtimes, and host virtualization to accelerate model training and high-throughput inference workloads.
- Designed and deployed resilient enterprise network topologies, configuring multi-tiered VLANs, ACLs, inter-VLAN routing, and firewall policies across physical core/access switches and cloud VPCs to enforce network isolation and prevent unauthorized lateral movement.
- Monitor server fleets in coordination with the SOC and EDR platforms, executing rapid vulnerability remediation, patch management, and security controls to maintain ISO 27001 regulatory audit readiness.
- Provisioned, hardened, and maintained heterogeneous enterprise environments across Windows Server and Linux distributions, configuring core server roles and executing proactive maintenance to uphold high system availability.
- Architecture Translation & Operational Delivery: Collaborated across multidisciplinary engineering pods (spanning database administrators, developers, and security analysts) to translate high-level architectural designs into scalable, compliant hybrid cloud infrastructure under strict ITIL governance.
- Collaborated with SecOps, IAM, and network engineering teams to enforce enterprise security baselines.
Senior System Engineer
APR 2023 — JAN 2025- Administered CrowdStrike Falcon EDR across 35,000+ endpoints, overseeing threat detection, policy enforcement, sensor health, and rapid incident response to secure global operations.
- Deployed and troubleshot Zscaler Zero Trust services (ZIA and ZPA), configuring secure application segmentation and user tunnels to enforce least-privilege remote access.
- Provisioned and managed hybrid infrastructure across Microsoft Azure and on-premises environments (VMware ESXi, Hyper-V), deploying virtual machines and containerized workloads (Docker, LXC, Azure Container Instances).
- Configured, tested, and maintained critical Windows Server roles and Linux services across bare-metal and virtual platforms.
- Administered identity lifecycles across hybrid Active Directory and Azure AD (Entra ID), managing authentication protocols, SaaS application domain integrations, and compliance policies via Microsoft Intune.
- Enterprise-wide migration from Zscaler to Netskope across 35,000+ global endpoints, deploying high-availability NPA publisher connectors to establish seamless ZTNA to internal applications.
- Configured Netskope DLP policies to prevent unauthorized data exfiltration and ensure regulatory compliance.
- Led technical audit-readiness workflows for ISO 27001 and external audits, participating in formal CAB reviews and executing thorough RCA to remediate recurring system incidents.
- Partnered with vendors to evaluate emerging technologies, conduct technical PoCs, and execute hardware and network redesign initiatives across facilities.
- Centralized and maintained mission-critical core network services globally including DHCP, WDS, Print Services, and IPAM, ensuring uniform standards.
- Managed enterprise video conferencing infrastructure, configuring and supporting Polycom and Cisco VC hardware, codecs, and software across boardroom environments.
Systems Engineer
SEP 2021 — MAR 2023- Directed daily operations for a multi-tiered support team (L0/L1), establishing standardized troubleshooting SOPs and training programs to elevate first-contact resolution rates.
- Served as the dedicated technical advisor and support liaison to CEO, CFO, Directors, other C-suite ensuring 100% data confidentiality and zero-downtime executive workflows.
- Administered enterprise infrastructure across headquarters, managing DHCP, Print Servers, and SolarWinds IPAM to uphold strict network reliability and high-availability service agreements.
- Provided multi-region Tier-3 infrastructure support across distributed business units (India HQ, Middle East, and China), ensuring uniform system compliance and SLA adherence.
- Maintained and optimized dedicated application servers running enterprise Robotic Process Automation (RPA) bots, coordinating across DevOps and security teams for patch management and deployment safety.
- Coordinated with engineering teams to provision, configure, and harden host servers (including IIS and RPA platforms), ensuring seamless resource deployment and zero security regressions during application rollouts.
- Maintained enterprise storage environments utilizing NetApp ONTAP and Dell EMC Isilon alongside hosting mission-critical internal web applications on Microsoft IIS.
- Directed full technical production, AV infrastructure, and run-of-show logistics for 40–50 high-stakes executive town halls and board meetings annually without broadcast interruption.
- Automated recurring system tasks, configurations, and maintenance routines using custom PowerShell and Batch scripts to eliminate manual overhead.
- Configured, tested, and commissioned integrated video conferencing rooms, authoring technical deployment guides for operational handoff.
- Enforced enterprise security baselines by administering McAfee Endpoint Security and configuring DLP policies to prevent unauthorized data exfiltration.