Shafiq Ullah

Administered Microsoft 365 & Google Workspace environments including Exchange Online, Azure AD, SharePoint, Teams, and OneDrive. Implemented, managed, and secured Active Directory infrastructure DNS/DHCP, and NTFS access control. Oversaw domain registration, renewal, SSL setup, and uptime monitoring using DNS management tools Installed and supported Windows Server 2012/2016/2019 – domain controller, file server, DHCP, WSUS. Configured QNAP NAS systems with RAID, snapshot, and offsite backup sync for file security and recovery. Setup and optimized Outlook including PST migration, mailbox rules, and signature automation for onboarding. Network & Security Operations Installed and maintained UTM firewalls with policies, IPS/IDS, SSL VPN, and traffic monitoring. Configured VLANs, static/dynamic routing, DHCP relay, and port security across Linksys/TP-Link switches. Established secure site-to-site VPN tunnels and remote access using IPsec/OpenVPN protocols. Ensured continuous network availability, failover, and bandwidth management across LAN/WAN infrastructure. Technical Support & Operations Delivered responsive Level 1 & 2 IT support via remote tools (Anydesk, TeamViewer) . Installed and supported ZKTeco biometric access systems and DVR/NVR-based Hikvision & CCTV systems. Managed IT procurement, vendor coordination, AMC tracking, asset tagging, and equipment lifecycle reporting. Trained end users, wrote knowledge base documentation, and created SOPs for repetitive IT procedures.

Monitored and triaged security alerts and events using SIEM platforms (Splunk, ELK, QRadar) to detect potential cyber threats and suspicious activities. Conducted threat analysis, incident investigation, and malware detection related to phishing campaigns, intrusion attempts, and policy violations. Performed log correlation, event analysis, and alert prioritization using MITRE ATT&CK framework and IOC indicators. Collaborated with senior SOC analysts to fine-tune correlation rules, optimize detection use cases, and reduce false positives by 15%. Executed threat hunting tasks and contributed to incident response playbooks for quick escalation and containment. Conducted daily health checks for firewalls, IDS/IPS, and EDR solutions (CrowdStrike, Defender for Endpoint) to ensure operational readiness.

Monitored LAN/WAN infrastructure, VPN tunnels, and network security devices (routers, firewalls, switches) to ensure continuous uptime. Utilized network monitoring tools (SNMP, SolarWinds, PRTG) for real-time alerting and incident tracking. Managed VPN access controls, supporting secure remote connectivity and user authentication. Diagnosed and resolved network connectivity issues, performed root cause analysis (RCA), and implemented preventive measures. Logged and tracked incidents through a ticketing system, escalating complex network faults to L3 engineers or vendors as necessary. Supported configuration management, firmware updates, and firewall policy tuning to improve overall network security posture. Collaborated with cross-functional teams to improve SLA compliance and document incident response procedures.