0%
// reconfiguring interface
shatheitguy.in  ·  Sharqan Ahamed

Sharqan Ahamed

Senior IT Infrastructure Engineer and Cloud & Cybersecurity Strategist

visitor@shatheitguy:~$ 
PROFILE ACTIVE
1
Recruiter & HR
I'm hiring &
not deeply technical

A clean, professional CV — achievements, experience, and the business impact I deliver. No jargon, just results.

View Professional CV  →
SYSTEMS ONLINE
2
Developer & IT Pro
I'm technical &
I speak the stack

Full technical portfolio — infrastructure architecture, homelab projects, tools, and all the nerdy details.

Enter Tech Portfolio  →
press 1 or 2  ·  or click a card

Sharqan Ahamed

Senior IT Infrastructure Engineer & Cloud / Cybersecurity Strategist

Profile

Senior IT Infrastructure Engineer and Cloud & Cybersecurity Strategist with 7+ years building, securing and scaling enterprise-grade environments across the UAE and India. Proven at leading complex infrastructure projects end-to-end, hardening networks against modern threats and translating technical strategy into business outcomes — currently running mission-critical systems at Al Wasl Sports Club, including stadium networks serving 10,000+ concurrent users, while architecting a self-hosted AI infrastructure practice across five managed sites.

Key Achievements

10,000+Concurrent stadium Wi-Fi users served per match, zero unplanned outages
99.98%Uptime across mission-critical infrastructure and networks
5 sitesMulti-site environments kept replicated and in sync
30%Cloud spend reduced through resource optimisation

Work Experience

Senior IT Infrastructure Engineer
Present
Al Wasl Sports Club · Dubai, UAE
  • Designed high-density Wi-Fi for stadium events serving 10,000+ concurrent users per match with zero unplanned outages.
  • Implemented FortiGate / MikroTik firewalls and a Zero-Trust remote-access architecture, retiring legacy VPN risk.
  • Achieved 99.98% uptime via redundant systems, proactive monitoring and automated failover.
  • Built a self-hosted AI stack on DGX Spark (Ollama / vLLM) with an autonomous agent for monitoring and remediation.
  • Automated onboarding, alerting and incident response with n8n workflows across five managed sites.
  • Standardised off-site TrueNAS replication and cold-storage disaster recovery with tested runbooks.
IT Infrastructure Engineer
2020 – 2022
Joseph Group · Jebel Ali, UAE
  • Designed and maintained segmented enterprise networks across multiple sites with Cisco / HP switching.
  • Achieved 100% backup compliance across 200+ endpoints and cut cloud spend 30% through resource optimisation.
  • Standardised backup and DR runbooks, tightening recovery-time objectives across the estate.
IT Engineer
2018 – 2020
Opti Network Ltd & Future Group · Bengaluru, India
  • Delivered end-user support, endpoint protection and system troubleshooting across enterprise environments.
  • Configured wireless networks, VoIP and remote access supporting daily operations.

Selected Projects

Open Source · AGPL
IT-Vault — Asset & Helpdesk Platform
Self-hosted IT asset tracking, e-signed device handovers and an LLM-driven helpdesk. Ships as a one-line install with an offline-first Android companion app.
AI Infrastructure
Autonomous Infrastructure Assistant
Telegram-native agent over a Python orchestrator and MariaDB — autonomous monitoring, topology lookup, Docker management and remediation across five sites.
High-Density Networking
Stadium Wi-Fi Engineering
Seamless connectivity for 10,000+ concurrent users per match — UniFi APs, dual-WAN load balancing and VLAN segmentation with zero unplanned outages.
Disaster Recovery
Multi-Site Off-Site DR
TrueNAS replication targets with off-site snapshots and cold storage — full, tested recovery capability across every managed environment.

Certifications

IT Matchday OperationsUAE Football Association · 2022–2025
Diploma in Computer ApplicationOffice Automation & Applications
Web Design & .NET ProgrammingApplied development
AI-Assisted DevelopmentClaude Code · Python · Bash · Git

Technical Toolbox

Infrastructure
Proxmox HACephVMwareDockerTrueNAS
Network
FortiGateMikroTikCiscoUniFiVLANDual-WAN
Security
Zero-TrustSuricata IDSCrowdSecFail2banWireGuard
Cloud & Automation
AWSAzureGCPCloudflaren8n
AI & Dev
OllamavLLMPythonBashGitClaude Code

Focus Areas

▣Infrastructure
✦Cybersecurity
☁Cloud & DevOps
◈AI Infrastructure
root@shatheitguy:~$ whoami
Infrastructure Engineer · Network & Cybersecurity Specialist · AI Infrastructure & Automation Engineer

SHARQAN
AHAMED

// SHA THE IT GUY

Building secure networks, self-hosted AI, and intelligent infrastructure. 7+ years engineering the backbone of enterprise operations — from Zero Trust firewalls and Proxmox clusters to stadium-scale Wi-Fi serving 10,000+ concurrent users, now extended into a DGX Spark-powered self-hosted AI stack running local LLMs and autonomous infrastructure agents. Infrastructure isn't just IT. It's architecture.

View Career Get In Touch
SHA'S NETWORK192.168.1.0/24
OPNSENSE-GATEWAY
CrowdSec · Suricata IDS · Zenarmor
UNIFI-CLOUD-KEY-G2
CONTROLLER: ONLINE
UNIFI-SWITCH / AP / CAM
APs: 24 ONLINE · USERS: 847
DGX-SPARK / LLM CORE
AI STATUS: ONLINE · 92TB ALLOCATED
UNRAID-SERVER
Nextcloud · Jellyfin · Cloudflare Tunnel
[OK] VLAN-100 traffic nominal
[OK] Backup job completed
[WARN] AP-14 signal —72dBm
7+
Years XP
99.98%
Uptime
10K+
Users
Scroll Down
FortiGate
Proxmox HA
Zero Trust
MikroTik
Kubernetes
WireGuard VPN
TrueNAS
Cloudflare
Unbound DNS
CrowdSec
Fail2ban
IPS · IDS
n8n Automation
OpenClaw
Docker
Python Automation
DGX Spark
Ollama
vLLM
Hermes Agent
OPNsense
Suricata IDS
Zenarmor
AdGuard Home
FortiGate
Proxmox HA
Zero Trust
MikroTik
Kubernetes
WireGuard VPN
TrueNAS
Cloudflare
Unbound DNS
CrowdSec
Fail2ban
IPS · IDS
n8n Automation
OpenClaw
Docker
Python Automation
DGX Spark
Ollama
vLLM
Hermes Agent
OPNsense
Suricata IDS
Zenarmor
AdGuard Home
Live Network Topology · Multi-Site

NETWORK MAP

LEGEND
Firewall / Gateway
Switch / Router
Server Node
Access Point
Cloud Endpoint
● AI STATUS: ONLINE ● DGX CORE: ACTIVE ● HOME NET: OPNsense / UniFi ● DUBAI REMOTE: TrueNAS Target ● OFFICE EDGE: FortiGate Active STORAGE: 92TB ALLOCATED CYBER TUNNEL: WireGuard Active DATA INTEGRITY: 100% SECURE
Career History

EXPERIENCE

sha@career — bash — 120×40
sha@career:~$ cat experience.log | grep 2022-PRESENT
2022 — PRESENT
ROLE: Senior IT Infrastructure Engineer
ORG: Al Wasl Sports Club · Dubai, UAE
→Deployed high-density Wi-Fi for 10,000+ stadium attendees per event
→FortiGate & MikroTik firewall impl — advanced threat protection + routing
→WireGuard + Cloudflare Tunnel + Zero Trust remote access rollout
→Matchday broadcast & digital platform management end-to-end
→UAE FA IT Matchday Ops Certification [2022–2025]
sha@career:~$ cat experience.log | grep 2020-2022
2020 — 2022
ROLE: IT Infrastructure Engineer
ORG: Joseph Group · Jebel Ali, UAE
→LAN/WAN across multiple sites with VLAN segmentation
→Cisco & HP switch config, VPN tunnel optimisation, hybrid workforce
→Backup & recovery: Synology Active Backup + TrueNAS
sha@career:~$ cat experience.log | grep 2018-2020
2018 — 2020
ROLE: IT Engineer
ORG: Opti Network Ltd & Future Group · Bengaluru, India
→Enterprise end-user support, virus protection, system troubleshooting
→Internal wireless, VoIP, remote access configuration
→System upgrades, performance tuning, technical documentation
sha@career:~$
Technical Arsenal

THE STACK

🔥
Networking & Security
Firewall & Zero Trust
FortiGate · PfSense · MikroTik · UniFi · WireGuard · OpenVPN · Cloudflare Zero Trust
⚙️
Virtualization
Hypervisor & Storage
Proxmox · VMware ESXi · Hyper-V · TrueNAS · Synology · Ceph
☁️
Cloud
Multi-Cloud
AWS · Azure · GCP · Azure AD · Cloudflare DNS · Reserved Instances
🐳
DevOps & Automation
Containers & Orchestration
Docker · Kubernetes · Python · Nginx · Bash · n8n Workflow Automation
🛡️
Threat Detection & Response
IPS / IDS & Active Defense
Snort · Suricata · CrowdSec · Fail2ban · Zeek · OSSEC · OpenClaw
🌐
DNS & Network Management
DNS & Traffic Control
Unbound DNS · Pi-hole · Bind9 · Split-Horizon DNS · DNSSEC · DNS-over-TLS
🗄️
Database
Data Layer
MySQL · PostgreSQL · MongoDB · Redis · Active Backup
🔍
Monitoring & Observability
Visibility Stack
Wireshark · Zabbix · Grafana · Prometheus · Netdata · ELK Stack
🏟️
Environment & Datacenter
Deployed Sites
Home Lab (OPNsense/UniFi/DGX Spark/Unraid) · Dubai Remote (TrueNAS) · Mobile Field Unit (MikroTik + Pi) · Office Enterprise (FortiGate/AD) · Stadium (MikroTik Edge/HD Wireless)
Proficiency

SKILLS

OS & Server Mgmt100
Network Architecture95
Cybersecurity & Firewalls95
IPS / IDS & Threat Detection92
DNS Management (Unbound)90
Virtualisation & Automation90
CrowdSec / Fail2ban90
n8n Workflow Automation88
Cloud Platforms85
Database & CMS80
AI Infrastructure (DGX Spark / Ollama / vLLM)88
Multi-Site Architecture & Replication92
Self-Hosted AI

AI INFRASTRUCTURE

🖥️
Hardware Anchor
DGX Spark
Dedicated AI compute node for local LLM inference and autonomous agent workloads.
🧠
Local LLMs Benchmarked
Model Roster
Multiple self-hosted models evaluated for inference speed and agentic coding tasks
⚡
Inference Engines
Serving Layer
Ollama · vLLM · LM Studio
🤖
Agentic Frameworks Evaluated
Agent Runtimes
Hermes Agent · OpenClaw · NemoClaw · ZeroClaw
Telegram Assistant

AGENT ARCHITECTURE

sha@agent — pipeline — 120×20
sha@agent:~$ trace --pipeline infra-assistant
Telegram→Hermes Agent→AI Core→Python Orchestrator→MariaDB→Infrastructure APIs
→Autonomous Monitoring
→Topology Lookup
→Docker Management
→Live Chat Diagnostics
→Log Analysis
→Remediation Actions
Environment & Datacenter

DEPLOYED EQUIPMENT

🧱
Home Lab Gateway
OPNsense
Next-gen edge defense — CrowdSec, Suricata IDS/IPS, Zenarmor, AdGuard Home, Unbound DNS.
📶
Home UniFi Infrastructure
Cloud Key Gen2
UniFi switches, access points, and UniFi Protect cameras.
🧠
AI Compute
DGX Spark
Dedicated AI compute node for local LLMs and autonomous agents.
🗄️
App Host
Unraid Server
Docker microservices — Nextcloud, Jellyfin, Cloudflare Tunnel, MariaDB, Stirling PDF, Syncthing.
🌍
Dubai Storage Node
TrueNAS
Remote ZFS replication target for off-site disaster recovery.
🎒
Mobile Field Unit
MikroTik + Raspberry Pi
Travel router + portable node over WireGuard.
🏢
Enterprise Office Stack
FortiGate + AD
CrowdSec, Unbound DNS, Active Directory DC, UniFi Cloud Key, multi-vendor switching, mixed wireless.
🏟️
Stadium Deployment
High-Density Event Network
MikroTik edge, Active Directory, multi-vendor switches, high-density APs.
Portfolio

PROJECTS

01
Server Infrastructure
Proxmox Cluster Migration
Migrated legacy Hyper-V to Proxmox HA + Ceph — 40% less downtime, 60% lower licensing costs.
02
Private Cloud
Nextcloud Deployment
Self-hosted collaboration with LDAP integration and mobile sync. Full data sovereignty.
03
Cybersecurity
Secure Access Vault
Enterprise password vault with TOTP, RBAC, audit trails — ISO 27001 readiness achieved.
04
High-Density Networking
Stadium Wi-Fi Engineering
Seamless Wi-Fi for 10K+ users — UniFi APs, dual-WAN load balancing, VLAN segmentation.
05
Threat Detection
IPS/IDS Detection Stack
Built and deployed Suricata IDS + CrowdSec + Fail2ban pipeline — active threat blocking with real-time IP reputation feeds and custom rule sets.
06
DNS Architecture
Unbound DNS Infrastructure
Recursive Unbound DNS with DNSSEC, split-horizon zones, DNS-over-TLS and custom blocklists — full DNS sovereignty from edge to endpoint.
07
Automation
n8n Workflow Engine
Self-hosted n8n orchestrating IT workflows — alert routing, onboarding automation, incident response triggers and cross-system integrations. Built and running in production.
08
Automation
IT Helpdesk Automation
Zammad + LDAP ticketing automation cut resolution time by 50%, improved SLA compliance.
09
HR-Tech
Employee Onboarding Portal
Self-service portal with digital forms and IT provisioning — onboarding time cut by 70%.
10
AI Infrastructure
Autonomous AI Infrastructure Assistant
Telegram-native Hermes Agent pipeline through Python orchestrator and MariaDB — autonomous monitoring, topology lookup, Docker management, and remediation actions.
11
AI Infrastructure · Open Source
IT-Vault — Asset & Helpdesk Platform
Self-hosted IT asset tracking, e-signed device handovers and a ticketing helpdesk, driven by local LLMs on DGX Spark. Built with AI-assisted development and open-sourced under AGPL — live at shatheitguy.github.io/it-vault.
12
Disaster Recovery
Self-Hosted Cloud & Off-Site DR
Dubai TrueNAS replication target — off-site snapshots and cold storage for full disaster recovery.
13
Zero Trust
Zero-Trust Secure Mobile Network
MikroTik travel router + Raspberry Pi sync node, tunneling every byte home over WireGuard.
14
Enterprise Networking
Multi-Vendor Enterprise Office Network
FortiGate-anchored office deployment unifying UniFi, D-Link, and Ruijie under one Active Directory-integrated design.
Knowledge Base

FIELD NOTES

AI Infrastructure
Building an Autonomous Infrastructure AI Assistant
How the Telegram → Hermes Agent → MariaDB pipeline monitors and remediates issues across every site.
AI Infrastructure
Running Local LLMs on DGX Spark
Benchmarks, inference speed comparisons, and the architecture decisions behind the local LLM stack.
Security
OPNsense Hardening with CrowdSec & Suricata
Layering IDS/IPS, threat feeds, and DNS filtering on the home lab edge.
Storage
Multi-Site Off-Site Storage Strategy with TrueNAS
Designing the Dubai replication target for disaster recovery.
Mobile Networking
Building a Cyber-Hardened Portable Travel Network
MikroTik + Raspberry Pi + WireGuard, engineered for zero-trust travel.
Measurable Results

IMPACT

99.98%
Network Uptime
Redundant firewalls, proactive monitoring, automated failover.
100%
Backup Compliance
200+ endpoints with daily integrity checks via Synology.
−30%
Cloud Spend
Reserved instances, autoscaling, usage analytics.
−50%
Resolution Time
Helpdesk automation via Zammad and LDAP workflows.
+45%
IT Satisfaction
Faster support, intuitive tooling, personalised onboarding.
−70%
Onboarding Time
HR-Tech portal with automated IT provisioning workflows.
The Person

ABOUT ME

Sharqan Ahamed
LocationDubai, UAE
Experience7+ Years
FocusInfra · Security · AI
StatusAvailable for Freelance

I'm Sharqan Ahamed — an infrastructure engineer who treats every network like architecture and every firewall rule like a deliberate design decision.

Based in Dubai, UAE, I've spent 7+ years building systems that don't blink, don't leak, and don't go down. From Zero Trust firewalls to autonomous AI agent workflows running on self-hosted LLMs — I live at the intersection of reliability and innovation.

"Technology itself is neither good nor bad. It's the intent and execution that define its impact."
🔒
Zero Trust Advocate
Device posture checks, MFA, conditional access — security baked into every layer.
🛡️
Threat Detection & Response
IPS/IDS with Suricata, active threat blocking via CrowdSec, Fail2ban & OpenClaw — attacks stopped before damage is done.
🌐
DNS Mastery
Unbound recursive DNS, split-horizon, DNSSEC & DNS-over-TLS — full control over name resolution from edge to endpoint.
📡
Stadium-Scale Networking
10K+ concurrent users, dual-WAN failover, zero complaints at kickoff.
🤖
Automation First
Python, Docker, n8n workflows — thousands of manual hours saved through smart orchestration.
🎓
Knowledge Sharer
YouTube & GitHub tutorials empowering the next generation of IT pros.
🧠
Self-Hosted AI
DGX Spark running local LLMs via Ollama & vLLM — autonomous agents built on Hermes Agent, no cloud inference dependency.
🗺️
Multi-Site Architect
Five managed environments — home lab, Dubai remote, mobile field unit, office, and stadium — kept in sync and secure.
Let's Connect

GET IN
TOUCH

Available for Freelance

Open for projects, consulting & collaborations. I respond fast.

[email protected]
Dubai, UAE
+971 567 232 006
shatheitguy.in