Professional Summary
Results-driven Senior IT Infrastructure Engineer with 7+ years of hands-on experience designing, securing, and operating enterprise-grade IT environments across the UAE and India. Trusted to own mission-critical infrastructure at Al Wasl Sports Club — delivering flawless stadium networks for 10,000+ concurrent users per event with a proven 99.98% uptime record. Deep expertise across firewall architecture, Zero Trust security, IPS/IDS threat detection, wireless at scale, and IT automation. Equally comfortable leading the entire infrastructure lifecycle independently or collaborating within cross-functional teams.
7+
Years Exp.
10K+
Users Live
99.98%
Uptime
60%
Cost Cut
Key Competencies
Firewall & Perimeter Security
FortiGate · OPNsense · pfSense · Multi-layer defence
Zero Trust Architecture
WireGuard · Cloudflare Tunnel · ZeroTier · No-VPN access
Large-Scale Wireless
UniFi · 160+ APs · Stadium Wi-Fi · VLAN segmentation
Threat Detection & Response
Suricata · Zenarmor · CrowdSec · Fail2ban · Zeek
Infrastructure Automation
n8n · Python · Bash · Docker · Self-healing workflows
Virtualisation & Storage
Proxmox HA · VMware · TrueNAS · Unraid · Ceph
DNS & Network Overlay
Unbound · Pi-hole · DNSSEC · DNS-over-TLS · SD-WAN
Cloud & Hybrid Platforms
AWS · Azure · Cloudflare · Hybrid workforce · Backups
Professional Experience
Senior IT Infrastructure Engineer
Al Wasl Sports Club · Dubai, UAE
2022 — Present
📍 UAE Football Association — IT Matchday Operations Certified (2022–2025)
Sole infrastructure engineer responsible for all IT systems across a premier UAE football club — from stadium match days to corporate office.
- Engineered and deployed high-density stadium Wi-Fi supporting 10,000+ concurrent users per match day using 160+ UniFi APs across multiple VLANs — zero unplanned outages across all events.
- Architected a multi-layered firewall stack with FortiGate 200E, OPNsense, and pfSense — implementing IPS/IDS rules, VLAN segmentation, DPI, and active threat blocking with CrowdSec + Fail2ban.
- Deployed Zero Trust remote access via WireGuard and Cloudflare Tunnel — fully replacing legacy VPN and eliminating public IP exposure.
- Built and maintained Proxmox HA cluster hosting 20+ production VMs with automated failover and TrueNAS shared storage (32TB pool).
- Implemented Unbound DNS infrastructure with DNSSEC, split-horizon zones, and DNS-over-TLS across all network segments.
- Managed end-to-end matchday broadcast, digital signage, IPTV, and AV systems for every home match with full redundancy.
- Deployed Passbolt enterprise vault with TOTP and RBAC for 32+ users — achieving ISO 27001 password policy compliance.
- Automated IT workflows with n8n and Python — cutting manual ops tasks by 70% through self-healing alert routing and incident response pipelines.
IT Infrastructure Engineer
Joseph Group · Jebel Ali, UAE
2020 — 2022
📍 Jebel Ali Free Zone, UAE
Multi-site infrastructure engineer for a large industrial group operating across Jebel Ali Free Zone.
- Designed and maintained multi-site enterprise networks with intelligent VLAN segmentation across 5+ locations — improving security posture and inter-site performance.
- Deployed OPNsense and pfSense firewalls across all branch offices with site-to-site IPSec VPN tunnels and traffic shaping policies.
- Configured Cisco and HP switching infrastructure, ZeroTier SD-WAN overlays, and hybrid workforce remote access for 200+ endpoints.
- Achieved 100% backup compliance across all endpoints with daily integrity checks via Synology Active Backup and TrueNAS.
- Reduced cloud infrastructure spend by 30% through reserved instance planning, right-sizing, and resource optimisation on AWS and Azure.
- Deployed and managed Microsoft 365, Azure AD, and Intune MDM for device management and conditional access policies.
IT Engineer
Opti Network Ltd & Future Group Pvt Ltd · Bengaluru, India
2018 — 2020
📍 Bengaluru, India
- Delivered enterprise-scale end-user IT support and endpoint protection across 500+ users — maintaining SLAs and documentation standards.
- Configured internal wireless networks, VoIP systems, and pfSense-based firewall policies for branch office connectivity.
- Executed system upgrades, patch cycles, and performance tuning with minimal operational disruption.
Key Projects
Infrastructure2023
Proxmox HA Cluster Migration
Migrated legacy Hyper-V environment to Proxmox HA + Ceph distributed storage — 40% reduction in unplanned downtime, 60% lower licensing costs, and full live-migration capability.
Security2023
IPS/IDS Detection Pipeline
Designed and deployed Suricata IDS + Zenarmor NGFW + CrowdSec + Fail2ban pipeline with real-time IP reputation feeds and custom rule sets — active threat blocking across all perimeters.
Automation2024
n8n IT Workflow Engine
Self-hosted n8n orchestrating alert routing, onboarding automation, incident response triggers, and cross-system integrations — reducing manual IT tasks by 70% in production.
Networking2022
Stadium Wi-Fi — 10K+ Users
End-to-end design and deployment of high-density UniFi wireless infrastructure with dual-WAN load balancing, 4 isolated VLANs (Media, Internal, Guest, Hotel), and seamless matchday operations.
Why Hire Me
Firewall & Security Depth
FortiGate, OPNsense, pfSense — I architect multi-layered perimeters with IPS/IDS, Zero Trust, and active threat blocking. Not just rules — full security posture.
Proven at Scale
99.98% uptime across critical sports and corporate infrastructure. Stadium-tested with 10,000+ live users. Redundant by design, monitored 24/7.
Automation First
n8n, Python, Docker — I eliminate repetitive IT work and build self-healing workflows so teams can focus on what actually matters.
Full Ownership
From scoping to delivery — I own projects end-to-end. Independently or within cross-functional teams, I deliver without hand-holding.