Ahmad Fawad

IT Service Management & Operations
Managed enterprise IT operations for 2, 200+ endpoints, ensuring SLA compliance, high availability, and ITIL-based incident, problem, and change management.
Improved MTTR by 25% through structured change management and controlled deployment strategies.
Administered Windows Server (2012-2022), Active Directory, Azure AD (Entra ID), DNS, DHCP, Group Policy (GPO).
Maintained 99.9%+ system uptime across critical infrastructure services.
Managed Microsoft 365 (Exchange Online, Teams, SharePoint) including user provisioning, identity management, and access control.
Network Infrastructure & Data Center Management
Administered VMware vSphere and Microsoft Hyper-V for virtualization, capacity planning, and VM lifecycle management.
Implemented backup and disaster recovery (DR) using Veeam Backup & Replication with offsite replication and recovery validation.
Deployed infrastructure monitoring tools (ManageEngine OpManager Plus) for proactive alerting and performance monitoring.
Managed LAN/WAN networks, VLANs, TCP/IP, routing, and switching.
Configured and maintained enterprise firewalls (Cisco ASA, SonicWall, WatchGuard) with IDS/IPS, APT protection, and network security policies.
Designed secure network architectures (HLD/LLD, ACLs, NAT, VPN/IPSec, DMZ).
Managed enterprise Wi-Fi (Ubiquiti UniFi) infrastructure.
Cloud Infrastructure & High Availability
Designed multi-cloud architecture (Microsoft Azure & AWS) with high availability (HA) and disaster recovery (DR).
Deployed Azure Kubernetes Service (AKS) and AWS Elastic Kubernetes Service (EKS) clusters.
Achieved 99.99% uptime SLA and RTO 15 minutes / RPO 5 minutes.
Implemented auto-scaling, load balancing, and multi-zone deployment strategies.
Configured Azure Front Door, Azure Traffic Manager, AWS CloudFront for global traffic routing and failover.
Implemented Azure Site Recovery (ASR) and IPSec VPN (Azure VPN Gateway & AWS Transit Gateway) for hybrid connectivity.
Managed infrastructure using Terraform (Infrastructure as Code - IaC) for automated and consistent deployments.
Deployed monitoring and observability tools (Prometheus, Grafana).
Endpoint Management & Security
Managed Microsoft SCCM (MECM) for software deployment, OS imaging, patch management, and compliance reporting.
Administered Microsoft Defender for Endpoint for threat detection and endpoint security.
Implemented Data Loss Prevention (DLP) policies using McAfee, reducing data leakage risks by 40%.
Managed Linux systems (Ubuntu) using Landscape for patching and compliance.
IT Governance, Compliance & Reporting
Implemented ISO 27001 (ISMS) and ISO 9001 (QMS) frameworks with risk assessments and audit readiness.
Deployed Active Directory auditing and file monitoring tools (ADAudit Plus, Lepide).
Developed SCCM reports and Power BI dashboards for compliance tracking and operational insights.
Collaborated with Security Operations Center (SOC) teams on incident response and threat mitigation.
Managed IT asset lifecycle, vendor management, procurement, and contract renewals.

• Administered Windows Server 2008 including Active Directory, DNS, DHCP, and Group Policy, ensuring
stable and secure enterprise operations.
• Managed LAN/WAN infrastructure including routing, switching, and VLAN configuration for high
availability and network performance.
• Configured and managed firewalls (Cisco, MikroTik, pfSense) to enforce perimeter security and network
access policies.
• Administered VMware ESXi environments, handling VM provisioning, performance optimization, and
resource allocation.
• Supported AWS cloud environments for development and production workloads, assisting with
infrastructure reliability and access control.
• Delivered L1/L2 IT support, resolving hardware, software, OS, and network issues across the
organization.
• Planned and executed IT projects, system upgrades, and infrastructure rollouts including end-user
training and post-implementation support.
• Assisted in ISO 27001 ISMS and ISO 9001 QMS implementation, audit support, and ongoing
compliance monitoring.