Ashish Kumar

• DNS Migration & Consolidation - Led the global DNS migration project, consolidating domains from multiple registrars
(GoDaddy, WebNames, CSC) into AWS Route 53 with FCTG branded nameservers, ensuring governance, scalability, and
compliance.
• Payroll Server Migration - Architected and executed the migration of a business-critical Payroll system from on-premises
to Azure. Designed Bastion-based secure access, transitioned to SQL Standard, and coordinated vendor involvement for
long-term support.
• Endpoint Protection Platform (EPP) POC - Designed and validated Microsoft Defender for Servers (Plan 2) across hybrid
environments, enabling agentless scanning, vulnerability management, and compliance with PCI/NIST standards.
• Infrastructure as Code Governance - Authored governance frameworks for Terraform, Bicep, and ARM templates.
Implemented reusable modules, CI/CD governance, ARG review boards, approval workflows, and role-based access
models.
• Cloud Dashboards & Monitoring - Developed Azure Monitor + KQL dashboards for PaaS service visibility and AD domain
compliance mapping, enhancing transparency, governance validation, and audit readiness.
• Cross-Regional Collaboration - Acted as a key liaison with global stakeholders (Australia, Philippines, RSA, UK, Americas),
aligning project execution with enterprise strategy and ensuring successful delivery across regions.
• Strategic Leadership - Supported enterprise-level decisions on Azure DevOps centralization, cloud cost optimization,
and hybrid security strategy. Mentored junior engineers, driving best practices in automation, observability, and
governance.
• Designed zero-trust access models and compliance-driven network segmentation.

• Design, implement, and manage Azure Virtual Desktop (AVD) environments for efficient remote desktop infrastructure.
• Manage Azure Backup solutions, ensuring compliance with backup policies and business continuity requirements.
• Develop and implement disaster recovery strategies using Azure Site Recovery to ensure high availability and minimize
downtime.
• Create and maintain Azure Resource Manager (ARM) templates for automated resource provisioning and infrastructure
as code (IaC) deployments.
• Configure and manage Azure Load Balancers to ensure high availability and performance of cloud services.
• Oversee the configuration and optimization of Azure ExpressRoute for dedicated and secure connections between on
premises and Azure environments.
• Conduct cost analysis and management, optimizing Azure resources to reduce cloud expenditure while meeting
operational needs.
• Implement and enforce Azure policies, ensuring compliance and security through policy remediation activities.
• Manage Microsoft Intune for device and application management, ensuring secure access and compliance across the
organization.
• Perform cloud environment monitoring and troubleshooting to ensure optimal system performance and reliability.

• Backup Strategies Development: Actively formulating and implementing comprehensive backup strategies for organizational
data, applications, and systems, ensuring continuous data integrity and recovery readiness.
• Network Security Management: Regularly managing and updating firewall configurations, monitoring logs, and responding
to security incidents to mitigate unauthorized access and cyber threats.
• Virtual Machines Optimization: Configuring, maintaining, and continuously optimizing virtual machines (VMs) to ensure
efficient resource allocation and performance enhancement.
• Data Reports and Dashboards Creation: Designing and refining interactive data reports and dashboards using Power BI, SQL,
and Azure Data Studio for effective data management and analysis.
• Network Infrastructure Administration: Administering network infrastructure including switches and Ubiquiti devices,
focusing on optimizing network performance and conducting thorough traffic analysis.
• Automating Processes with Scripting: Utilizing PowerShell and batch scripting to automate various processes, enhancing
operational efficiency.
• Overseeing Mobile Device Management: Overseeing mobile device management (MDM) with Azure Intune, ensuring secure
control over the organizations diverse mobile device ecosystem
• NAS and SAN Management: Administering NAS and SAN storage environments and implementing robust backup and
recovery strategies to safeguard data.
• Cybersecurity Monitoring and Threat Hunting: Continuously monitoring for cyber threats and engaging in proactive threat
hunting to safeguard the IT infrastructure.
• Linux Server Administration: Administering Linux servers, including installation, configuration, security hardening, and
managing compliance in Azure AD and Office 365 environments.

• Backup Process Oversight: Monitored and troubleshooted backup procedures to maintain data integrity.
• Firewall Management and Security: Established, configured, and maintained firewall rules, actively addressing potential
security threats.
• Robust Security Measures: Implemented strong security measures, investigated breaches, and collaborated on preventive
strategies.
• Malware Identification: Utilized antivirus dashboards for effective identification and response to malware threats.
• VMware ESXi Optimization: Managed and optimized virtual machines on VMware ESXi, including necessary troubleshooting.
• Automation and Device Management: Automated tasks using PowerShell, managed mobile devices with Azure Intune MDM,
and leveraged Docker Hub/GitHub for development workflows.
• Network and Storage Administration: Administered network components, printers, and storage systems, including NAS and
SAN setups.
• Cyber Threat Monitoring: Proactively monitored, identified, and responded to cyber threats, focusing on containment and
resolution.
• Linux Server and Cloud Administration: Efficiently managed Linux servers and ensured effective administration of Azure AD and
Office 365.
• Data Reporting and Analysis: Crafted clear, interactive Power BI reports, utilizing SQL and Azure Data Studio for advanced data
management and analysis.
• Major Systems Migration Success: Successfully managed comprehensive migrations involving VMware environments, Active
Directory & File Server systems, Internet Information Services (IIS), firewall infrastructures, and VOIP systems, ensuring seamless
transitions, data integrity, and sustained operational efficiency.

• Customized Backup Strategy Implementation: Developed and implemented tailored backup strategies for data, applications,
and systems, ensuring reliability and recovery readiness.
• Backup Process Management: Monitored and troubleshot backup procedures to maintain data integrity.
• Firewall and Security Management: Established, configured, and maintained firewall rules, actively monitoring for and
addressing potential security threats.
• Security Measures and Breach Investigation: Implemented robust security measures, investigated security breaches, and
collaborated on preventive strategies.
• Malware Identification and Response: Utilized antivirus dashboards for effective identification and response to malware
threats.
• VMware ESXi Management: Managed and optimized virtual machines on VMware ESXi, including necessary troubleshooting.
• Automation and Device Management: Automated tasks using PowerShell, managed mobile devices with Azure Intune MDM,
and leveraged Docker Hub/GitHub for development workflows.
• Network and Storage Administration: Administered network components, printers, and storage systems, including NAS and
SAN setups.
• Cyber Threat Monitoring and Containment: Proactively monitored, identified, and responded to cyber threats, focusing on
containment and resolution.
• Linux Server and Cloud Administration: Efficiently managed Linux servers and ensured effective administration of Azure AD
and Office 365
• Security and Compliance Enforcement: Upheld strict security and compliance standards, including implementing multi-factor
authentication.
• Data Reporting and Analysis: Crafted clear, interactive Power BI reports, and utilized SQL and Azure Data Studio for advanced
data management and analysis.
• Major Systems Migration: Successfully managed comprehensive migrations encompassing VMware environments, Active
Directory & File Server systems, Internet Information Services (IIS), firewall infrastructures, and VOIP systems, ensuring
seamless transitions, data integrity, and sustained operational efficiency throughout the process.

• Backup Strategy and Management: Developed and executed customized backup strategies for data, applications, and
systems, tailoring schedules and retention policies to evolving business needs. Ensured data integrity and preparedness for
recovery through vigilant monitoring and swift troubleshooting of backup processes.
• Network Security and Firewall Management: Specialized in configuring and maintaining firewall rules, enhancing network
security. Analysed logs to adapt to emerging threats, deploying robust policies to prevent unauthorized access and mitigate
cyber risks.
• Incident Response and Threat Mitigation: Led security breach investigations and implemented effective countermeasures.
Monitored antivirus dashboards, identifying, and responding to malware, and collaborated on strategies for future threat
mitigation.
• Virtualization and System Optimization: Proficient in configuring and maintaining VMware ESXi VMs, optimizing resource
allocation and performance. Diagnosed and resolved virtualization challenges, extending expertise to network load
balancing and configuration adjustments.
• Data Reporting and Analysis: Crafted interactive reports with Power BI, utilizing SQL and Azure Data Studio for efficient data
management and analysis.
• Network and Device Administration: Managed network switches, Ubiquiti devices, and implemented access controls for
security. Oversaw VLAN setup, firmware updates, and traffic patern analysis for network optimization.
• Automation and Cloud Management: Utilized PowerShell and batch scripting for process automation. Managed mobile
devices with Azure Intune MDM and leveraged Docker Hub and GitHub for streamlined development workflows.
• Storage and Cybersecurity Monitoring: Administered NAS and SAN environments, ensuring data availability and
performance. Vigilantly monitored network and endpoint data for cybersecurity threats, actively engaging in threat hunting
and remediation
• Linux and Cloud Administration: Managed Linux servers and administered Azure AD and Office 365, ensuring secure
operations and compliance with user identity, role management, and security enforcement.
• Major System Migrations: Handled key migrations including VMware, Active Directory & File Server, IIS, Firewall, and VOIP
systems, ensuring smooth transitions and operational continuity.