Shaheen Sadeghy

• Implemented a new data center, focusing on layout design, cable management, and fiber
connections.
• Performed daily administration of the network environment, including monitoring performance and
ensuring optimal operation
• Troubleshoot issues and new designs by tracing the packets using sniffers and logs on Fortigate
and wire shark
• Established interconnections for clients between firewall VDOMs, core, edge, and ToR switches, as
well as with Isilon NAS storage, wireless access points, monitoring systems (Zabbix server and
proxies), domain controllers, and DHCP servers
• Deployed the physical infrastructure by considering required SFPs: SFP+, QSFP+, QSFP28,
Convertors, Short Range SFPs (SR), Long Range SFPs (LR, ER, ZR), DWDMs
• Built the network infrastructure by utilizing Multiplexers, OEO and Pre-Amp devices
• Upgraded ONIE and OS10 in Dell switches
• Configured Dell switches (S4148T, S5248F, S4112F) considering VLT, VRRP, VRF, TACACS, SNMP
and Routing
• Configured Cisco switches (3K and 9K) considering VPC, HSRP, VRF, TACACS, SNMP and Routing
• Enhanced network security by enforcing Firewall policies, Security Profiles, Web Filtering, IPS, Web
Application Firewall (Fortinet)
• Onboarded new clients to our infrastructure by establishing physical connections, setup of switches
at both ends, setup of new VDOMs, SSLVPN, IPSec by setting of routings, firewall policies, VIPs
• Upgraded firewalls versions
• Updated the certificates on clients VDOMs
• Provided L2 and L3 network diagram by Visio

Responsible for data center network design, security, and infrastructure
deployment across multiple sites.
• Designed and implemented new data centers in Vancouver & Montreal, including
fiber connections, MUX interconnects, and SFP transceivers.
• Implemented layer2 and Layer3 redundancies on Cisco & Dell switches and
routers (VPC, VRRP, HSRP, VLT), and Fortinet firewalls settings (VDOMs, SSLVPN,
IPSec VPN).
• Migrated clients to Layer 3 managed services, configuring routings, VRFs, default
routes, and firewall policies.
• Established redundant interconnections between data centers using high-speed
10G/100G fiber links.
• Deployed VMoD (Virtual Machine on Demand) project, integrating OpenStack,
VLANs, VRFs, and IPsec tunnels for client cloud environments.

• Administering and maintaining Incognito Data Center to provide services to more than 200
incognito developers and DevOps personnel located in different countries
• Administering the L2 switches including physical connectivity, defining VLANs by considering STP
• Involved with redesigning the STP settings of Data Center switches
• Maintaining Dell and HP servers
• Providing IPSec and SSL VPN access for users
• Creating Jump Hosts in DMZ zones and configuring the VPNs between Jump Hosts and clients
• Administering the Sophos firewall to define Site-To-Site IPSec VPNs, provide SSL and IPSec access
VPN connections, defining source and destination NATs and Firewall rules, upgrading the firmware,
renewing the certificate, troubleshooting the routing issues and renewed the license
• Administering the core L3 switch to define new VPNs, tag VPNs by considering IPAM
• Configured VPN settings on Sophos Firewall, IPSec-VPN with RADIUS and SSL-VPN with AD
• Administering local DNS servers and AWS Route53 to create, delete, modify records A, AAAA, TXT,
CNAME etc. to resolve the issues or as per the requests
• Deployed LibreNMS network monitoring system, running a Linux VM, PHP, Nginx and MariaDB.
• Troubleshooting Sophos firewall in SSH shell level
• Setup VPN to Google Cloud
• Setup Load Balancer in Google Cloud
• Installed HP servers in the racks with connections to the management and data switches using
SFP/SFP+/QSFP considering the port mapping diagrams
• Administering Openstack through horizon, Glance, Nova and Ceph
• Administering users, projects, permissions, group policies and resources quota the OpenStack
environment
• Deploying Linux servers
• Administering Linux servers like defining users, permissions, adding users SSH keys
• Administering Nutanix server farm, including creating new Linux and Windows VMs in different
clusters in the planned vlan
• Deployed VMWare servers farm, including the installation, intelligent provisioning of brand-new HP
Gen9/10 hosts, setting up disk arrays RAIDs, installing ESXi 6.5, deployed new Linux and windows
VM servers in the proper virtual machine port groups (vlan), as well as taking snapshots and
exporting/importing OVF files, upgrading controller and upgrading iLo
• Migrated virtual machines from VMWare and physical servers to Nutanix and OpenStack
environment by using Nutanix Move, virt-v2v, qemu-img and P2V
• Renewal/installation of the certificates on the exchange, Remote Desktop Gateway and web servers
(Nginx, Apache and IIS)
• Administering Active Directory users
• Configured Intune to deploy CrowdStrike Falcon and Umbrella OpenDNS on new machines and
maintain them through Intune admin portals
• Deploying operating systems and setting up new Windows, iMac, and MacBooks machines for users
• Administer users in SharePoint
• Administering user in Atlassian products, including Jira, Bitbucket and Confluence
• Set up the Single Sign-On applications by SAML through OKTA and Azure AD SSO
• Deployed EC2 instances in different zones,
• Built up the Zen Desk ticketing system from scratch including fields, forms, SSO setup (SAML),
defined Macros, Triggers, Views and Automations
• Administered OKTA including provisioning with Active Directory and updating the OKTA agent
• Communicating with vendors to resolve the major issues or upgrades
• Deployed a brand-new Azure AD tenant (incosoftware)
• Added the domain to the tenant, configuring the DNS records, defined Inbound rules and
connectors
• Deployed Azure AD DS and set SLDAP
• Deployed NPS server in Azure and paired with Sophos (as a RADIUS client)
• Administer the SharePoint Admin and Exchange Online Admin
• Deployed complete MS-Teams Call Flows by defining Resource Accounts, Auto-Attendants and Call
Queues

• • Administered and maintained Incognito Data Center supporting 200+ developers and DevOps personnel in multiple countries.
• Managed L2/L3 network infrastructure including VLAN design, STP optimization, and physical connectivity.
• Maintained Dell and HP servers and redesigned STP settings for improved data center resiliency.
• Provided secure remote access via IPSec and SSL VPNs, SSH, RDP, SFTP, and VNC connections.
• Created Jump Hosts in DMZ zones and configured VPNs between Jump Hosts and clients.
• Administered Sophos firewalls to define Site-to-Site IPSec VPNs, provide SSL/IPSec access VPNs, configure NAT policies and firewall rules, perform firmware upgrades, renew certificates, and troubleshoot routing issues.
• Managed core L3 switches and tagged new VPNs with IPAM alignment.
• Configured VPN settings using RADIUS and Active Directory authentication.
• Administered local DNS servers and AWS Route53 for A, AAAA, TXT, and CNAME records.
• Deployed LibreNMS network monitoring using Linux, PHP, Nginx, and MariaDB.
• Configured VPNs and Load Balancers in Google Cloud environments.
• Installed HP servers with proper SFP/SFP+/QSFP mappings per rack diagram.
• Administered OpenStack (Horizon, Nova, Glance, Ceph) including users, projects, and quotas.
• Managed Nutanix clusters, creating Linux and Windows VMs across VLANs.
• Built VMware ESXi farms on HP Gen9/10 hosts, configured RAID arrays, managed VMs, snapshots, and OVF migrations.
• Migrated workloads between VMware, Nutanix, and OpenStack using Nutanix Move, virt-v2v, and qemu-img.
• Managed SSL certificates for Exchange, RD Gateway, and web servers (Nginx, Apache, IIS).
• Administered Active Directory, GPOs, DHCP, DNS, IIS, Exchange, and Remote Desktop Gateway.
• Configured Microsoft Intune for CrowdStrike Falcon and Umbrella OpenDNS deployments.
• Managed user accounts in SharePoint, Atlassian (Jira, Bitbucket, Confluence), and OKTA.
• Set up SAML-based Single Sign-On through OKTA and Azure AD SSO.
• Built a Zendesk ticketing system from scratch (SSO, Macros, Triggers, Automations).
• Deployed Azure AD tenant, configured DNS, inbound connectors, and Azure AD DS.
• Installed NPS servers integrated with Sophos as RADIUS clients.
• Administered Exchange Online, SharePoint Admin Center, and Teams call flows (Auto-Attendants, Queues).
• Configured routers, firewalls, switches, wireless access points, and VPNs (IPSec, SSL).
• Managed cloud security and antivirus systems (Webroot, DUO MFA).
• Troubleshot network and system issues in on-prem and cloud infrastructures.
• Defined and optimized firewall and NAT rules, IPsec, and SSL VPNs.
• Renewed SSL certificates on RDG and Exchange servers.
• Created and maintained user profiles on PCs and Terminal Servers.
• Installed, upgraded, and updated Terminal Server applications.
• Provided remote desktop access secured by DUO MFA.
• Configured domain controllers, Exchange servers, and SonicWall firewalls.
• Utilized management tools such as Labtech, ScreenConnect, ITGlue, and ConnectWise Manage.
• Performed configurations in Office 365 and Exchange Online.
• Used SonicWall GMS portal, spam filtering, and Webroot consoles for policy control.
• Diagnosed HP server hardware via iLo and managed VMs in vCenter and Azure portal.
• Restored data from backups and resolved email filtering issues (Roaring Penguin, O365 EOP).
• Delivered professional technical consultation and coordinated with vendors and NOC teams.
• Provided onsite field support and ensured strong client relationships.

• Managed Sophos firewalls, setting up site-to-site VPNs, NAT, firewall rules,
SSL-VPN

• Configured and supported Router/Firewalls, Switches, Wireless Access Points, VPN, SSL-VPN, Port
Forwarding
• Managed Active Directory (GPOs, Netlogon scripts, permissions), DHCP, DNS, IIS, Group Policy,
Exchange, Remote Desktop Gateway, Office 365, Azure AD Sync
• Managed and supported Cloud Based Security/Antivirus (Webroot, DUO two-factor authentication),
• Worked with StorageCraft Backup monitoring
• Troubleshoot systems and network issues in both cloud-based and on-premises infrastructures.
• Defined firewall rules based on the requirements (firewall rules, NAT policies, port forwarding, IPsec
and SSL VPN)
• Renewed several SSL certificates on RDG servers and Exchange servers
• Set up new user profiles on PCs and Terminal Servers
• Installed, upgraded and updated applications on the Terminal Servers
• Provided remote desktop access with two-factor-authentication through DUO admin portal
• Configured domain controllers, exchange servers and Sonicwall firewalls
• Utilized remote management systems, ticketing applications (Labtech, Screen Connect, ITGlue,
ConnectWise Manage)
• Performed configurations on Office 365 portal and Exchange online
• Utilized SonicWall GMS portal, Spam filtering and Webroot portals
• Diagnosed issues on HP servers by iLo
• Troubleshoot Virtual Machines issues by Vcenter and Azure portal
• Restored missing files from backup servers
• Utilized Spam Filtering portals (Roaring Penguin, Office 365 EOP)
• Provided professional technical consultation
• Performed analysis and defect tracking according to Service Level Agreements.
• Communicated with the remote vendors and NoC teams
• Onsite field support and client relationship management

Managed services provider supporting enterprise clients and professional service
firms.

BFG Enterprise Services (Burman and Fellows group), as one of the main is
one of the biggest its My included:
• Implemented and deployed software and hardware in BCLC and SAP projects.
• Deployed software, hardware, and peripherals in different projects such as BC Lottery Center, SAP,
Garden Center, Pin Pad, Capital Plan and Pentagon.
• Installed, Configured and Upgraded wireless Garden Center Systems of different branches of Loblaw
stores in British, Colombia and Saskatchewan.
• Performed the process of flipping the lanes in different branches of Loblaw stores in Alberta and
Saskatchewan.
• Windows XP to Windows 7 Migration of different branches of Loblaw stores in British Columbia.
• Installation and configuration of new Pin Pads of different branches of Shoppers Drug Marts.
• Installation, configuration and maintenance of different peripherals such as printers, price verifiers
and STAS Clocks.
• Managed and delivered SLA commitments and expectations to customers
• Performed Quality control during phases of installation, configuration, and upgrade of BC Lottery
Systems in different
branches of Loblaw stores in BC (BCLC Project).

On-site IT deployments and migrations for enterprise clients in retail, lottery, and
financial services sectors.