Freelancer profile translated to English.

Description

Experienced IT specialist with over 15 years of professional experience in administering complex hybrid Microsoft environments as well as in DevOps and cloud infrastructures. Profound expertise in the conception, implementation, and security of Active Directory, Microsoft 365 / Entra ID, Windows Server, Linux systems, and automated deployments (Ansible, Terraform, CI/CD). Combines classic system administration with modern DevOps practices and takes full responsibility for projects from analysis to go-live.

Available for freelance projects in the Berlin area as well as remote. Focus areas: Hybrid AD/Entra integration, PKI/LDAPS, server migrations, security hardening, cloud and container solutions.

Languages

German
Native or bilingual
English
Basic
Persian
Native or bilingual

Workplace preferences

Can work on-site

Berlin (up to 50km)

LINDEMANN GmbH & Co. KG
System and ERP Administrator
September 2020 - Today (5 years and 11 months)
Berlin, Germany
• ▪ Operation and further development of the hybrid Microsoft environment: On-Prem AD, Microsoft 365, Entra ID, and Entra Connect
• ▪ Setup of own PKI with AD CS on a dedicated member server to provide LDAPS for third-party systems – specifically for Tenfold Community Edition on a Linux host
• ▪ Planning and execution of the migration of two Dell PowerEdge R740xd2 from Windows Server 2019 to 2022; this included license consulting (Datacenter, Core licensing) and a hybrid host/VM strategy
• ▪ Setup and hardening of OpenSSH Server on Windows Server 2019, 2022, and 2025 (Key-Auth, custom ports, domain users)
• ▪ Implementation of File Access Auditing on the central file server – including Advanced Audit Policy, SACL configuration, and PowerShell scripts for evaluation
• ▪ Response to a social engineering attack (CEO impersonation via Teams Federation): Analysis, containment, and long-term security through Teams Admin Center, Microsoft Purview, and Entra Cross Tenant Access
• ▪ Automation of recurring tasks via Task Scheduler, PowerShell, and dedicated service accounts
• ▪ Administration of the INFOR ERP system and user support in 1st, 2nd, and 3rd level support
• ▪ Planning and documentation of IT projects in Asana, regular coordination with management and departments
• ▪ Maintenance of the Dell server, switch, and firewall infrastructure at multiple locations
Nazmaran Consultant Co.
Linux System Administrator / DevOps Engineer
May 2018 - May 2020 (2 years)
Tehran, Tehran Province, Iran
• ▪ Migration of 20 physical Linux and Windows servers to the AWS cloud (EC2, Elastic IP, VPC, Subnets)
• ▪ Automated infrastructure deployment using Terraform – reducing deployment time by approximately 20%
• ▪ Development and maintenance of Ansible playbooks for provisioning and configuration of EC2 instances
• ▪ Setup of Kubernetes clusters for containerized applications; delivery via Helm charts for staging, pre-production, and production
• ▪ Establishment of CI/CD pipelines with Jenkins to consistently automate builds and deployments
• ▪ Setup of monitoring and alerting with Prometheus, centralized logging via ELK (Elasticsearch, Grafana)
• ▪ Containerization of microservices using Docker, significantly improving modularity and scalability
• ▪ Development of DevOps strategies to optimize software delivery – approximately 15% efficiency increase
• ▪ Support and training of development teams in transitioning to new automation workflows
Nazmaran Consultant Co.
IT System Administrator
March 2013 - May 2018 (5 years and 2 months)
Tehran, Tehran Province, Iran
• ▪ Setup and administration of a new infrastructure based on Windows Server
• ▪ Setup and configuration of Windows Servers and associated services
• ▪ Improvement of network security – new technologies, firewalls, and hardening of Windows services
• ▪ Installation and maintenance of Cisco infrastructure (switches, routers) and HP servers
• ▪ Incident management for firewalls, load balancers, and backend VPN infrastructure, always considering customer-specific SLAs
• ▪ Training and onboarding of new support staff
• ▪ 1st and 2nd level support (Helpdesk, telephone, remote maintenance)
• ▪ Troubleshooting remote and on-site
• ▪ Support for major roll-out projects