INFRASTRUCTURE · SECURITY · CLOUD

Making systems
more secure.
Keeping them
resilient.

I’m Ashish Sharma, an Infrastructure & Security Engineer working at the intersection of enterprise IT, security operations, and cloud infrastructure.

From hardening networks and identity controls to building practical security labs, I focus on systems that are observable, recoverable, and built to last.

Explore my work Download résumé

LinkedIn ↗GitHub ↗Email ↗

FIELD NOTES / 001INFRASTRUCTURE MAP

Systems thinking, hands-on execution01 / 04

BASED IN INDIANETWORKS / SECURITY / SYSTEMSSCROLL TO EXPLORE ↓

01 — ABOUT

A PRACTICAL APPROACH TO IT

Reliable infrastructure is built through good engineering and clear thinking.

My work spans day-to-day enterprise operations and security-focused projects: access control, network hardening, monitoring, incident analysis, and cloud security baselines.

I like making complex environments easier to understand and operate—through documented controls, useful automation, and evidence that stands up to review.

Let’s connect ↗

02 — EXPERIENCE

WHERE I’VE CONTRIBUTED

Experience built
in real environments.

Enterprise IT operations, multi-site infrastructure, security controls, and end-user reliability.

MAY 2025 — PRESENT

System & Network Administrator

CURRENT ROLE

Ram Rattan Group · Gurgaon, India

Secure and maintain enterprise LAN/WAN/WLAN, staff and guest SSID separation, Sophos firewall policies, VPNs, and Cisco networking.
Administer Active Directory for a 50-user environment, least-privilege access, and Windows Server 2019, Linux, and HPE ProLiant systems.
Lead incident root-cause analysis, apply corrective controls, and automate routine administration with PowerShell and Bash.
Manage role-based access and data-integrity checks across 4QT ERP and Pinga HR platforms.

Active DirectorySophosPowerShellRCA

OCT 2021 — APR 2025

System & Network Administrator

MVL Limited · Gurgaon, India

Deployed and managed multi-site LAN/WAN infrastructure across Gurgaon and Yamunanagar, supporting 200+ users.
Hardened the environment with Sophos firewalls, VPNs, and endpoint protection; tracked audit findings through remediation.
Deployed Zabbix and PRTG monitoring for servers, network devices, and applications; handled Severity 1/2 incident analysis.
Implemented Farvision ERP and Zing HR workflows and contributed to vendor evaluation and IT budgeting.

Network OperationsZabbixPRTGIncident Response

APR 2020 — SEP 2021

Desktop Engineer

CPS Interior Pvt. Ltd. · Faridabad, India

Delivered L1/L2 support for endpoint hardware, operating systems, and business applications.
Maintained scheduled backup routines for critical business data and followed ticketing and SLA practices.

L1/L2 SupportBackupSLA

↗

EDUCATION

Bachelor of Science in Data Science

IIT Madras · Online programme · Pursuing, expected 2028

Diploma in Electrical Engineering

Government Polytechnic, Lisana Rewari · 2018–2021

03 — SELECTED WORK

LABS, SYSTEMS & OPEN SOURCE

Ideas made operational.

A mix of security engineering, infrastructure automation, and open-source product work.

OPEN SOURCE / 202601

OPENESTATE CRM / MULTI-TENANT

PRODUCT ENGINEERING · OPEN SOURCE

OpenEstate — Real Estate CRM

A self-hostable, multi-tenant real-estate CRM built around tenant isolation and financial integrity. The architecture uses PostgreSQL row-level security and an append-only financial ledger.

TypeScriptNestJSReactPostgreSQL

Explore repository ↗

GOVERNANCE / 202602

CC6Logical accessMapped

CC7System operationsMapped

CC8Change managementMapped

CONTROL MAPPING SECURITY / GRC

PERSONAL PROJECT · 2026

SOC 2 Readiness Toolkit

Mapped Wazuh, Active Directory, Sophos, and AWS controls to SOC 2 Trust Services Criteria and ISO 27001:2022, with evidence checklists, access reviews, a risk register, and an incident-response runbook.

SOC 2ISO 27001Evidence

CLOUD SECURITY / 202603

IAM✓

CloudTrail

GuardDuty

SSE-KMS

AWS BASELINE DETECTION / CONTROL

PERSONAL LAB · 2026

AWS Security Baseline

Built a SOC 2-aligned AWS baseline using least-privilege IAM, enforced MFA, multi-region CloudTrail, AWS Config, GuardDuty, S3 Block Public Access, KMS encryption, and Secrets Manager.

AWS IAMGuardDutyKMSOpenVAS

SECURITY OPERATIONS / 202404

event-stream.log

14:03:21 INFO manager online

14:03:24 ALERT rule matched

14:03:25 INFO agent registered

14:03:27 PASS integrity check

WAZUH SIEM DETECTION / LOGS

FREELANCE · 2024

SIEM Implementation

Deployed Wazuh manager and agents, developed custom detection rules, configured file integrity monitoring, and created PCI-DSS/NIST compliance dashboards.

WazuhElastic StackFIM

OBSERVABILITY / 202205

HOST AVAILABILITY

ALERTS↗Automated triggers

ZABBIX MONITORING METRICS / ALERTING

INFRASTRUCTURE · 2022

Zabbix Monitoring Deployment

Built an end-to-end monitoring solution with auto-discovery, custom triggers, and automated alerts for servers, switches, and applications.

ZabbixSNMPDashboards

CLOUD INFRASTRUCTURE / 202306

HOT↗

COOL↗

ARCHIVE↗

AZURE BLOB LIFECYCLE / RBAC

CLOUD INFRASTRUCTURE · 2023

Azure Blob Storage Controls

Configured RBAC access tiers, lifecycle management rules, and compliance controls for scalable, cost-conscious cloud storage.

AzureRBACLifecycle Policies

04 — EXPERTISE

TOOLS I WORK WITH

Broad context.
Practical depth.

A working toolkit across network and systems administration, security monitoring, cloud controls, and operational governance.

Network & perimeter

TCP/IP, DHCP, DNS, VLANs, LAN/WAN, VPN (IPsec/SSL), routing & switching, Cisco IOS, Sophos Firewall.

Systems & identity

Windows Server 2019, Active Directory, CentOS/Ubuntu, VMware ESXi, Hyper-V, HPE ProLiant, PowerShell, Bash.

Security operations

Wazuh SIEM, IDS/IPS, endpoint protection, OpenVAS, GoPhish, security audits, risk assessment, incident response.

Cloud & resilience

AWS IAM, CloudTrail, Config, GuardDuty, KMS, Secrets Manager, EC2, S3, VPC; Azure Blob Storage, Veeam, Synology NAS.

Monitoring & operations

Zabbix, PRTG, Wireshark, GLPI, IP-CCTV, RCA / 5 Whys, change management, vendor management, IT budgeting.

Governance & platforms

SOC 2 TSC, ISO 27001:2022 Annex A, NIST, PCI-DSS, control mapping, evidence collection, access reviews, Microsoft 365, SharePoint.

05 — CONTINUOUS LEARNING

CERTIFICATIONS & STUDY

Learning that
keeps moving.

Building on a hands-on infrastructure background with focused learning in cybersecurity and cloud architecture.

COMPLETED

ISC2 Certified in Cybersecurity (CC)

June 2026

↗

COMPLETED

Fortinet Certified Fundamentals Cybersecurity

January 2026

↗

COMPLETED

Fortinet NSE 1

Network Security Associate & Threat Landscape

↗

IN PROGRESS

AWS Certified Solutions Architect – Associate

Certification preparation

↗

IN PROGRESS

Linux Foundation Certified System Administrator

Certification preparation

↗

COMPLETED

Exchange Server 2019

Udemy · January 2022

↗

06 — CONTACT

OPEN TO MEANINGFUL CONVERSATIONS

Let’s make systems
work better.

For opportunities, technical conversations, or open-source collaboration, you can reach me directly.

ashish.alive2@gmail.com ↗

LinkedIn ↗GitHub ↗Résumé PDF ↓Résumé DOCX ↓

Making systemsmore secure.Keeping themresilient.

Reliable infrastructure is built through good engineering and clear thinking.

Experience builtin real environments.

System & Network Administrator

System & Network Administrator

Desktop Engineer

Bachelor of Science in Data Science

Diploma in Electrical Engineering

Ideas made operational.

OpenEstate — Real Estate CRM

SOC 2 Readiness Toolkit

AWS Security Baseline

SIEM Implementation

Zabbix Monitoring Deployment

Azure Blob Storage Controls

Broad context.Practical depth.

Network & perimeter

Systems & identity

Security operations

Cloud & resilience

Monitoring & operations

Governance & platforms

Learning thatkeeps moving.

ISC2 Certified in Cybersecurity (CC)

Fortinet Certified Fundamentals Cybersecurity

Fortinet NSE 1

AWS Certified Solutions Architect – Associate

Linux Foundation Certified System Administrator

Exchange Server 2019

Let’s make systemswork better.

Making systems
more secure.
Keeping them
resilient.

Experience built
in real environments.

Broad context.
Practical depth.

Learning that
keeps moving.

Let’s make systems
work better.