Syed Zaheer Shaffi
****************@*****.***
Professional Profile
IBM certified deployment Professional and an experienced and result oriented IT professional with an experience of 5 plus years of Enterprise level deployment, configuration, integrations, administration, Disaster and backup recovery with technical support and primarily delivering solutions to Enterprises based on below technologies.
Middleware Technologies: IBM WebSphere Network Deployment Tool, Red hat JBOSS Enterprise Application Platform EAP and Microsoft Internet Information Services IIS.
Monitoring Technologies: IBM Application Perforations Management, IBM Tivoli Monitoring and Zabbix
Security Technologies : IBM Security Identity and Access Manager, IBM Privilege Identity Manager, IBM QRadar SEIM, IBM BigFix Endpoint Management.
SOA\ESB Technologies: IBM Integration Bus, IBM APP Connect, IBM DataPower and IBM WebSphere MQ
Container Technologies Docker and Kubernetes,Redhat OpenShift.
Virtualization Technologies: VMware ESXI.
API Management Tools: IBM API Management v5.0.8, IBM API Management Cloud 2018xx..
Databases technologies: IBM Db2, Microsoft SQL server, Oracle 11g and 12g, MYSQL.
Cloud Technologies: IBM Cloud private, IBM Cloud Application performance Tool.
LDAP Technologies: Microsoft Active Directory, IBM Tivoli Directory.
MQ Technologies: IBM WebSphere MQ, Apache MQ and Red hat MQ.
Web Server Technologies: IBM HTTP Server, Apache Tomcat.
Certifications, Training, & Education
IBM Certified Deployment Professional – Security Identity Manager V 6.0
IBM Certified System Administrator-Connection 4.0
Certificate of Completion Docker
Certificate of Completion Kubernetes Administrator (CKA)
Sophos Certified in End User Protection
Training of VMware NSX 6.2
Training of CCNA
Training of Active Directory 2012
Bachelor in Telecommunication and Network (Networks and Software Eng.), PAF-KIET (Pakistan Air Force-Karachi Institute of Economics and Technology), Pakistan - 3.0 CGPA out of 4.0
Matriculation from Karachi board of intermediate Education – Grade A - 73 %
Trainings Conducted
IBM Tivoli Identity Manager V6.0 Basic Implementation
A five day training for Administrators and Implementers.
Conducted Training for Meezan Pvt.Ltd, Pakistan.
IBM Tivoli Identity Manager V6.0 System Administration
A three day training/POC for Administrators.
Conducted Training for Meezan Pvt.Ltd, Pakistan.
Conducted POC for Summit Bank Pvt.Ltd, Paskitan.
IBM Tivoli Access Manager for ESSO 8.2 Deployment and Administration
A four day training/POC for Administrators and Implementers.
Conducted Training for Meezan Bank, Pakistan.
IBM Application Performance Monitoring 8.1.4
A 1-week POC and training for administrators.
Deployed the IBM Application performance monitoring advanced 8.1.4 in Bank Alfalah.
Deployed the IBM Application performance monitoring advanced 8.1.4 in 1LINK Limited.
IBM Security Privileged Identify Manager 2.1.0
A 1-week POC and training for administrators.
Conducted Training for Soneri Bank Limited.
Conducted POC in Meezan Bank.
IBM API Connect V 5.0.8 in 1Link
Provide Deployment, Configuration and administration training. In 1LINK Limited and United Bank Limited.
IBM IIB Administration Training
Provide Deployment, Configuration and administration training in United Bank Limited and Bank AL Habib Limited.
Technical Skills
Strong virtualization knowledge, especially VMWare ESX/ESXi.
Strong knowledge of (switching / routing, VLAN’s, IP, TCP/IP, NAT, VPN’s etc.), firewalls, load balancers in Network Areas.
Experience working in a Scrum Agile Environment, Problem Solving, System analysis and Trouble Shoot.
Experience with continuous software deployment.
Experience with cloud computing services AWS.
Solid Experience with UNIX (Solaris 2.x, HP UNIX), Window 2000, 2008, 2012/NT/95/and Newer Versions, AIX Power HA, and RHEL 6.x.
Experience administration and troubleshooting of IBM products.
Scripting (PowerShell, VBScript, Batch, etc.)
Programing skills C# Sharp, VB.Net, ASP.Net, SQL procedures.
Professional Experience
Systems Limited – Senior Software and Infrastructure Engineer (Jun, 2018 till date)
oWorking on IBM WebSphere suite of products including MessageBroker/IIB, IBM MQ, IBM BPM, IBM ODM, IBM Security Identity Manager; and ESSO, IBM Privilege Identity Manager, IBM API Connect, IBM RPA, JBOSS, IBM HTTP, IBM Application Performance Management.
oDeployment of IBM WebSphere suite of products with 24/7 availability and provide Infrastructure and technical support to our clients in IBM principles including Disaster recovery, migration and housekeeping of data to local banks (Pakistan) and international clients located in UAE and USA.
oBuild and maintain all critical IT infrastructure including Virtualization, Servers, Storage, Load Balancing, Firewalls, and Networking.
oImplements and deploys Windows and Linux based systems to support business objectives including pre-production and production areas.
oProvides on-call support to resolve and/or escalate production incidents or issues outside normal working hours including support during software deployment/release activities.
oCollaborates with other infrastructure teams, software engineers, business analysts, and other company stakeholders to gather requirements and implement systems to meet business and technical objectives, SLAs, availability needs, and capacity requirements including high availability, farms/clusters, and disaster recovery.
oParticipates in all phases of systems development, deployment, configuration, and monitoring including performance and availability, alerting, data integrity, security and capacity planning.
oPerforms all tasks in accordance with Agile project management methodologies, adhere to version & release management, scheduling, change control, security and applicable operational policies and procedures.
oCreates and maintains system procedural and technical documentation.
oPerforms other tasks including patching, maintenance, and administration of systems and applications as needed to meet the requirements of the business and objectives of the team.
oDemonstrate the POC’s to clients according to there needs to support business objective.
Skill Orbit Private Limited. – Team Lead and IBM Tivoli Security Consultant (Feb, 2016 till June 2018)
I worked at Skill Orbit as an IBM Team lead and Technical Consultant specializing in Security. I provided Identity and access security to clients below is my expertise
Identity & Access Management with privilege Identity Specialist
oTroubleshooting and resolving access management and provisioning workflow errors
oPerform Identity and access management activities
oExecute and track security process related activities including User ID management
oManage operations within the IAM environment at the client, including application patching, security vulnerabilities and upgrades and certificate management
oEstablishes and maintains good working relationships with all IAM customers
oUnderstand and refine a Role Based Security framework. Produce schema designs and operational plans to enforce and maintain identity management workflows
oParticipate in development of roadmaps and participate in the standards process for Identity and Access Management (IAM) solutions
oPromote effective teamwork, mentor employees, and evaluate individual performance
oManages the strategy and roadmap implementation for Identity and Access Management Platform Tools
oManage identity and access management support to business and technical teams in the design of standardized products and customized solutions
oHands-On integration experience for Lotus Domino, Active Directory, Custom Adapter for Oracle HRMS application, IBM Portal, IBM TSRM, LINUX, and windows local systems for managing account provisioning.
oHands-on architect and developer of a comprehensive IAM system that addresses the challenges of a very complex development and production environment
oWork with the project teams on implementing the defined business Roles within Access & Identity Management (AIM) solution
WebSphere Administrator & Support
oTo provide above stated coverage on all public holidays, on-call support, dedicated weekend support etc. are mandatory paid overtime work
oParticipate in process improvement, knowledge sharing within the team & across streams
oLiaise with various teams for the planned work
oParticipation in incident & problem management
oAdministration & Troubleshooting Issues with the Application Servers Instances
oGeneral support coverage.
oAnswering general questions regarding development and infrastructure
oView performance information about server and application components
oCompetent to work at the highest technical level of all phases of applications server activities
oUse Application Server administrative tools to configure and manage enterprise applications
oMay be involved in providing 24x7 on-call support of middleware applications as part of rotating team coverage
oPerform requested web application server upgrades including planning, scheduling, coordination, and deploying
oBasic networking concepts (TCP/IP, host file, Virtual Hosts and HTTP/HTTPS traffic)
Viftech Private Limited – Security Analyst (From June, 2015 to Feb, 2016)
Identity & Access Management and IBM Privileged identity Manager Specialist
oTroubleshooting, Updating and resolving access management and provisioning workflow errors.
oPerform Identity and access management activities
oExecute and track security process related activities including User ID management
oManage operations within the IAM environment at the client, including application patching and upgrades and certificate management
oEstablishes and maintains good working relationships with all IAM customers
oUnderstand and refine a Role Based Security framework. Produce schema designs and operational plans to enforce and maintain identity management workflows
oParticipate in development of roadmaps and participate in the standards process for Identity and Access Management (IAM) solutions
oManages the strategy and roadmap implementation for Identity and Access Management Platform Tools
oHands-On integration experience for Lotus Domino, Active Directory, Custom Adapter for Oracle HRMS application, IBM Portal, IBM TSRM, LINUX, and windows local systems for managing account provisioning.
oHands-on architect and developer of a comprehensive IAM system that addresses the challenges of a very complex development and production environment
oWork with the project teams on implementing the defined business Roles within Access & Identity Management (AIM) solution
oPerforms other tasks including patching, maintenance, and administration of systems and applications as needed to meet the requirements of the business and objectives of the team.
oResolve the systems and application level vulnerabilities to make systems and solution secure according to security standard.
oDemonstrate the POC’s to the clients according to there needs to support business objective.
Lucky Knits Private limited – MTO (Management Trainee officer)(June 2014 to May, 2015)
oSoftware Developer.
oAdministration of Local Area Network.
oSystem Troubleshooting.
Key Projects
Project Name: RPA (Robot Process Automation)
Client: Allied Bank Pvt. Ltd – Pakistan
Employer: Systems Pvt. Ltd
Role: Senior Software Engineer
Contribution:
oDeployment and Administration of RPA in UAT with standalone and in production with High Availability architecture.
oConfiguration of the integrated systems with SSL configuration.
oFixed Vulnebilities of the all Servers.
oProvide Technical Support of overall environment.
oHousekeeping and DR support.
Project Name: Telenor Payment Gateway
Client: Telenor Pvt. Ltd – Pakistan
Employer: Systems Pvt. Ltd
Role: Senior Infrastructure Engineer
Duration: June 2017 – Oct 2019 (On going Technical Support)
Contribution:
oDeployment and Administration of TPG Environment with 24/7 high availability on IBM WebSphere, IBM HTTP Server. Redhat MQ.
oConfiguration of the integrated systems with SSL configuration
oFixed Vulnebilities of the all Servers.
oConfigured SSL on IBM WebSphere Network Deployment on DMGT and Node Level.
oOngoing Provide Technical Support of overall environment.
oDeployment Apache TomCat server for Rest Services.
Project Name: Etisalat BPM Implementation
Client: Etisalat UAE
Employer: Systems Pvt. Ltd
Role: Senior Infrastructure and support Engineer
Contribution:
oDeployment and Administration of IIB and MQ with multi Instance configuration (Active- Active Mode)
oDeployment of BPM v8.6 on Linux.
oMigration of Single instance architecture to multi instance
oProvide technical support of IIB and MQ environment
oOngoing Technical Support.
Project Name: Meezan Bank BPM Implementation
Client: Mezan Bank Limtied
Employer: Systems Pvt. Ltd
Role: Senior Infrastructure and support Engineer
Contribution:
oDeployment and Administration of BPM v8.6 with WebSphere on Solaris.
oDeployment of IBM FileNet 5.5.2 on WebSphere for the document management and integrate it with BPM and configured IBM HTTP server at front end for load balancing the request within cluster.
oConfigured LDAP and SSL on WebSphere to make an environment Secure.
oDeployed Red hat JBOSS for the services.
oProvide technical support of infrastructure and all middleware components including fix packs, WebSphere vulnerabilities.
oOngoing Technical Support.
Project Name: UBL IIB SOA Implementation
Client: United Bank Limited Pakistan
Employer: Systems Pvt. Ltd
Role: Senior Software Engineer
Duration: March 2016 – Nov 2019
Contribution:
oDeployment and Administration IBM API Connect Cluster Environment and IIB/MQ with multi Instance configuration (Active- Active Mode) with Standby Architecture achieved by cross over topology on Linux Platform
oMigration of SOA Services from Windows Environment to Linux
oSSL configuration Security Enablement on IIB.
oProviding technical support of IBM API Connect and IIB/MQ environment
oFixed Vulnebilities of the all Servers.
Project Name: APP Connect and API Connect 2018
Client: TCS (Touring Club Schweiz) – Switzerland
Employer: Systems Pvt. Ltd
Role: Senior Technical and Infrastructure Support Engineer
Duration: May2019 – Nov 2019
Contribution:
oDeployment and Administration of API Connect 2018 with Cluster to support High Availability Environment and APP Connect with multi Instance configuration Active –Standby Architecture achieved by cross over topology on Linux Platform under the supervision of my Manager.
oSSL configuration Security Enablement on App Connect
oConducted Deployment Training of IBM APP Connect and API Connect 2018 with my supervisor.
Project Name: IBM API Connect V5.08
Client: Allied Bank Private Limited 1link Private Limited United Bank Limited
Employer: Systems Pvt. Ltd
Role: Senior Software Engineer
Contribution:
oDeployment, Administration and configuration of API connect.
oFixed Vulnebilities of the all Servers.
oProvide Technical Support of overall environment.
Project Name: Security Identity Manager with SSO
Client: Meezan Bank Pvt. Ltd – Pakistan
Employer: Skill Orbit Pvt-ltd.
Role: IT Security and Infrastructure Engineer
Duration: March 2015 – Oct 2015
Contribution:
oDeployed On IBM WebSphere with 2 Nodes (Cluster ) and configured IBM HTTP Server at frond end to provide load balancing.
oPrepared Requirements Document with Customer
oCaptured ISIM identity life cycle.
oDefined organizational tree, organizational roles, identity policies, password policies and provisioning policies on development and production environment.
oTested the setup and placement rules.
oBackup of ITIM.
oAdded, updated and removed ITIM configurations from production environment.
oRan reconciliation and took initial feed from AD.
oSupported Meezan admins for testing on production environment.
oProvided ISIM training
oIntegrated ISIM with Active Directory
oIntegrated ISIM with TAM ESSO
oIntegrated ISIM with IBM Lotus Notes.
oIntegrated ITIM with Oracle HRMS(Custom Adapter)
What We Achieved:
The target environment was composed of the following technologies:
Microsoft Active Directory, IBM WebSphere Portal, IBM Lotus Notes, and Tivoli Service Request Manager
Achieving automatic account provisioning on the above listed target resources by integrating them with IBM Security Identity Manager
Achieve Single Sign-On for the above listed target resources by integrating Security Identity Manager with IBM Enterprise Single Sign-On and configuring the SSO plugin in ISIM.
Recertification policies and lifecycle rules apply on each ID means all the access is suspended after an employee leaves and ID is automatically deleted (via recertification policy) if it is unused for a specified time period
Project Name: IBM Bigfix Patch Management
Client: United Bank Limited (UBL) – Pakistan
Employer: Skill Orbit Pvt. Ltd.
Role: IT Security and Infrastructure Engineer
Duration: May 2016 – Feb 2017
Contribution:
oPrepared Requirements Document with Customer
oAnalyze UBL current Patch Management Strategy
oIntegrated Bigfix with Active Directory
oBack-end Network Side Support For BigFix
What We Achieved:
The target environment was composed of the following technologies:
Microsoft Active Directory, Microsoft System Security, Microsoft WSUS, Linux And Windows Operating Systems.
Replace Microsoft system center with IBM Bigfix that provides a management platform for addressing security, power and patching issues in Windows and Linux/Unix computing environments.
Bigfix enables the delivery of updates, patches, security upgrades, and software applications in UBL. It is used for the convenience of all employees as well as for improved desktop support.
Project Name: IBM Application and Network Monitoring Solution
Client: Pakistan Stock Exchange– Pakistan
Employer: Skill Orbit Pvt. Ltd and IT-Perception
Role: IT Security and Infra Structure
Supervisor: David Pridemore Director Perception-IT, London
Duration: April 2017 – Jun 2018
Contribution:
oPrepared Requirements Document with Customer
oAnalyze PSX application service, and network architecture and hardware’s for monitoring.
oDeployed NOI suits which is included six products of IBM named ITM, ITNM, NPI, Omni Bus and Jazz-SM.
oIntegrated all the software’s for centralize data.
oConfigured all alarm situations according to PSX environment and his daily basis issues.
oFixed Vulnebilities of the all Servers.
What We Achieved:
The goal of this project is to monitoring the overall application services that’s is running in the Pakistan stock exchange named KITS,KATS and Web-Portal with the Network switches and router monitoring as well with severity alarm feature.
Personal Attributes
Quick learner can pick up most software and/or hardware knowledge rapidly. Able
To work both independently and in highly collaborative environments. Resourceful,
Pro-active with a positive attitude, confident in solving challenging tasks
And dealing with time-intensive tasks
Personal Information
Name: Syed Zaheer Shaffi
Father Name: Syed Shaffi Muhammad Zaman
Cell No: +92-336*******
Marital Status: Single
Nationality Pakistani
Birth Date: 19-Nov-1992
Address: House 16/19 Sheet 17, Model Colony Karachi, Pakistan
References
Available On Request.