Asif Ramin
+1-240-***-**** ****.*****@*******.*** MD 20874 U.S.A https://www.linkedin.com/in/asiframin/ Fully Work Authorized No Visa Sponsorship Required PROFESSIONAL SUMMARY
Highly skilled and certified IT professional with 10+ years of experience in network and system administration, cloud infrastructure security, and end-user support. Proven ability to optimize IT operations, enhance security, and drive efficiency through strategic technology implementations. Expertise in Microsoft Azure, Active Directory, Intune, and various network management tools. KEY SKILLS
Cloud Security: Microsoft Defender for Cloud, Microsoft Sentinel, Azure Firewall, Application Gateway, Key Vault, API Management, Azure Kubernetes Cluster, EventHub, Azure Monitor, Terraform, CIS Benchmarks
Network Administration: Cisco Routers & Switches, Firewalls, TCP/IP, LAN/WLAN, VLAN, VPN, DHCP, DNS, UniFi Pro, Ekahau Pro, Sophos Next Generation Firewall, RED Devices, Fiber Optics
System Administration: Active Directory, Microsoft Entra ID, Group Policy, Windows Deployment Services, Exchange Server, VMware ESXi, PKI, Intune, Endpoint Protection
IT Support: Troubleshooting, Hardware/Software Installation, User Training, Ticket Resolution (Jira)
Certifications: AZ-500, SC-300, SC-900, AZ-900, Google IT Support Professional, MCITP PROFESSIONAL EXPERIENCE
Sr. Analyst Cloud and Infrastructure Security 03/2023 - 09/2024 Avanade & Accenture Milan, Italy
The company is the leading global provider of digital, cloud, AI and advisory services, industry solutions and design-led experiences across the Microsoft ecosystem
Deployed and managed Microsoft Defender for Cloud, Azure Firewall, and Application Gateway to secure Azure services
Provisioned and implemented Azure resources including Key Vault, API Management, Kubernetes Cluster, EventHub, and Azure Monitor using Terraform
Implemented Identity Access Management (IAM) solutions, integrating Microsoft AD DS and Entra ID
Utilized CIS Benchmarks and Microsoft best practices for Intune hardening across Windows, iOS, and Android platforms
Managed Public Key Infrastructure (PKI) for encryption and authentication systems in interbank environments Junior Network Engineer 06/2022 - 02/2023
MSDSystems lrs Milan, Italy
An IT consultancy company
Configured and maintained network layer 2 and layer 3 for diverse client networks
Enhanced network security by managing Sophos Next Generation Firewalls and RED devices
Improved wireless network coverage using UniFi Pro and Ekahau Pro
Configured and assessed Site-to-Site and Point-to-Site VPN tunnels
Installed and upgraded over 100 RED devices, improving operational efficiency System & Network Administrator IT Support Specialist 07/2014 - 08/2021 Ministry of Justice of Afghanistan Kabul, Afghanistan A public ministry (Worked for 7 Years in different positions in the IT department of the Ministry of Justice)
Managed PFSense firewalls, Cisco switches and routers, Access Points, UniFi Pro, VPNs, and storage area networks
Designed and installed network cabling for 2000+ employees and 40 security cameras, including data center infrastructure
Configured and managed Active Directory, Group Policy, Exchange server, DNS, and DHCP server
Implemented and optimized VMware ESXi virtualization, resulting in a 30% increase in operational efficiency & cost
Maintained system security and compliance, deploying antivirus solutions and monitoring network performance
Implemented Windows Deployment Services and provided comprehensive end-user support and training Network Administrator 04/2012 - 06/2014
3-Sport TV Kabul, Afghanistan
Designed and implemented network infrastructure using Cisco routuer & switches, fiber optic cables, and LAN/WAN technologies, connecting 1000+ devices
Managed Proxy Server, Active Directory, Domain Controller, DNS, DHCP, and virtualization environments
Optimized network performance by configuring Cisco Routers, Access Points, and Switches EDUCATION
Bachelor of Engineering, 04/2013 - 12/2017
Avicenna University Kabul, Afghanistan
PROFESSIONAL DEVELOPMENT
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
Microsoft Certified: Azure Security Engineer Associate (AZ-500)
Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
Microsoft Certified: Azure Fundamentals (AZ-900)
Google IT Support Professional
MCITP (Microsoft Certified IT Professional)