AJMAL MAHMOOD
IT Operations Network Management Cloud Engineer DevOps
469-***-**** *******@*******.*** linkedin.com/in/ajmalmhd USA Work Authorization Plano, Texas Summary
Solution-oriented IT professional with 12+ years of experience designing, deploying, and maintaining robust system, network and cloud infrastructure. Expert in Azure administration, automation, and security best practices. Proven track record of optimizing cloud resources, reducing operational costs, and ensuring high availability in dynamic, fast-paced environments. Strong communicator and collaborative team leader dedicated to delivering business value through technology. Education
Indiana Wesleyan University,Indiana, USA
Pursuing Master’s in Computer Information System, AI Specialization 06/2025-12/2026 Jawaharlal Nehru Technological University,Hyderabad, India Bachelor’s in Electronic & Communication Engineering 05/2004–05/2008 Skills
Networking: Cisco Juniper, Fortinet Cloud Computing: Microsoft Azure, AWS MDM: Jamf Pro, Microsoft Intune Tools: Terraform, Ansible, Jenkins, Docker, Kubernetes, Git, GitHub, GitLab Database: MongoDB, MariaDB Monitoring: Prometheus, Elk, Nagios Programming & Scripting: Python, Bash, PowerShell Server: Windows Server, Nginx, Apache OS: Ubuntu, macOS Antivirus: Sophos, Microsoft Defender Endpoint Key Achievements
System Integration: Streamlined software products and services by consolidating multiple platforms, improving efficiency and reducing complexity.
Achieved Cost Savings: Consistently negotiated with suppliers and vendors to reduce costs and optimize IT procurement, achieving long-term value and budget efficiency.
Project lead at Queen's School: Took the lead on key IT projects at Queens School due to budget constraints, effectively handling multiple roles and delivering results without compromising quality 10+ Years in IT at ACS Doha: Served over 10 years as a trusted IT Specialist at ACS Doha International School, contributing to the school’s growth and digital transformation through the implementation of robust IT infrastructure, Edtech solutions, and cross-platform device management.
Certification & Courses
CCNP Certified- CSCO11584488
CCNA Certified- CSCO11584488
Azure Administrator AZ 104- Attari Classes
AWS Solutions Architect SAA C03- Attari Classes
Experience
Queen’s Qatar School Doha, Qatar
IT Operations Lead 08/2024 - 12/2024
● Managed a secure and efficient enterprise IT environment by administering Cisco Meraki network devices (MX250 firewalls, MS425/MS225 switches, MR46/MR36 access points) with robust firewall rules, VLAN segmentation, SD-WAN, and advanced threat protection. Oversaw Cisco IP phone systems, ensuring redundancy, QoS, and consistent configuration for seamless communication.
● Administered user identities and access via Microsoft Azure portal using role-based access control (RBAC) and Azure Active Directory (Azure AD), enforcing least-privileged permissions and multifactor authentication (MFA). Configured and maintained conditional access policies based on device compliance, user risk, and location to secure Microsoft Teams and other applications. Implemented single sign-on (SSO) solutions via Azure AD to streamline user access.
● Managed Microsoft Surface laptops and iPads through Microsoft Intune, applying security baselines, endpoint protection, and compliance policies integrated with Azure AD to enforce device health before granting resource access. Leveraged Azure Privileged Identity Management (PIM) for just-in-time administrative access, reducing standing privileges and enhancing security posture.
● Deployed and monitored security tools including Microsoft Defender for Cloud, Azure Firewall, and Azure Key Vault for threat detection, network filtering, and secure secret management. Adopted a Zero Trust security model, continuously authenticating and authorizing every access request while encrypting sensitive data at rest and in transit.
● Governed Azure resources using Azure Policy and Management Groups to enforce compliance, manage resource hierarchy, and automate remediation. Utilized Azure Monitor and Microsoft Sentinel for centralized security monitoring, alerting, and incident response. Maintained operational excellence through documented procedures, run books, and automation workflows to standardize change management, disaster recovery, and routine maintenance.
● Supported organizational applications such as iSAMs and learning platforms, deployed Paper cut print management software, and collaborated with contractors and suppliers for procurement and technical support, ensuring seamless service delivery. ACS Doha International School Doha, Qatar
IT Solutions Engineer 12/2013 - 07/2024
● Managed enterprise-grade network infrastructure with Cisco C9500 core and C9300 distribution switches, supporting 600+ concurrent devices.
● Configured Cisco 9800-L Wireless Controller with 9115AX access points, achieving 99.9% campus-wide uptime.
● Enforced granular firewall rules aligned with PCI-DSS standards, significantly reducing unauthorized access attempts.
● Hosted and maintained critical IT services (AD, DC, DNS, DHCP) with 99.99% availability, improving VM provisioning time by 30% via automation.
● Optimized macOS Caching Server for 680+ Apple devices, cutting update bandwidth usage by 45%.
● Integrated 13 RICOH follow-me printers with badge-based authentication, reducing unauthorized print jobs by 75%.
● Deployed endpoint protection across 300+ endpoints, successfully neutralizing 98% of threats before execution.
● Managed 1,000+ user accounts using RBAC policies, streamlining SSO integration for 15+ educational platforms.
● Administered Exchange Online for 1000+ mailboxes, blocking several phishing attempts/month through Microsoft EOP.
● Deployed and monitored PRTG Network Monitor, cutting mean ticket resolution time by 25% through real-time insights.
● Enabled seamless hybrid integration between on-premises infrastructure and Azure, ensuring regulatory compliance.
● Managed Azure resources (VMs, storage, networking) supporting mission-critical academic and admin services.
● Implemented Azure Backup and Site Recovery, ensuring high availability and disaster recovery readiness.
● Utilized Azure cost analytics to optimize cloud usage, maintaining budget compliance and cost efficiency. Al Maha Academy,Doha, Qatar
IT Administrator 12/2011 - 12/2013
● Maintained and managed the school's LAN and WAN infrastructure, ensuring robust connectivity and supporting high usage demands with distributed switches and wireless access points throughout the campus.
● Ensured reliable, high-speed internet access for all classrooms and administrative areas by proactively monitoring network performance and optimizing bandwidth allocation.
● Implemented and maintained network security protocols, including firewalls, antivirus software, and intrusion detection systems, to safeguard against cyber threats and protect sensitive student and staff data.
● Oversaw the acquisition, installation, and maintenance of computers, printers, servers, and other hardware, standardizing devices where possible to streamline support and future upgrades.
● Managed software licensing, updates, and patches for operating systems and educational applications, automating routine tasks to maintain compliance and minimize vulnerabilities.
● Troubleshoot hardware and software issues promptly, leveraging network monitoring and alert systems to minimize disruptions to teaching and learning.
● Provided technical support for students and staff, resolving hardware, software, and network issues efficiently to ensure a seamless educational experience.
● Delivered training sessions and workshops to enhance user proficiency with educational technology tools, supporting effective and confident technology use
● Created clear documentation and user resources to empower students and staff to independently resolve common technical problems, reducing repetitive support requests
NGN Qatar,Doha, Qatar
Network Engineer 06/2010 - 08/2011
● Project management & planning (scope, schedule and cost), site walk for assessment
● Set up the brainstorming sessions with the business to identify the problem and come up with solutions to optimize the current process
● Setup gatekeeper meeting for team engagement and coordination with cross-functional teams
● RFQ process with vendors, quote review with technical, physical & compliance specialist
● Project transition to O&M team after completion, security equipment inventory management
● Setup meetings and communication with stakeholders on status/achievements, corporate project PMs, IT, Network, Infrastructure, procurement team within PG&E
● Deployed network devices—including routers, switches, firewalls, and access points—according to approved network design, ensuring alignment with organizational architecture and security requirements
● Configured network protocols, VLANs, routing protocols, and security policies to optimize network performance and uphold data confidentiality, integrity, and availability
● Tested and validated network configurations to confirm they met performance benchmarks, security standards, and compliance requirements before full deployment
● Collaborated closely with IT teams, stakeholders, and vendors to coordinate network-related projects and ensure successful implementation of new initiatives
● Communicated complex technical concepts and recommendations in clear, accessible language to nontechnical stakeholders, including management and end-users.
● Developed and delivered training sessions and comprehensive documentation to help users understand and adhere to network policies and procedures
● Implemented proactive network monitoring tools to identify and resolve issues such as congestion, bottlenecks, and security threats, ensuring network reliability and minimizing downtime Projects
● Al Maha Academy: Part of commissioning in a datacenter ensures all components, including servers, storage systems, networking devices, power distribution units, and cooling systems, operate cohesively and efficiently.
● ACS Doha School Campus Migration: Actively involved in migration strategy with a systematic and carefully planned approach to transferring data, applications, and other technology assets from one environment to another. Also, involved in a series of steps and considerations to ensure a smooth and successful transition while minimizing disruptions to business operations.
● ACS Doha School Decentralization with UK: Decentralized from the UK campuses and migrate from UK domain to new domain
& transfer all devices & equipment onto new domain (Artemis Education).