I work where IT operations and security engineering meet—making business systems stable, supportable, and harder to compromise.
IT ADMINISTRATION · CYBERSECURITY · CLOUD
Gauhar
Akhtar.
IT Administrator & Cybersecurity Engineer
I keep enterprise systems dependable and make security practical—from Windows Server and Active Directory to cloud migrations, endpoint hardening, and authorized application testing.
NAVI MUMBAI / MAHARASHTRA, INDIA
GA / FIELD PROFILE 0701 / PROFILE
Security is a practice.
Not a layer you add later.
A hands-on infrastructure administrator and security practitioner, building reliable operations through disciplined identity, hardened endpoints, and useful automation.
Systems & identity
Windows Server 2016/2019/2022, enterprise Linux, Active Directory, Group Policy, DNS and DHCP.
Hybrid infrastructure
Azure cloud migrations, Microsoft 365 and Zoho mail coexistence, Next-Gen Firewalls and endpoint controls.
Authorized security testing
Web application VAPT, vulnerability remediation, OS hardening, and clear audit documentation.
02 / CAPABILITIES
Tools are a means.
Systems thinking is the skill.
Explore the working toolkit by domain. Each discipline is connected to the others—operations, security, networking, and automation are not separate silos.
System administration
Build, maintain, and troubleshoot secure on-prem environments with consistent identity and policy controls.
03 / CAREER LOG
Trust is earned in the details.
Infrastructure and security work for financial and enterprise environments—measured by resilient services, reduced exposure, and time returned to the team.
Enterprise client work includes HDFC Bank, Aditya Birla Sun Life Insurance, and 360 ONE.
04 ROLES / MUMBAI · INDIA- Administer Windows Server environments: configuration, health monitoring, routine patching, and disaster recovery.
- Manage Active Directory user provisioning, security groups, OUs, and Group Policies (GPOs).
- Configure core network infrastructure: DNS, DHCP, LAN/WAN, Wi-Fi, VPN, and network devices.
- Monitor Next-Gen Firewall policies; conduct authorized VAPT on the corporate web portal and lead remediation.
- Managed endpoint security and IT infrastructure for three enterprise clients, supporting 500+ users across Windows and Linux.
- Hardened and patched 200+ endpoints, reducing critical unpatched vulnerabilities by approximately 40% in Q1.
- Deployed Microsoft Azure VMs and cloud networking services to support HDFC Bank migrations.
- Engineered PowerShell and Python automations, eliminating about six hours per week of manual administrative work.
- Managed 300+ Active Directory accounts: RBAC, access reviews, GPO enforcement, compliance documentation, and audit coordination.
- Conducted web application assessments, identifying HTML Injection, SQL injection, and cross-site scripting vulnerabilities.
- Tested CSRF, IDOR, and CORS misconfigurations using Burp Suite and OWASP ZAP.
- Participated in CTF challenges to strengthen exploit development and attack-surface mapping.
- Developed and launched the company’s official web portal, optimizing loading performance and mobile usability.
- Hardened network infrastructure and administered Windows Server environments while supporting service availability.
04 / EDUCATION
A technical foundation.
A security direction.
Bachelor of Technology — CSE, Cyber Security
Sagar Institute of Science & Technology (SISTec) / Rajiv Gandhi Proudyogiki Vishwavidyalaya
Higher Secondary Certificate — Science (PCM)
Loknete Ramsheth Thakur School & Jr. College, Kamothe, Navi Mumbai · Maharashtra State Board
Secondary School Certificate — General Science
St. Joseph High School & Jr. College, Kalamboli, Navi Mumbai · Maharashtra State Board
05 / SELECTED WORK
Small products.
Real security intent.
Selected builds where application design and practical defense meet.
BlogShield
A secure publishing platform with a defense-first product design—real access boundaries, careful input handling, and a responsive dark reading experience.
- Input sanitization, rate limiting, and secure API patterns
- Guest / Author / Admin role-based access control
- Markdown rendering, avatar uploads, toast feedback
PhishGuard
A browser extension that checks destinations against threat intelligence and blocks malicious URLs with Manifest V3 declarative rules.
- Google Safe Browsing and VirusTotal API integrations
- Fast blocking with Chrome Declarative Net Request
- 95% detection accuracy in project testing
06 / CREDENTIALS
Learning, in practice.
A growing record across network operations, defensive security, Python, and foundational cybersecurity.
Certified Network Security Practitioner (CNSP)
The SecOps Group
CCNA 1.0 — Introduction to Networks
Cisco Networking Academy
CyberOPS Associate
Cisco Networking Academy
Python Essentials 1 & Python Essentials 2
Cisco Networking Academy
Advent of Cyber 2024
TryHackMe
Cyber Security 101
TryHackMe
Pre-Security
TryHackMe
Cyber Security Essentials & Intro to Cyber Security
Cisco
Python Programming Masterclass
Udemy
07 / FIELD NOTES
Learning happens out there.
Workshops, community rooms, and hands-on labs that shaped how I think about security and infrastructure. Open any frame for its full-size view.
08 / OPEN CHANNEL
The next system
we secure could be yours.
Available for Enterprise Infrastructure, Security Engineering & Cloud Consulting roles.
Let’s make
systems stronger.
For roles, consulting work, security projects, or a good technical conversation—reach out directly.