Shehab A.

With over 6 years of hands-on experience managing complex IT environments, I specialize in deploying, securing, and optimizing infrastructure across Windows Server and Linux-based systems, both on-premise and in the cloud. I’ve built, maintained, and scaled critical services for fast-growing businesses, from high-availability web servers and SQL databases to endpoint protection and remote monitoring systems. Here's what I specialize in: Servers & Virtualization: Expert in managing Windows Server (2012R2, 2016, 2019, 2022) and Ubuntu/Debian servers across DEV, STAGING, UAT, and PROD environments. Highly experienced in deploying, performing in-place upgrades, optimizing performance, and live migrating VMs hosted on Hyper-V and VMware. Strong focus on high availability, failover clustering, replication strategies, storage optimization (NTFS/ReFS), and full infrastructure documentation with redundancy and business continuity planning. Infrastructure & Cloud: Proficient in designing and managing infrastructure including Nginx and Apache web servers, reverse proxy configurations, load balancing, and SSL management using Let’s Encrypt and Certbot. Experienced in DNS and domain management across Cloudflare, IONOS, and Namecheap, including routing, caching, and security layers. Skilled in provisioning and managing cloud environments on Microsoft Azure and Oracle Cloud Infrastructure (OCI), including VM deployment, networking, storage, and cost optimization. Automation & Scripting: Advanced experience in PowerShell, Bash, and Ansible to automate patch management, reporting, system health checks, backup operations, and full infrastructure deployment. Built scheduled and event-driven automation using CRON, Windows Task Scheduler, WSUS, and RMM platforms. Focused on reducing manual workload, improving consistency, and ensuring repeatable, error-free operations across environments. Security & Monitoring: Configured and managed enterprise-grade security solutions including Bitdefender GravityZone, Microsoft Defender for Endpoint, Huntress, SentinelOne, and CrowdStrike. Experienced in threat detection, incident response, endpoint hardening, and compliance alignment. Performed vulnerability assessments and penetration testing using tools such as Burp Suite, Nmap, and Nessus. Deployed and maintained RMM and monitoring solutions including NinjaOne, ConnectWise, and Microsoft Intune for centralized visibility and proactive system management. Backup & Disaster Recovery: Designed and implemented robust backup and disaster recovery strategies using Veeam Backup & Replication, Hyper-V checkpoints, and SQL backup solutions. Integrated cloud storage such as Wasabi for offsite backups. Conducted regular disaster recovery testing, failover validation, and recovery optimization to ensure data integrity and minimal downtime across both physical and virtual infrastructures. Vendor & Client Collaboration: Worked closely with solution providers including Bitdefender, ConnectWise, Wasabi, NinjaOne, and Microsoft partners to optimize tooling, streamline operations, and secure cost-effective solutions. Experienced in vendor negotiations, solution architecture alignment, and delivering services that balance technical performance with business requirements while maintaining clear and professional client communication.