Summary

DevOps engineer with extensive experience in managing Linux and Windows systems, virtualization, and network services. Skilled in deploying and maintaining services such as Active Directory, Zabbix, GitLab, and VMware vCenter. Certified in LPIC, VMware, Microsoft, and MikroTik. Highly creative in solving problems even without background knowledge and adept at maximizing minimal resources.

Skills

• Programming Languages: Bash, Python, PowerShell
• Operating Systems: Ubuntu, Debian
• Virtualizations: VMware ESXi, VMware vCenter, Hyper-V
• LDAP Softwares: Active Directory, OpenLdap
• Backup and Replication: VeeAM Backup
• Version Control Systems: Git
• CI/CD Tools: Gitlab CI
• Containers: Docker, LXD, LXC
• Networking, Security and Protocols: OS Model, DNS, HTTPS, SSH, SSL/TLS, HTTP, FTP/SFTP, Mikrotik, Wireshark
• Configuration Management: Ansible
• Infrastructure Monitoring: Zabbix, Prometheus, Grafana
• Logs Management: ELK/EFK Stack
• Linux shell tools: htop, iotop, ps, iostat, nmap, dig, tcpdump, traceroute, sed, vim, scp, netstat, mtr, ethstatus, bmon & etc
• Atlassian tools: Jira, Confluence

Experience

DevOps Engineer

2019 - 2025

• Deployed Active Directory for authentication and authorization.
• Configured Domain Controllers and RODCs across 40 datacenters.
• Implemented services such as RDS, OwnCloud, CoreDNS, and VMware vCenter.
• Set up Zabbix to monitor 5500 devices using PostgreSQL and TimeScaleDB.
• Deployed GitLab, Rocket.chat, Jira, and Confluence.
• Installed Microsoft Exchange and ELK stack.
• Managed VM backups using VeeAM.

Linux Engineer

2017 - 2019

• Configured and maintained Linux servers and network services.
• Automated DNS management using Bash and PowerShell.
• Developed a tool to synchronize datacenter data into NetBox.
• Configured OpenLDAP for 5000 Linux systems.
• Improved PostgreSQL performance through clustering.

Languages

• English: B1
• Persian: C2

Certifications

• Network+
• LPIC1, LPIC2, LPIC3-300 Mixed Environments
• VCP5-DCV
• MCSE
• MTCNA

Selected Weekend Projects

rke2-installer

• rke2-installer is a fully automated installer script for deploying Rancher Kubernetes Engine 2 (RKE2) on Ubuntu 22.04 (Jammy). It validates root privileges and OS version, installs Docker CE, fetches and installs RKE2 and Helm binaries, prepares required images, sets up environment variables, and provides clear post-install guidance.

ceph-installer

• Ceph-Installer is a lightweight Bash automation toolkit designed to install and configure Ceph clusters on Ubuntu 22.04 (Jammy) nodes using Docker CE as the container engine instead of Podman.

dns-dpdk

• This project is a high‑performance DNS traffic capture and statistics solution, written entirely in C and powered by the DPDK (Data Plane Development Kit) framework for maximum efficiency. It consists of several components working together inside a virtualized environment to capture, mirror, and visualize DNS traffic in real‑time.

Hdns

• Hdns is a High-Performance, production‑oriented DNS responder designed for high concurrency with a single shared UDP socket, fan‑in/fan‑out threading, local A/PTR records, optional wildcard/regex matching, and upstream forwarding. It avoids common pitfalls like uneven kernel packet distribution with SO_REUSEPORT and malformed DNS response formatting that breaks dig.

TLS-Fission

• TLS‑Fission is a lightweight TLS interception and forwarding proxy written in pure C (C11) using OpenSSL and libcurl. It acts as an HTTPS termination gateway which decrypts inbound client connections, logs full HTTP requests, and safely forwards them to an upstream target using a new secured TLS session.

the-hand

• The Hand Project is a secure credential and record management platform written in Python (Flask + PostgreSQL). It supports dual authentication modes (Active Directory or Local Database) and includes user‑friendly utilities to manage users and records.

zabbix-installer

• This script automatically installs and configures Zabbix 7.0 on Ubuntu 24.04 (Noble). It sets up all required repositories, PostgreSQL 16 with TimescaleDB extension, and Apache + PHP frontend environment.

zabbix-fat-little-dump

• zabbix-fat-little-dump is a disaster-recovery–oriented PostgreSQL dump utility designed specifically for Zabbix 7 running on PostgreSQL 16 with default Zabbix schema and HA replication managed by repmgr.

powershell-scripts

• A complete automation toolkit for setting up Windows Server 2025 infrastructure – including Active Directory, DNS, Certificate Services, RDS, and more. Each PowerShell script in this repository is self-contained and designed for reliability, reproducibility, and minimal manual intervention.

griffin

• Griffin is a private, lightweight, high-performance container registry built with Flask and Gunicorn, designed for handling large Docker image uploads efficiently. It fully implements the Docker Registry HTTP API v2, supports JWT-based authentication, persistent namespace isolation, and anonymous pull access.

fio-disk-benchmark

• A lightweight and automated disk benchmarking toolkit built around FIO, designed to evaluate both throughput and IOPS performance for storage devices

harbor-ui

• A lightweight Flask‑based front‑end for Harbor container registry projects — providing a minimal dashboard to browse public repositories, cached locally for fast loading.