Hamza Shafiq

Infrastructure & Network Engineering

• Modernized studio connectivity by architecting a high-availability SD-WAN solution using FortiGate 100E/90G, integrating dual WAN links for seamless load balancing and failover.
• Engineered a secure, segmented network environment using VLANs and Cisco Catalyst switches, enforcing 802.1X authentication to protect internal studio assets.
• Optimized wireless performance for creative teams by deploying UniFi U6 Pro/LR access points, utilizing heatmap analysis to eliminate dead zones in high-density areas.
• Established real-time infrastructure visibility by deploying a comprehensive monitoring stack (PRTG, Zabbix, and Graylog), reducing incident response time through proactive alerting and log analysis.

Cloud Operations & Hybrid Architecture

• Designed and deployed AWS cloud infrastructure, including VPC design with public/private subnets and granular Security Groups to host production workloads.
• Implemented secure remote access for in-house tools (Nakama, Jenkins, Metabase) via Nginx/HAProxy reverse proxies, bridging local development servers with cloud-based accessibility.

Identity Management & Strategic Operations

• Orchestrated Google Workspace Administration, managing complex organizational units (OUs), enforcing security policies, and executing seamless email migrations and Drive ownership transfers.
• Managed the full hardware/software lifecycle, from IT procurement and vendor negotiations to asset tracking and the creation of standardized SOP documentation.
• Enhanced team technical debt by mentoring junior IT staff on network troubleshooting and system administration, fostering a culture of continuous skill development.

• Provisioned and supported network connectivity for local ISP clients, ensuring stable internet access through proactive troubleshooting and technical support.
• Configured and deployed MikroTik routers for new client installations, managing basic routing tables and bandwidth allocations.
• Installed and aligned Ubiquiti (UniFi) Beam M5 wireless point-to-point links to establish high-speed connectivity for remote client sites.
• Administered RADIUS-based authentication via DMA to manage user access, billing profiles, and connection security for the ISP network.
• Performed initial setup of Cisco switches, including basic VLAN assignments and port configurations to support office and client infrastructure.