Infrastructure & Security Engineer — networks, cloud, and security operations.
IT professional with 5+ years keeping multi-site infrastructure online and secure. I work across network engineering, security operations, and Microsoft 365 — from VLAN segmentation and firewalls to incident response and cloud workloads.
Profile
I'm an IT infrastructure and security professional based in Edmonton, Alberta, currently keeping the lights on across a multi-site manufacturing environment. My day-to-day spans firewall administration, endpoint security, network operations, and cloud infrastructure — the full stack of keeping a real business running.
I like the work where reliability and security meet: segmenting networks so a problem can't spread, hardening a perimeter without slowing people down, and turning a noisy alert into a clear answer. I document what I build so the next person — including future me — can pick it up without guesswork.
Lately I've been leaning into automation and cloud: scripting onboarding workflows, hardening Cloudflare and AWS workloads, and building internal tools that take repetitive work off the team's plate.
Capabilities
Hands-on experience across infrastructure, security, and cloud environments.
Work history
Building and maintaining enterprise infrastructure at scale.
Durabuilt Windows & Doors
Arcadis (formerly IBI Group)
Notable work
Hands-on initiatives that improved security, resilience, and efficiency.
Redesigned a flat network by implementing VLAN segmentation to isolate production, office, and IoT traffic — reducing lateral-movement risk and improving performance across 7 sites.
Deployed a secondary Domain Controller to eliminate a single point of failure in authentication, improving AD replication and ensuring continuity for 400+ users during primary DC maintenance.
Implemented Business-tier WAF hardening with custom rule expressions in front of public services, layered through a Cloudflare / FortiGate / IIS architecture, and documented it in a runbook for the team.
Built a repeatable IR process for phishing campaigns and account compromises — using Darktrace and SentinelOne for detection, then producing clear remediation reports for leadership.
Supported AWS infrastructure work — connectivity testing, EC2 administration, and evaluating a backup strategy (AWS Backup vs. Veeam) — coordinating on-prem AD with cloud workloads during cutover.
Rolled out Windows Autopilot across offices to enable zero-touch provisioning — cutting new-device setup time and ensuring a consistent baseline configuration across all endpoints.
Designed and built a full IT inventory system covering hardware assets, software licenses, and PR/PO workflows — backed by a SQL Server database with a JavaScript front end for real-time tracking.
Automated user onboarding with ManageEngine ADManager Plus and a REST API integration — provisioning accounts and a branded welcome workflow to remove repetitive manual setup for the team.
Get in touch
Open to opportunities in infrastructure, network administration, security operations, and systems engineering.
sukhman@pbkx.ca