● Active Systems Practice • 19+ Years (Since 2007)

Engineering, securing, and stabilizing core enterprise IT infrastructure built to handle real-world operational stress.

I have been configuring, administering, and troubleshooting enterprise systems since 2007. Platforms have evolved from standalone Windows Server 2003 boxes to distributed hybrid cloud environments, but the core objective remains constant: building networks and compute layers that run predictably when real-world production load hits.

My work covers the physical and logical stack: structured copper and fiber plant backbones, perimeter UTM gateways (Sophos, SonicWALL, Cisco), clustered Hyper-V and VMware virtualization, AWS cloud foundations, and enterprise email security pipelines. I focus on making systems work cohesively without introducing unneeded layers or fragility.

          "The true test of infrastructure is not how it performs on day one under clean test conditions, but where it breaks under pressure: a neglected backup during a data crisis, a perimeter gateway that chokes on encrypted traffic, or flat subnets that allow an infection to spread sideways."
        

I prioritize direct engineering, measurable root cause resolution, and clean administrative documentation over temporary workarounds.

View Professional Profile on LinkedIn →

Credentials

Professional Foundations

AWS Certified Solutions Architect – Associate

Cloud Architecture & Hybrid Design

Microsoft Certified Professional (MCP)

Enterprise Infrastructure Management

MCTS: Windows Server 2008

Active Directory & Network Infrastructure

Earlier Technical Foundations

Cyberoam Certified Network & Security Professional

Perimeter Defense & Threat Filtering

MCSA – Windows Server 2003

Systems Administration

Exchange Server 2007 – Configuration

Enterprise Messaging & Routing

Track Record

Operational Disciplines & Outcomes

Network Architecture & Congestion Control

Diagnosed and resolved congested corporate LANs prone to packet drops and broadcast storms. Segmented traffic into dedicated 802.1Q VLANs for core operations, IP surveillance, management, and workstations, eliminated rogue DHCP pools, and deployed multi-WAN failover to maintain continuity through ISP drops.

Microsoft 365 & Directory Synchronization

Led phased migrations from aging on-premises Exchange servers and legacy POP3/IMAP mailboxes to Microsoft 365. Synchronized Active Directory identities via hybrid connectors, enforced multi-factor authentication policies, and consolidated messy shared mailbox structures with minimal user downtime.

Perimeter Security & Encrypted Remote Access

Administered enterprise UTM and Next-Gen firewalls (Sophos, SonicWALL, Cyberoam), closing unmonitored external ports and setting up resilient site-to-site IPsec and SSL-VPN tunnels. Deployed Trend Micro and Bitdefender gateway inspection layers to block phishing and malicious payloads before reaching mailboxes.

Virtualization Density & Recovery Verification

Consolidated standalone bare-metal towers into clustered Hyper-V and VMware ESXi virtualization hosts to reduce hardware footprints and maintenance overhead. Built automated 3-2-1 backup pipelines using Acronis, conducting regular sandbox boot tests to ensure image files restore cleanly when disks fail.

Service Desk Architecture & Infrastructure Governance

Replaced ad-hoc verbal support requests with centralized ticketing (OsTicket) and automated system monitoring. Documented IP subnets, switch port allocations, server credentials, and vendor warranty cycles so ongoing infrastructure management relies on clear documentation rather than tribal knowledge.

Case Work

Documented Infrastructure Projects

Stabilizing Mission-Critical ERP & Eliminating Single Points of Failure

Focus: Server Virtualization, Dual-WAN UTM, Disaster Recovery Stack: Hyper-V, Sophos UTM, Acronis, M365

The Situation

A manufacturing enterprise ran its core production database on an aging, single-disk physical server sitting behind an end-of-life Cisco ASA firewall. Branch offices faced regular VPN drops during billing runs, backups were written inconsistently to an external USB drive without test restores, and the facility had no failover plan for hardware faults.

The Technical Resolution

Migrated database instances onto a redundant RAID-configured virtualization host with automated, air-gapped Acronis snapshots. Deployed a high-throughput Sophos UTM with automatic dual-WAN failover, rebuilt site-to-site IPsec tunnels, and completed a clean tenant migration to Microsoft 365. The environment ran without unplanned service disruptions over the subsequent 18 months.

Enterprise UTM Replacement & Multi-Branch Secure Remote Access

Focus: Perimeter Gateway Overhaul, SSL-VPN, Zero-Disruption Cutover Stack: Sophos XGS / UTM, Active Directory, VLAN Isolation

The Situation

A multi-location corporate office experienced severe bandwidth congestion, unfiltered outbound web traffic, and unsegmented internal subnets that left industrial CCTV, staff workstations, and finance servers sharing a single flat broadcast domain. Remote workers relied on unstable connections with exposed public RDP ports.

The Technical Resolution

Replaced legacy edge hardware with a modern UTM appliance during a scheduled weekend cutover window. Segmented operations across 802.1Q VLANs with strict inter-VLAN access control lists, integrated user authentication with Active Directory, and provisioned multi-factor SSL-VPN access for all remote staff. Eliminated open port exposure and cut recurring network helpdesk tickets by over 50%.

Capabilities

Core Technical Focus

Perimeter & Network Security

Managing gateway throughput and secure boundaries. Configuring redundant multi-WAN failover, segmenting traffic (CCTV, ERP, guest Wi-Fi) across 802.1Q VLANs, and establishing encrypted IPsec and SSL-VPN tunnels for stable site-to-site and remote connectivity.

Systems & Identity

Structuring directory services for clean authentication and endpoint compliance. Administering Windows Server environments, standardizing Group Policies (GPO), managing DNS/DHCP scopes, and executing clean hybrid Microsoft 365 tenant cutovers.

Virtualization & Storage

Consolidating physical computing resources into manageable virtualized clusters. Provisioning Hyper-V and VMware ESXi hosts, configuring hardware RAID disk groups, and deploying dedicated NAS storage (Synology/QNAP) to isolate file shares from single-drive faults.

Backup & Threat Defense

Building business continuity plans around verified recovery. Enforcing 3-2-1 backup architectures via Acronis, conducting scheduled bare-metal restore drills, and deploying layered endpoint and email security defenses to stop phishing and ransomware before execution.

Engagement

Professional Practice

I engage with enterprise infrastructure, systems migration, and cybersecurity challenges where stability, data integrity, and uptime are operational prerequisites.

Root-Cause Investigation First: Evaluating physical cabling, routing tables, firewall rule orders, and system logs before recommending hardware purchases or architectural changes.

Scheduled Maintenance Windows: Core network migrations, firewall cutovers, and hypervisor maintenance conducted outside active business hours to protect production workflows.

Standardized Documentation: Every IP scheme, VLAN tag, access list, and recovery playbook documented clearly for the organization, avoiding proprietary dependency.

Direct Channels

Start a Discussion

For inquiries regarding enterprise architecture, infrastructure strategy, or professional exchange, reach out directly:

Email contact@vivektrivedi.in → Connect on LinkedIn →

Location: Kolkata, West Bengal, India. Languages: English, Hindi, Gujarati, Bengali.