Selvaganesh R

Profile Summary

Dynamic Systems & Infrastructure Engineer with 5+ years of experience specializing in enterprise IT infrastructure automation, cloud identity governance, and modern observability stacks.

Technical Core Skills

Cloud & Identity Management: Microsoft Entra ID (Azure AD), Microsoft Intune (MDM/MAM), Hybrid Identity, Azure Cloud Operations, AWS (EC2, S3)

Observability & Monitoring: Prometheus, Grafana, Dynamic Dashboard Engineering, Proactive Alerting Systems

Automation & Scripting: PowerShell, Bash Scripting, Batch Automation (Asset tracking, policy enforcement)

Security & Perimeter Infrastructure: FortiGate Firewall, Trend Micro (Vision One / Apex One), VPN Tunneling, Network Segmentation (VLAN, MAC Filtering)

Operating Systems: AlmaLinux, RedHat Enterprise Linux, Ubuntu, Windows Server 2016/2019/2022

Professional Experience

• Identity & MDM Architecture: Engineering corporate-wide secure identity management structures using Microsoft Entra ID, configuring secure Hybrid Join workflows and complex conditional access frameworks.
• Unified Endpoint Governance: Architecting and maintaining Microsoft Intune (MDM/MAM) for cross-platform corporate asset enrollment, automated software deployment pipelines, and unified security compliance.
• Enterprise Observability Stacks: Designing and deploying end-to-end production monitoring systems using Prometheus & Grafana, building central dashboards to track hardware metrics and live server performance.
• Asset Lifecycle Automation: Streamlining IT Service Management (ITSM) workflows by implementing GLPI to automate full-scale hardware asset tracking across branches.
• Perimeter Security Management: Enhancing enterprise defense lines by administering FortiGate Firewalls and handling continuous endpoint threat isolation via Trend Micro dashboards.

• Multi-Branch IT Operations: Managed core infrastructure operations servicing 3,000+ distributed users operating across 80+ distinct geographical branch clinics.
• Automated Lifecycle Workflows: Reduced manual infrastructure maintenance workloads by 40% through targeted deployments of Bash & Batch scripts for policy enforcement (USB blocking, account creation).
• Patch & Vulnerability Management: Conducted continuous patch compliance validation routines for cross-platform Windows and Linux servers to secure endpoints against emerging threats.
• Local Infrastructure Setup: Configured centralized NAS storage frameworks, enterprise Zimbra mail environments, and dedicated branch-level FortiGate VPN tunnels.

• L1/L2 Technical Escalations: Delivered critical technical support across Microsoft 365 ecosystems and infrastructure layouts for 80+ corporate users.
• Network Administration: Managed core physical hardware layers including HPE infrastructure switches, logical VLAN segmentations, and GajShield firewall policies.

• Linux Environment Maintenance: Maintained base open-source infrastructure layouts servicing internal educational teams on Linux operating environments.

Technical Initiatives & Projects

• Production Observability Deployment: Configured metric exporters coupled with central Prometheus monitoring nodes feeding real-time infrastructure logs to unified Grafana dashboards.
• Local Bare-Metal Deployments: Hosted customized secure Apache web systems, production database services (MySQL), and centralized automated storage grids inside managed AlmaLinux clusters.
• Network OS Provisioning Framework: Engineered bare-metal PXE remote installation environments for rapid automated Windows OS provisioning paired with customized post-install scripting blocks.

Education