Hi, I’m Mostofa Kaiser 👋

Information Technology Specialist — U.S. Equal Employment Opportunity Commission (EEOC)

September 11, 2023 – Present • Full-time (40 hours/week)

Microsoft Entra ID Roles

• Exchange Administrator: Manage transport rules, dynamic/static distribution lists, shared mailboxes, external contacts, message trace, and mail flow troubleshooting.
• SharePoint Administrator: Manage SharePoint sites, libraries, and permissions; delegate access and ensure secure file collaboration.
• Intune Administrator: Manage enrolled devices, enforce compliance/security policies, deploy applications, and monitor endpoint health.
• Teams Administrator: Create and manage Teams channels, configure permissions, and support collaboration policies.
• User Administrator: Create, modify, and de-provision user accounts; assign licenses and manage group memberships.
• Security Operator: Advanced Hunting with KQL, review quarantined emails, adjust email threat policies (whitelist/blacklist domains, IPs, URLs), support vulnerability monitoring and patching.
• Compliance Administrator: Manage eDiscovery cases, perform targeted mailbox searches, purge phishing emails across affected accounts.

Additional Responsibilities

• Maintain and audit Active Directory accounts and GPOs to ensure secure and reliable IT operations.
• Perform server patching and monitoring; administer Duo Security MFA across multiple user groups.
• Manage backups using Acronis and Azure Backup; conduct periodic recovery drills to validate resilience.
• Provide enterprise IT support via Zendesk, resolving user issues, improving ticket response time, and supporting enterprise applications.

Systems & Security Engineer — MAKCloud

Self-Directed / Ongoing

Designed, deployed, and manage a production-grade homelab on a Proxmox virtualization platform, simulating enterprise IT, networking, and cybersecurity environments.

Core Infrastructure

• Built and maintained a Proxmox Virtual Environment running multiple VMs and containers for enterprise-like workloads.
• Configured Cloudflare Tunnel & DNS for secure remote access; eliminated exposed RDP/SSH; enforced SSL/TLS with hardened Nginx reverse proxy.
• Automated snapshots, RAID health checks, and off-box backups; performed periodic disaster recovery drills to validate resilience.
• Developed Bash & PowerShell scripts for backups, monitoring, and VM lifecycle tasks; documented infrastructure for repeatability.

Virtual Machines & Services

• Nextcloud (Linux-based, 20TB RAID1 on TerraMaster D2-320 + IronWolf Pro drives): Secure self-managed cloud storage with multi-user accounts, sharing policies, TLS, versioning & retention.
• Portfolio Website (Linux-based, Nginx + Cloudflare): Deployed professional portfolio on custom domain; strict HTTPS headers, Cloudflare DDoS mitigation, automated TLS renewal.
• EVE-NG (Networking Lab): Enterprise network simulation; routing, VLANs, NAT, VPN tunnels; practice for CCNA/CCNP-level labs.
• Kali Linux (Cybersecurity Lab): Metasploit, Wireshark, Burp Suite; isolated attack range; integrated with EVE-NG for blue/red team simulations.
• Windows Server & Utility VMs: AD DS for IAM practice; MFA (Duo Security); remote access via Apache Guacamole with RBAC.

Monitoring & Security

• Uptime monitoring, log reviews for anomalous authentication, resource dashboards for capacity planning.
• Least-privilege, firewall rules, and ongoing patch management across all VMs.

Backup Scan Coordinator — Kroger

Jun 2016 — Aug 2021 • President’s Club 2020

• Monitored sales events for accuracy; managed price-change paperwork, labels, and tags.
• Trained new associates and guided ordering/receiving workflows.