Nabil Shahzad
Frankfurt
Summary
• Experienced IT System, DevOps, and Cloud Architect with a focus on cloud transformation, end-to-end automation, and building secure, scalable infrastructures.
• Cloud Architecture & Transformation: Strategic design and consulting on migrating, architecting, and securing IT infrastructures across hybrid and multi-cloud environments (Azure, AWS).
• Automation & IaC: Design and implementation of automated deployments using PowerShell, Terraform, and Ansible to minimize manual errors.
• Modern Workplace & Identity: Administration and hardening of the M365 portfolio (Entra ID, Intune, Exchange Online) to ensure an optimal user experience.
• Containers & Orchestration: Building and managing scalable, highly available platforms based on Docker and Kubernetes.
• Project Management: End-to-end steering of cloud projects – from initial business analysis and security concept design to final rollout.
Overview
7
7
years of professional experience
1
1
Certification
Work History
System Administrator
PTXRE GmbH
Frankfurt am Main
12.2025 - Current
- Cloud Architecture & Infrastructure as Code (IaC): Strategic design, architecture, and deployment of scalable, highly available cloud platforms (AWS/Azure) using Terraform and Ansible, including hybrid identity integration via ADFS.
- Container Orchestration: Design and production-grade operation of container environments based on Docker and Kubernetes to ensure maximum stability and scalability.
- CI/CD Optimization: Development, automation, and maintenance of deployment pipelines with Jenkins and GitHub to accelerate release cycles and minimize manual effort.
- Security & Platform Operations: Enterprise security monitoring and proactive threat detection utilizing Microsoft Sentinel, combined with continuous administration of Linux-based systems and OS hardening.
- Incident & Operations Management: Proven track record in Major Incident Management (MIM), leading the rapid resolution of critical infrastructure disruptions and coordinating cross-functional emergency responses.
- Cross-Functional Collaboration: Strategic support and consulting for development and operations teams (Dev & Ops) to establish modern, agile DevOps processes.
DevOps-Engineer & Cloud Architect
Chapman Freeborn
Frankfurt am Main
09.2025 - 12.2025
- Hybrid & Cloud Infrastructure: End-to-end administration and hardening of Microsoft 365 services, Entra ID, Exchange Online, and Teams, alongside the seamless integration of hybrid environments via ADFS and Windows Server / Active Directory.
- International Site Support & Crisis Management: Years of successful IT infrastructure operations for international locations (including Frankfurt, Cologne, London) in compliance with strict SLAs, combined with a proven track record in Major Incident Management (MIM) to resolve critical outages.
- Cloud Security & Monitoring: Sustained improvement of the enterprise security posture through MFA, Conditional Access, and compliance policies, coupled with proactive security monitoring and SIEM integration utilizing Microsoft Sentinel and the M365 Security Center.
- Cross-Platform Expertise (Linux): Proficient administration, configuration of server services, and automated user management on Linux systems directly via the shell.
System Administrator
Bechtle Onsite Chemnitz
Chemnitz
08.2022 - 08.2025
- Cloud Enterprise Architecture & Identity: Architectural design and end-to-end management of the Microsoft cloud ecosystem, including centralized Entra ID management, multi-tenant license compliance, secure enterprise mail flow, and hybrid identity federation via ADFS.
- Modern Endpoint Management (Intune): Architecture and deployment of centralized device management (MDM/MAM) via Microsoft Intune, establishing automated software provisioning and advanced device compliance frameworks.
- Cloud Security, Identity & Compliance: Enterprise-wide SIEM/SOAR integration and threat intelligence using Microsoft Sentinel, alongside zero-trust security architectures utilizing Conditional Access, Multi-Factor Authentication (MFA), and proactive threat hunting within the Microsoft 365 Defender/Security Center.
- Collaboration Governance: Structural design and life-cycle management of Teams and SharePoint architectures, implementing strict compliance frameworks for secure external collaboration and data loss prevention.
- Secure Infrastructure & PKI Architecture: Architecture and operation of corporate Public Key Infrastructures (PKI / Microsoft AD CS), overseeing automated Certificate Lifecycle Management, SSL/TLS enforcement, Code Signing, and Root/Subordinate CA designs.
- Enterprise Operations & Crisis Management: Proven experience in Major Incident Management (MIM), leading the rapid resolution of critical infrastructure disruptions, minimizing business downtime, and coordinating high-pressure cross-functional response teams.
System Administrator
Secure Network Services
Gießen
01.2020 - 07.2022
- Incident & Request Management: Efficient processing and resolution of IT incidents and service requests in 1st and 2nd level support via OTRS, phone, email, Proven track record in Major Incident Management (MIM) and on-site.
- Identity & Access Management: Reliable user management in Active Directory (AD), including password resets, maintenance of permission structures, and Group Policy (GPO) management.
- Modern Workplace & Lifecycle Management: Responsibility for the entire hardware lifecycle, from procurement and initial setup (provisioning/OS installation) to company-wide hardware and software rollouts.
- Client & Application Support: Provision of technical support within the Windows and Office 365 environments, alongside executing remote support via remote desktop tools.
- Infrastructure & Data Security: Continuous data maintenance as well as proactive monitoring and verification of storage and backup systems to guarantee operational stability.
- Incident & Operations Management: Proven track record in Major Incident Management (MIM), leading the rapid resolution of critical infrastructure disruptions and coordinating cross-functional emergency responses.
IT System Administrator Internship
SL IT-Services
Gießen
10.2019 - 12.2019
- Active Directory & Data Security: Secure administration of identity services, permission structures, and data protection compliance.
- Antivirus & Endpoint Security: Deployed and administered antivirus programs and endpoint protection solutions, securing IT assets against potential threats.
- Backup & Recovery: Implemented and managed backup strategies and system recovery protocols, ensuring business continuity during disruptions.
- Storage & Image Management: Configured storage systems and created system images for automated rollouts and effective disaster recovery.
- Hardware & Computer Systems: Maintenance, troubleshooting, and optimization of enterprise hardware and core computer systems.
Education
Secondary School Certificate - Elektro und Informationstechnik
Theodor-Litt- School
Gießen01-2019
Skills
- AWS infrastructure
- AWS DevOps
- Azure infrastructure
- Azure DevOps
- Kubernetes
- Docker
- Terraform
- Ansible
- Jenkins
- Git
- GitHub
- GitLab
- Github Actions
- Linux administration
- Linux
- Ubuntu
- Red Hat
- Apache
- Nginx
- Prometheus
- Grafana
- Kafka
- VMware
- Cloud architecture
- Cloud migration
- SQL database
- SQL Server
- Security Testing
- Azure Security
- Bash
- Powershell
- Device Management
- Virtual Desktop Infrastructure
- Linux Firewall
- SCCM
- Jira
- Cloud migration
- SCCM
Certification
B
Languages
Urdu
Proficient
C2
Punjabi
Proficient
C2
Deutsch
Proficient
C2
Englisch
Advanced
C1
Hindi
Proficient
C2
Timeline
System Administrator
PTXRE GmbH
12.2025 - Current
DevOps-Engineer & Cloud Architect
Chapman Freeborn
09.2025 - 12.2025
System Administrator
Bechtle Onsite Chemnitz
08.2022 - 08.2025
System Administrator
Secure Network Services
01.2020 - 07.2022
IT System Administrator Internship
SL IT-Services
10.2019 - 12.2019
Secondary School Certificate - Elektro und Informationstechnik
Theodor-Litt- School