Secure & Scalable IT Infrastructure

Architected and deployed a multi-platform enterprise infrastructure spanning Windows Server 2019 Datacenter, Ubuntu Linux, and Cisco boundary routing across seven execution phases. The design established a root domain forest (chigga.local) with a multi-campus Organizational Unit architecture (CampusA and CampusB), logically subdivided into Admin, Finance, and HR sub-OUs for granular policy scoping and identity administration.

The core stack integrated Active Directory Domain Services with targeted Fine-Grained Password Policies (PSO-Admin-Strict enforcing 10-character complexity on Admin security groups) and a Group Policy Object enforcing department-specific desktop wallpaper deployment. Network services included an AD-integrated reverse DNS lookup zone (31.168.192.in-addr.arpa), a DHCP scope (192.168.31.51–255) with a 50-address static exclusion pool and MAC reservations, and an IIS web server secured via HTTPS/Port 443. FTP user isolation was enforced by mapping the msIIS-FTPDir Active Directory user attribute to physical storage paths, combined with explicit NTFS permissions. Remote service delivery was provisioned via session-based Remote Desktop Services (RD Connection Broker, Web Access, and Session Host) publishing browser-accessible RemoteApps, alongside Windows Deployment Services (WDS) configured with PXE network boot and install images.

One deployment issue surfaced during testing: the wallpaper GPO initially referenced the server by hostname, which client machines couldn't resolve quickly enough during boot — the policy silently failed to apply. Switching the GPO's path to the server's static IP address resolved it immediately. The network edge also integrated Linux automation via custom interactive Bash scripts and Cisco routing configurations demonstrating Static 1:1 NAT, Dynamic NAT pools with standard access lists, and Port Address Translation (NAT Overload) for shared WAN egress.