Chandam Lalitkanta Singh | IT Infrastructure & System Administrator

Professional Overview

About & Core Philosophy

Building secure, reliable, scalable, and cost-effective IT infrastructure that safeguards business continuity and accelerates organizational growth.

Executive Summary

I am an IT Infrastructure and Systems Administration professional with 14+ years of hands-on experience in IT industries, specializing in IT infrastructure management, system administration, data center operations, information security, and disaster recovery.

Throughout my career, I have supported and transformed mission-critical IT infrastructure for leading enterprise organizations including Omniglobe International Private Limited & Taxmann Technologies Private Limited, Rituwears Private Limited, Mybox (a Hero Electronix venture), and currently Pioneer Urban Land & Infrastructure Limited.

Core Operating Principles

Secure Defense-in-depth & Zero Trust

Reliable High availability & Fault tolerance

Scalable Multi-site & Hybrid Cloud Ready

Cost-Effective Optimized licensing & hybrid ROI

Core Enterprise Responsibilities

Data Center & Infrastructure Design

Designing, implementing, and managing robust IT infrastructure and enterprise data center environments.

Server, Network & Storage Deployment

Planning and deploying servers, enterprise switches, SAN/NAS storage, firewalls, and security appliances.

Windows Server, Active Directory & M365

Managing Windows Server, AD DS, Microsoft 365, Entra ID, cloud tenants, and hybrid identity environments.

Network & Endpoint Security

Implementing layered defense: SonicWall firewalls, BitLocker encryption, Defender/Kaspersky endpoint controls, and MFA.

Backup, DR & Business Continuity

Architecting multi-tier backup policies (Commvault, Veritas, Linux KVM) and DR procedures for high availability.

End-to-End IT Project Leadership

Leading infrastructure projects from feasibility planning and procurement through rollout and operational handover.

Vendor, Partner & Budget Management

Managing OEM vendors, SLA negotiations, tech partners, procurement budgets, and licensing optimization.

High Availability & Reliability SLA

Ensuring maximum uptime, data integrity, regulatory compliance (DPDP Act), and system performance.

Deep Technical Expertise

Core Technical Domains

Explore 14+ years of hands-on mastery across enterprise Active Directory, Microsoft 365, Layered Security, Linux/Virtualization, and AWS Solution Architecture.

10+ Years Hands-on Experience

Microsoft Active Directory & Windows Server Enterprise Administration

Over a decade of end-to-end responsibility designing, implementing, administering, securing, and troubleshooting Active Directory and Windows Server environments supporting business-critical applications, domain services, and hybrid cloud identities.

Infrastructure Architecture Focus:

Designed around multi-location Domain Controllers, AD Sites and Services, DNS, controlled replication topology, and Read-Only Domain Controllers (RODC) for secure branch operations.

Active Directory Domain Services (AD DS)

Enterprise domain management across users, computers, security groups, OUs, and Group Policy hierarchies.

Primary & Secondary Domain Controllers

Multi-DC architecture providing high availability, active fault tolerance, and load balancing across locations.

RODC (Read-Only Domain Controllers)

Branch/remote office deployments providing local authentication without exposing writable credentials in low-security physical sites.

Group Policy Management & Hardening

Advanced GPOs for system hardening, device/USB access restriction, software deployment, password rules, and baseline lockdowns.

AD-Integrated DNS & Replication

Forward/reverse lookup zones, dynamic secure updates, site-link topologies, and resolving complex authentication issues.

Hybrid Identity (Microsoft Entra Connect)

Directory synchronization between on-prem Active Directory and Microsoft Entra ID for unified seamless single sign-on.

OU & Administrative Delegation

Structured OU hierarchies aligning with departments and geography with least-privilege administrative delegation.

DC Maintenance & Disaster Recovery

Regular health audits (dcdiag, repadmin), system state backups, tombstone management, and authoritative/non-authoritative restores.

5+ Years Hands-on Experience

Microsoft 365, Cloud Identity, Security & Data Governance

Managing enterprise cloud environments across email infrastructure, identity federation, collaboration platforms, compliance policies, license cost-reduction strategies, and data protection.

Governance & DPDP Act Compliance:

Aligning M365 sharing, retention, conditional access, and data loss prevention with India's Digital Personal Data Protection (DPDP) Act.

Exchange Online & Mail Flow

Tenant administration, mail routing, shared mailboxes, security compliance, SPF, DKIM, DMARC configurations, and anti-spam filters.

GoDaddy to M365 Email Migration

Planned and executed end-to-end mailbox and DNS migrations from legacy GoDaddy hosting to Exchange Online with zero downtime.

Licensing Optimization Strategy

Cost-effective license planning across Business Basic, Standard, and Premium tiers tailored to exact organizational job roles.

SharePoint Online & OneDrive

Departmental site architecture, document libraries, permission inheritance, external sharing controls, and secure synchronization.

Microsoft Entra ID & MFA

Cloud identity management, self-service password reset, role-based access control (RBAC), and multi-factor enforcement.

Data Loss Prevention (DLP)

Creating DLP policies to prevent accidental or malicious exfiltration of sensitive business data and PII across email and OneDrive.

M365 Backup & Recovery

Enterprise Commvault backup integration alongside practical offline/secondary backup workflows for cost-constrained departments.

Business Premium Security Capabilities

Deploying advanced features: Intune endpoint management, Defender for Business, and enhanced identity protection.

Layered Defense-in-Depth

Perimeter, Endpoint, Identity & Data Security

Designing risk-based, cost-effective security architectures combining next-generation firewalls, hybrid endpoint solutions, centralized BitLocker encryption, Conditional Access, and geo-location fencing.

Pragmatic Hybrid Endpoint Model:

Kaspersky Cloud Console for legacy hardware constraints + Native Microsoft Defender / Intune on modern Windows systems for zero redundant licensing costs.

SonicWall Firewall Administration

Perimeter protection, access rules, NAT, content filtering, application control, gateway anti-malware, and site-to-site IPsec VPNs.

Centralized BitLocker Encryption

Enforcing full disk encryption across laptops and corporate workstations to protect data at rest against physical theft.

Entra Conditional Access Policies

Context-aware access controls factoring user role, device health, compliance status, network risk, and MFA triggers.

Geo-Location Access Restriction

Restricting corporate email, SharePoint, and administrative portals to approved geographical boundaries (e.g., India-only access).

BYOD Security Framework

Designing Bring Your Own Device policies balancing employee productivity, personal privacy, and corporate boundary security.

Single Sign-On (SSO) & MFA

Centralized authentication reducing password fatigue and mitigating credential compromise vectors.

Kaspersky Cloud Endpoint Management

Central policy creation, definition updates, and scheduled remediation for older hardware platforms.

Active Directory Group Policy Hardening

Disabling unneeded protocols, enforcing strong password complexities, auditing logon events, and blocking untrusted executables.

Business Continuity & Systems

Enterprise Backup, Linux Systems & Virtualization

Implementing multi-tier backup and disaster recovery solutions across physical, virtual, and cloud workloads utilizing both enterprise commercial suites and reliable open-source Linux/FreeBSD platforms.

Budget-Conscious Resilience:

Pairing commercial suites (Veritas / Commvault) with open-source tools (FreeBSD, Ubuntu KVM/QEMU) to provide maximum RTO/RPO SLA without prohibitive licensing overhead.

Veritas NetBackup

Enterprise backup schedules, deduplication pools, policy management, retention policies, and bare-metal server recovery.

Commvault Data Protection

Protecting critical multi-workload enterprise databases, file servers, and cloud applications with automated retention and DR testing.

Ubuntu Linux & FreeBSD Administration

Deploying resilient Linux servers for infrastructure utilities, storage repositories, network services, and backup destinations.

KVM / QEMU & virt-manager

Open-source hypervisor administration on Linux, managing virtual hardware allocation, bridges, storage pools, and VM lifecycles.

Microsoft Hyper-V Virtualization

Hyper-V host deployment, virtual switch configuration, VHDX storage management, failover replication, and snapshot management.

Disaster Recovery Planning & RTO/RPO

Designing structured runbooks, offline air-gapped backup copies, and periodic failover drills for business continuity.

M365 Cloud Backup Strategies

Protecting Exchange Online, SharePoint document libraries, and OneDrive accounts against ransomware or accidental deletion.

Cost-Effective Open-Source DR

Deploying vetted freeware/FOSS backup solutions for SME branches where costly enterprise licenses are cost-prohibitive.

AWS Solution Architecture

Cloud Infrastructure, Migration & Solution Architecture

Architecting scalable, resilient, and cost-optimized AWS cloud environments adhering to the AWS Well-Architected Framework pillars, enabling legacy-free cloud transformation.

6 Well-Architected Pillars:

Security • Reliability • Performance Efficiency • Cost Optimization • Operational Excellence • Sustainability

On-Premises to AWS Migration

Assessing workloads, designing target VPCs, executing zero-downtime server migration, and decommissioning on-prem server rooms.

Two-Cloud Resilient Architecture

Designing multi-cloud redundancy architectures for business-critical applications requiring independent continuity guarantees.

AWS VPC & Networking

Custom VPC topologies, public/private subnets, Internet Gateways, NAT Gateways, Route Tables, and Network ACLs.

IAM & Least-Privilege Security

Fine-grained IAM policies, roles, Multi-Factor Authentication, and security group rules controlling inbound/outbound traffic.

High Availability & Compute

Configuring EC2 instances, EBS storage optimization, load balancing across Availability Zones, and auto-recovery triggers.

Cloud Cost Optimization (FinOps)

Right-sizing compute instances, utilizing reserved/savings plans, lifecycle policies for S3, and eliminating idle cloud waste.

Cloud Backup & Snapshots

Automated snapshot policies, cross-region backups, and rapid disaster recovery runbooks for AWS workloads.

CloudWatch Monitoring & Logging

Setting up performance alarms, metric dashboards, audit trails, and automated health notifications.

Integrated Security Architecture

Zero-Trust Defense-in-Depth Pipeline

Click on any security layer below to inspect how every tier interacts to establish comprehensive, multi-layered enterprise protection.

→

Perimeter Security Layer

SonicWall Next-Gen Firewall & Perimeter Protection

Network perimeter security administration: Configuration of strict firewall policies, granular access rules, content filtering, application control, and gateway anti-malware inspection. Monitors and controls all traffic between corporate LANs, remote branch sites, and external cloud services.

Stateful Packet Inspection Site-to-Site IPsec VPN Granular Content Filtering Bandwidth Management

Consulting & Mentorship

Freelance Consulting & IT Training

Empowering organizations with cost-effective infrastructure transformations, and mentoring aspiring IT professionals through real-world production labs.

IT Infrastructure Consulting

Freelance Architecture & Implementation

Helping businesses modernize IT infrastructure, migrate applications to AWS/Azure/M365, harden security postures, manage web hosting, and lower operational overhead.

Cloud Migration & Decommissioning: Transitioning on-premises infrastructure to AWS & Microsoft 365.
Security Auditing & Zero-Trust Hardening: SonicWall firewall rules, BitLocker, Entra MFA, and Conditional Access setup.
Disaster Recovery & Backup Design: Enterprise Commvault/Veritas or customized cost-effective Linux/FreeBSD backup workflows.
Web Hosting & Server Infrastructure: Deployment and management of scalable web hosting on DigitalOcean droplets and cloud VPS.
IT Cost & License Optimization: Reassessing M365 and cloud subscriptions to reduce wasteful recurring expenditure.

Book Infrastructure Consultation

Practical IT Training & Mentoring

Hands-on Production-Grade Learning

Independent IT tutor providing offline and online training focused on real-world enterprise production environments rather than pure theoretical slides.

Active Directory & GPO

Microsoft Entra ID & MFA

Microsoft 365 Tenant Admin

AWS Cloud Fundamentals & VPC

Azure Fundamentals (AZ-104)

Linux Ubuntu / FreeBSD / KVM

Hyper-V Virtualization

Commvault & Veritas Backup

Perimeter & Endpoint Security

Production Troubleshooting

Inquire for 1-on-1 / Group Training

Featured Client Work

Client UC Bar Infotech ucbarinfotech.com

AWS Cloud Migration

Complete AWS Cloud Migration & Physical Server Decommissioning

Architected and executed an end-to-end cloud migration of core business applications to a resilient dual-cloud AWS infrastructure, successfully eliminating all on-premises server room dependencies across Pan-India branch locations.

Zero Server-Room Dependency — Eliminated AC cooling, UPS upkeep, and physical security overheads

Pan-India Accessibility — Secure high-availability access for all employees and branch offices

Cost & DR Optimized — Automated snapshot policies and right-sized resources reduced OpEx significantly

AWS VPC Amazon EC2 IAM Least Privilege Two-Cloud Continuity FinOps

Platform AWS EC2 + VPN Secure Migration

AWS EC2 Migration Freelance

On-Premises Server Migration to AWS EC2 with VPN & S3 Backup Automation

Migrated an on-premises server application to AWS EC2, providing secure client connectivity through a private VPN integrated with certificate-based authentication. Configured automated backups to an Amazon S3 bucket to ensure data protection and recovery.

Secure VPN Connectivity — Private VPN with certificate-based authentication for all client access

Automated S3 Backups — Scheduled backup policies to Amazon S3 ensuring data protection and point-in-time recovery

Zero On-Premises Footprint — Full server workload lifted to AWS EC2 eliminating local hardware dependency

AWS EC2 Amazon S3 Private VPN Certificate Auth Backup Automation Cloud Lift & Shift

Enterprise Case Studies

M365 & Exchange Online

GoDaddy to Microsoft 365 Enterprise Email & Identity Migration

Led the migration of multi-department corporate email systems from GoDaddy-hosted email to Microsoft 365 Exchange Online with full domain security alignment.

Seamless Mailbox Cutover: User mailboxes, shared mailboxes, and legacy archives migrated with zero data loss.

Email Authentication Hardening: Configured SPF, DKIM, and DMARC policies stopping domain spoofing and improving deliverability.

Optimized Licensing: Segmented users into Business Basic, Standard, and Premium to avoid redundant software expenses.

Exchange Online SPF / DKIM / DMARC Entra ID SharePoint Online License Strategy

Zero Trust Security

Geo-Location Fencing & Conditional Access Implementation

Engineered identity and perimeter controls restricting access to corporate Exchange Online and SharePoint Online resources to approved geographic regions.

Reduced Attack Surface: Blocked unauthorized login attempts originating from untrusted foreign IP address ranges.

Contextual MFA Triggers: Dynamic step-up MFA for unmanaged devices and non-standard network locations.

DPDP Act Alignment: Restricting data exfiltration vectors to uphold national data sovereignty requirements.

Microsoft Entra ID Conditional Access Geo-Fencing MFA DPDP Compliance

Enterprise Active Directory

Multi-Location AD Architecture with Read-Only Domain Controllers

Architected a fault-tolerant multi-site Active Directory topology supporting corporate headquarters and remote branch offices.

Branch Site Security: Deployed RODCs at remote locations, preventing physical DC theft from exposing domain-wide hashes.

Optimized Replication: Structured AD Sites & Subnets minimizing WAN bandwidth consumption during replication.

Centralized GPO Hardening: Standardized desktop baseline configurations and peripheral restrictions via Group Policy.

Windows Server RODC AD Sites & Services GPO Hardening DNS Architecture

Career Progression

From Grassroots to Infrastructure Leadership

A solid foundation built from hands-on hardware engineering to enterprise system administration and infrastructure project leadership.

IT Infrastructure & System Administrator / Project Lead Present

Pioneer Urban Land & Infrastructure Limited

Leading and managing end-to-end critical enterprise IT infrastructure: Commvault / Veritas NetBackup enterprise backup deployments, Microsoft 365 tenant administration, cloud security, Webhosting on DigitalOcean, Active Directory domain infrastructure, data center operations, network security, vendor relations, procurement budgets, and comprehensive disaster recovery architectures.

IT Systems & Infrastructure Administrator Enterprise Experience

Mybox (Hero Electronix venture)

Managed high-availability Windows Server environments, Active Directory forests, AWS cloud infrastructure, Microsoft Hyper-V virtualization, SonicWall perimeter security, and Microsoft 365 email services. Administered GitHub and Jira environments for development teams, and handled the installation, configuration, and support of Ubuntu Linux and macOS client systems.

System & Network Administrator Infrastructure Growth

Rituwears Private Limited

Administered domain controllers, branch office network connectivity, centralized endpoint policies, user identity management, and routine hardware/software maintenance.

System Administrator & NOC Team Lead IT Administration

Taxmann Technologies Private Limited

Administered Active Directory infrastructure — creating and managing User Accounts, Groups, and Organizational Units (OUs). Managed and maintained corporate email IDs and mailbox policies, monitored Windows Server logs for health and security events, and led the NOC (Network Operations Center) team ensuring round-the-clock infrastructure availability and incident response.

Computer Hardware & Desktop Engineer 3 Years Grass-roots Foundation

Omniglobe International Private Limited

Began career at Omniglobe International Private Limited with hands-on computer hardware assembly, component-level troubleshooting, OS deployments, LAN cabling/networking, printer diagnostics, and on-site technical user support. Provided an invaluable physical-layer understanding that powers senior infrastructure decisions.

Accreditations

Certifications & Professional Training

Formal certifications and advanced professional training across networking, systems engineering, AWS solutions, and Microsoft cloud administration.

Certified

Cisco Certified Network Associate (CCNA)

Cisco Systems

Routing and switching fundamentals, IPv4/IPv6 subnetting, VLANs, trunking, STP, OSPF, NAT, and network security foundations.

Certified

Microsoft Certified Solutions Expert (MCSE)

Microsoft

Enterprise Windows Server infrastructure, Active Directory Domain Services, Group Policy, storage, virtualization, and identity services.

Training Completed

AWS Solutions Architect – Associate (SAA-C03)

Training via Simplilearn

Completed rigorous AWS Architect training: VPC networking, EC2 compute, IAM security, S3 storage tiers, high-availability architectures, and cloud migration.

Prep Completed

Microsoft Certified: Azure Administrator (AZ-104)

Microsoft Azure

Exam preparation completed: Azure identities, governance, virtual networking, compute provisioning, storage management, and monitoring.

Prep Completed

Microsoft 365 Administrator Expert (MS-102)

Microsoft 365

Exam preparation completed: M365 tenant deployment, identity synchronization with Entra ID, security and compliance policies, and hybrid messaging.

Get In Touch

Let's Discuss Infrastructure & Projects

Whether you need enterprise IT consulting, cloud migration guidance, security hardening, or hands-on IT training, I am available to collaborate.

Contact Information

Reach out directly for consulting inquiries, enterprise opportunities, or training sessions.

Professional Name Chandam Lalitkanta Singh

Designation IT Infrastructure & System Administrator | Project Lead

Location India (Available for Pan-India & Global Remote)

Phone +91 99710 68031

Email lalitunit6@gmail.com

Specializations Active Directory, M365, AWS, Hyper-V, DigitalOcean, Commvault, DR

Send a Message

Your Name / Organization

Email Address

Inquiry Type

Subject

Message / Project Scope