haris@infra
uptime 00:00:00
Pakistan · available for remote work

Chaudhary Haris Khan

Linux & Windows Systems Administrator DevOps Engineer Network & Infrastructure Specialist

I deploy, harden and automate 300+ dedicated and cloud servers across Hetzner and OVH — VoIP call-centre platforms, Proxmox clusters, ZFS backup infrastructure, and the tooling that keeps all of it manageable.

View projects Email me
COOLING CORE SWITCH PDU · 2N POWER 300+ NODES · HETZNER / OVH
0
Servers managed
0
ZFS storage deployed
0
RBAC permissions built
0
Production experience
01

Infrastructure that
can't go quiet

I'm a Linux Systems Administrator and DevOps Engineer with production experience running fleets at scale — not lab setups. At PRIME BPO Telecom I install, configure and maintain 300+ openSUSE, AlmaLinux and Rocky Linux servers hosting VICIdial call-centre platforms on Hetzner dedicated and cloud infrastructure.

That covers the full lifecycle: provisioning and hardening, SSH key management and sudo policy, iptables and firewalld rules, fail2ban, SSL deployment and rotation, MariaDB administration, backups, and diagnosing SIP faults with sngrep and Wireshark when a carrier says the problem is on our side.

The rest of my time goes into automation. Anything repeated more than twice becomes a Python or Bash script — SSL rollout, bulk lead uploads, firewall whitelisting, user provisioning — and anything the team needs to see becomes a small self-hosted web tool with a proper permission model behind it.

My BS in Telecommunication and Networks gives me the theory behind the routing, switching and protocol work; four years of running live systems gives me the instinct for where things actually break.

haris@prime-04 : ~

$ ssh root@prime-04.primebpo3.com

Last login: from 10.0.4.11 — welcome.

$ systemctl status asterisk

● asterisk.service — active (running)

$ python3 deploy_ssl.py --all

→ 312 hosts · 312 ok · 0 failed

real 1m12.408s

Current
Linux Administrator, PRIME BPO Telecom
Based
Pakistan — remote-first, async friendly
Fleet
300+ servers · Hetzner & OVH
Platforms
VICIdial · Asterisk · Proxmox VE · TrueNAS
Scripting
Python · Bash · SQL · FastAPI · Flask
Learning
CCNA — in progress
02

Experience

Four years across production telecom infrastructure and campus networking.

2024 — Present

Linux Administrator

PRIME BPO Telecom
  • Install, configure and maintain 300+ Linux servers (openSUSE / AlmaLinux / Rocky) hosting VICIdial call-centre platforms on Hetzner dedicated and cloud infrastructure.
  • Manage user accounts, SSH key-based authentication, sudo policies and access control across multi-server environments.
  • Automate repetitive operations in Python and Bash — SSL certificate deployment, bulk lead uploads, firewall IP whitelisting and server provisioning.
  • Monitor system performance, analyse logs with lnav and journalctl, troubleshoot VoIP/SIP issues with sngrep and Wireshark.
  • Configure iptables, firewalld, fail2ban and SUSE firewall policies; perform security hardening and vulnerability patching.
  • Support backup procedures, MariaDB/MySQL administration, and domain and SSL management across the fleet.
  • Develop and maintain RESTful APIs in FastAPI and Flask, backed by MySQL, for operational tooling and DID management.
2022 — 2024 · Part-time

Network Lab Administrator

University of Haripur
  • Configured, managed and maintained campus networking devices — switches, routers and firewall appliances.
  • Designed and implemented a hierarchical multi-floor LAN topology: 9 access switches aggregated to a core switch.
  • Applied VLAN segmentation, NAT policies and IPS/IDS-based intrusion detection across lab environments.
  • Supported 300+ workstations across computer labs, maintaining uptime, connectivity and security compliance.
Campus LAN — 9 access switches → core → router
ROUTER CORE SWITCH SW-01 SW-02 SW-03 SW-04 SW-05 SW-06 SW-07 SW-08 SW-09 VLAN SEGMENTED · IPS/IDS MONITORED · 300+ ENDPOINTS PER FLOOR
03

Selected projects

Production systems built and run in a live environment — infrastructure, platforms and the tooling around them.

SIP call flow — agent · VICIdial/Asterisk · carrier
AGENT · SIP PHONE ASTERISK · VICIDIAL CARRIER TRUNK INVITE sip:18005550100 INVITE → carrier 100 Trying 180 Ringing 200 OK · ACK RTP MEDIA ⇄ RECORDED DIAGNOSED WITH SNGREP · WIRESHARK · LNAV
Infrastructure · flagship

Large-scale cloud communication infrastructure — 300+ servers

Deployed and manage a 300+ server dedicated and cloud fleet running VICIdial for high-volume call-centre operations on Hetzner. Implemented SSH key-based auth, fail2ban, SUSE firewall hardening and automated SSL deployment fleet-wide, with Python and Bash automation covering provisioning, SSL rotation, SIP dial-plan management and cron-driven maintenance. Diagnose VoIP and network faults through SIP packet analysis with sngrep and Wireshark plus centralised log analysis in lnav.

  • openSUSE
  • Hetzner
  • VICIdial
  • Asterisk
  • SIP
  • MariaDB
  • Python
  • Bash
  • fail2ban
  • SSL/TLS
Web platform

ServerVault — central server management platform

Self-hosted platform for managing 200+ Linux servers: credential vault, browser-based SSH terminal and bulk fleet operations. A 34-permission RBAC system is enforced at both the UI and API layer, with a full audit trail including IP logging and session tracking. Multi-server operations run in parallel through ThreadPoolExecutor with live SSE progress streaming, shipped as a single HTML frontend over a modular Flask backend.

  • Python
  • Flask
  • SQLite
  • Paramiko
  • SSE
  • JWT
  • xterm.js
Virtualisation
WIN 11 RDP · GPU OLLAMA LLM INFER LXC NGINX RUSTDESK REMOTE vmbr0 / vmbr1 — NAT · PREROUTING · FORWARD PROXMOX VE — HETZNER DEDICATED HOST

Enterprise virtualisation & cloud platform

Multi-tenant Proxmox VE clusters on Hetzner dedicated servers with dual-bridge networking. Configured stateful iptables firewalling across PREROUTING, POSTROUTING and FORWARD chains for NAT routing and segmentation, deployed Windows 11 VMs with RDP and GPU passthrough for Ollama LLM inference, and ran a self-hosted RustDesk server behind Nginx and Apache reverse proxies.

  • Proxmox VE
  • KVM
  • LXC
  • iptables / NAT
  • GPU passthrough
  • Nginx
Storage
7 DATA 3 PARITY RAIDZ3 · 145.5 TB RAW · ~96.78 TiB USABLE

Enterprise backup & cloud storage

TrueNAS SCALE on Hetzner dedicated hardware with a RAIDZ3 10-wide vdev — 145.5 TB raw, roughly 96.78 TiB usable with triple-parity fault tolerance. Set up ZFS snapshot management for production backup and disaster recovery, and exposed a File Browser web application for GUI-based remote file management with access control for operational teams.

  • TrueNAS SCALE
  • ZFS
  • RAIDZ3
  • Hetzner
  • File Browser
Automation

Automation scripts suite

A modular automation repository covering SSL management, SSH key deployment, VICIdial user provisioning, AMD testing, call-log analysis and lead distribution. Includes a RESTful DID management API with a MySQL backend, health-check endpoints, area-code routing logic and daily/monthly usage counters, plus bulk SSH key generation, deployment and revocation workflows across the fleet.

  • Python
  • FastAPI
  • Flask
  • Bash
  • MySQL
  • SQLAlchemy
  • Pydantic
Full stack

IT inventory management system

Production-grade asset tracking SPA with a dual-database architecture — MySQL with JSON failover — 25+ REST endpoints and RBAC across 15 permission types. Includes a full audit trail using snapshot-based transaction logging, automated PDF reporting with ReportLab, and CSV import/export for bulk operations.

  • Python
  • FastAPI
  • MySQL
  • ReportLab
  • HTML/CSS/JS
Security · AMNGF

Advanced multi-layer next-gen firewall

An eight-layer network firewall combining Snort IDS/IPS with layered iptables rules on Proxmox infrastructure, paired with a React and Node.js management dashboard for real-time rule management, alert monitoring and traffic analysis. Clean traffic passes through every layer; matched signatures are dropped and surfaced to the dashboard.

  • Proxmox
  • Snort
  • iptables
  • React.js
  • Node.js
AMNGF — eight inspection layers, one dropped packet
L2 L3 NAT STATE SNORT RULES RATE APP SIGNATURE MATCH — DROP INGRESS TRUSTED
04

Technical skills

Everything below is used in production, not just studied.

Linux

UbuntuDebianRHELCentOSAlmaLinuxRocky LinuxopenSUSEKali

Networking

TCP/IPDNSVLANsNATVPNDHCPRouting & switchingSIP / VoIPIPS / IDS

Security

iptablesfirewalldfail2banSSH hardeningSSL/TLSSnort

Virtualisation

Proxmox VEKVM/QEMULXCVMwareVirtualBoxGPU passthrough

Scripting & development

PythonFastAPIFlaskParamikoSQLAlchemyBashSQLHTML/CSS/JS

DevOps

GitGitHubAnsibleCron automationSSH key managementCI/CD

Cloud & storage

Hetzner CloudOVHTrueNAS SCALEZFS / RAIDZ3AWS (Practitioner)

Tools

WiresharksngreplnavNginxApacheMariaDB / MySQLPortainerCaddy
05

Education & certification

Sep 2021 — Jul 2025

BS Telecommunication and Networks

University of Haripur

Completed 2021

FSc Intermediate — Computer Science

Askaria School and College, Wah Cantt

Completed 2019

Secondary School Certificate

The Scholars School System, Wah Cantt

CCNA — Cisco Certified Network Associate

training in progress

AWS Cloud Practitioner Essentials

Udemy

Google Cybersecurity Fundamentals

Google / Coursera

Linux & SQL Fundamentals

Coursera

06

Let's build
something stable

Open to remote systems administration, DevOps and infrastructure roles. If you have a fleet to run, a platform to harden, or manual work that should have been a script — get in touch.

Email
chauhdryharis099@gmail.com
LinkedIn
linkedin.com/in/chaudhary-haris-khan
GitHub
github.com/hariskhank
Location
Pakistan · remote worldwide