Hello, I'm Arya Shahrestani

Electronics, IT / OT Infrastructure, Cybersecurity & DevOps Specialist

With over 8 years of specialized teaching experience, 10 years of professional experience in the electronics industry, and 9 years in information technology. Proficient in electronic circuit design, embedded systems, industrial automation, network infrastructure, cybersecurity, and cloud computing.

10+
Years of Electronics Experience
8+
Years of IT Experience

About Me

With over 8 years of specialized teaching experience, 10 years of professional experience in the electronics industry, and 9 years in information technology. Proficient in electronic circuit design, embedded systems, industrial automation with PLC and SCADA, Internet of Things (IoT), microcontroller architectures (AVR, ARM, ESP), PCB design, and electronic assembly. In the IT domain, I specialize in network infrastructure design and management, cybersecurity, cloud computing, process automation, and leveraging modern technologies such as Ansible, Docker, Kubernetes, and DevOps. My focus is on creating comprehensive and integrated solutions with a cross-layer perspective on electronics and information technology to address complex organizational needs.

Specialized Courses Taught

Complete list of specialized courses delivered at accredited institutions

31

CompTIA Network+

times
22

CompTIA Security+

times
19

CompTIA A+

times
19

CompTIA Server+

times
8

CompTIA Storage+

times
9

CompTIA CySA+

times
7

CompTIA PenTest+

times
27

MikroTik MTCNA

times
13

MikroTik MTCRE

times
7

MikroTik MTCWE

times
5

MikroTik MTCSE

times
5

MikroTik MTCIPv6E

times
10

Cisco CCNA 200-301

times
8

Cisco CCNP Score

times
27

Python Engineering

times
13

EC-Council CEH

times
19

EC-Council CSCU

times
6

Offensive Security PWK

times
11

SANS 410

times
4

SANS 505

times
4

SANS 506

times
7

SANS 573

times
6

SANS 503

times
8

SANS 504

times
10

SANS 560

times
13

SANS 542

times
12

SANS 660

times
11

SANS 642

times
6

SANS 617

times
6

SANS 556

times
7

Wireless Security Essentials

times
7

Wireless Security Advanced

times
7

Wireless Pentest

times
8

FortiGate NSE 4-7

times
8

ISMS

times
7

ISO 27001

times
2

ITIL 4 Foundation

times
3

COBIT 2019 Foundation

times
1

PMI PMP

times
2

ISO 27005 Risk Manager

times
3

ISC² CISSP

times
2

AWS Certified Solutions Architect – Associate

times
2

Certified Kubernetes Administrator – CKA

times
15

Linux Essentials

times
9

Linux LPIC 1

times
4

Linux LPIC 2

times
5

VoIP Asterisk

times
5

VoIP Issabel

times
6

Docker

times
6

Kubernetes

times
6

DevOps

times
3

DevSecOps

times
3

GitHub / GitLab CI/CD Advanced

times
4

MLOps Fundamentals

times
2

ELK Stack / SIEM Engineering

times

Corporate Teaching Experience

Courses delivered for reputable organizations and companies

Network Plus course for Bank Tejarat - Naghsh Aval Keyfiat
Network Plus course for Bank Tejarat - Naghsh Aval Keyfiat
A+ course for Iran Ports and Maritime Organization
A+ course for Irisa Company
MikroTik MTCWE course for Naghsh Aval Keyfiat
ISMS ISO 27001 course for Pars Technology Sadad
MikroTik MTCRE course for Bank Refah
Security Plus 2 course for Paya Naghsh Company
Security Plus 3 course for Ana Aviation Management Academy
Security Plus 2 course for Mobtakeran Company
MikroTik MTCWE course for Paya Naghsh Company
MikroTik MTCNA course for Paya Naghsh Company
MikroTik MTCRE course for Paya Naghsh Company
MikroTik MTCSE course for Paya Naghsh Company
CSCU course for Mobtakeran Company (4 times)
SANS ICS 410 course for Mobtakeran Company (5 times)
SANS 560 course for Paya Naghsh Company
SANS 660 course for Paya Naghsh Company
SANS 542 course for Paya Naghsh Company
Linux Essentials course for Paya Naghsh Company
LPIC 1 course for Paya Naghsh Company
LPIC 2 course for Paya Naghsh Company
Linux Essentials course for Rama Fiber
Video Surveillance course for Mobtakeran Company (4 times)

Specialized Projects

Sample of designed and implemented projects

Automation Systems with Ansible

Design and implementation of automation systems using Ansible to improve processes and reduce time spent on repetitive tasks

Management Tools Development with Python

Development of advanced management tools with Python for efficient server monitoring and management

GitOps Workflow with GitHub Actions

Implementation of GitOps Workflow with GitHub Actions for automating Build, Test, and Deploy processes of containerized services

MLOps Infrastructure with MLflow

Design and deployment of MLOps infrastructure using MLflow for Experiment Tracking, model version management, and integration with Kubernetes

Container Infrastructure Management

Management and optimization of container infrastructures using Docker to increase flexibility and scalability

CI/CD with DevOps

Implementation of CI/CD processes using DevOps tools to accelerate software delivery and improve quality

Kubernetes Cluster Management

Design, implementation, and management of Kubernetes clusters for running scalable and fault-tolerant applications

Advanced Network Monitoring System

Development of advanced network monitoring systems using Python and SNMP protocol for real-time issue detection and resolution

Centralized Monitoring with Prometheus and Grafana

Design and deployment of a centralized monitoring system with Prometheus and Grafana for real-time health monitoring of servers and services

Log Management System with ELK Stack

Implementation of Log Management system with ELK Stack for event analysis and enhanced security

Automated Deployment with Ansible

Automated deployment of web services using Ansible Playbook and GitLab CI/CD Pipeline

High Availability Architecture

Design and implementation of High Availability architecture for critical services using HAProxy and Keepalived

Web-Based Management Dashboard

Development of a web-based management dashboard with Flask for displaying network status, clients, and system performance

Wireless Site Survey & Performance Optimization

Execution of Wireless Site Survey and Performance Optimization projects in high-density environments

802.1X / EAP-TLS System with Cisco ISE

Implementation of 802.1X / EAP-TLS system based on Cisco ISE for secure user and device access control

Advanced Network Scanner

Development and deployment of an advanced network scanner for identifying connected network assets and traffic analysis with Python

Data Encryption Suite

Design and development of Data Encryption Suite with Python and GUI for encrypting files and folders with Key Management support

Automated Archiving System

Implementation of an Automated Archiving Tool for generating separate archives for organizational files with GUI management

MikroTik Monitoring System

Design and implementation of a MikroTik Monitoring System based on Python and API with real-time user and bandwidth display and SIEM integration

Issabel-to-Asterisk Migration Framework

Creation of Issabel-to-Asterisk Migration Framework for extracting, analyzing, and transferring VoIP configurations for Business Continuity

Audio Conference System

Design and implementation of an Audio Conference System in Python with Client/Server architecture including Real-time Chat, File Sharing, and Audio Broadcasting

Integrated VFD Control with Modbus

Design and implementation of integrated VFD control with Python based on Modbus protocol to increase productivity in industrial Automation & SCADA projects

SOCKS5 Proxy Farm

Implementation of SOCKS5 Proxy Farm with Docker Containers and VPN Server connection including RBAC and user management for Secure Internet Access

DLP Framework

Design and deployment of DLP Framework to prevent sensitive organizational data leakage with automatic confidential data detection capabilities

EDR/XDR System

Implementation of EDR/XDR with Python Agents and ELK Stack integration for advanced threat detection and anomalous user behavior analysis

Enterprise Vulnerability Scanner

Design and development of Enterprise Vulnerability Scanner with Python integrating Nmap, Nessus API, and OpenVAS tools

Smart UPS Management System

Design and implementation of an advanced UPS system with intelligent power management and real-time monitoring

Solar Energy Solutions

Design and deployment of solar energy solutions including solar panels, smart inverters, and energy storage systems

Data Center Electrical Infrastructure

Design and execution of data center electrical infrastructure including UPS systems, generators, and advanced cabling

Smart Energy Management System

Implementation of smart energy management system for controlling power consumption and load optimization in data centers and industrial buildings

Hybrid Backup Power System

Design of Hybrid Backup Power Systems including UPS, generator, and energy storage batteries ensuring Zero Downtime

Data Center Equipment Monitoring System

Implementation of a power and equipment monitoring system for data centers with real-time reporting and DCIM integration

Fault-Tolerant Electrical Infrastructure

Design and execution of fault-tolerant and redundant electrical infrastructure including load distribution and overload protection systems

Dual-Path Power Distribution System

Design and deployment of dual-path power distribution system for critical data center racks to increase stability and eliminate Single Point of Failure

Grounding and Lightning Protection System

Design and implementation of grounding and lightning protection systems in data centers according to TIA-942 and IEC 62305 standards

Data Center Environmental Monitoring

Development and implementation of data center environmental monitoring system for controlling temperature, humidity, and airflow with smart sensors

Cable Management System

Design and installation of Structured Cabling management systems adhering to power and data cable separation principles

Custom Power Distribution Panels

Design of custom smart PDU power panels for rack energy consumption management and remote control

Automatic Power Recovery System

Implementation of automatic failover power alert and recovery system between mains, UPS, and generator power sources

Advanced Cooling System

Design and execution of Precision Cooling system including In-Row and Hot/Cold Aisle Containment

Integrated DCIM

Implementation of integrated DCIM with energy, temperature, and PDU monitoring modules for infrastructure performance analysis

Data Center Upgrade to Tier III

Execution of legacy data center Retrofit project for upgrade to Tier III standard level including redesign of power, cooling, and cabling pathways

Load and Energy Consumption Management

Design and setup of load and energy consumption management system to reduce operational costs and improve energy efficiency (PUE)

Network Infrastructure Design and Implementation

Projects executed in reputable organizations

Ministry of Health Network Infrastructure
Shahid Mahalati Hospital
Dahoon Kish Shopping Center
Azadi Sports Complex (Semi-Olympic Pool Section)
Enghelab Club (Aftab Complex)
Shahin Shahr City Center
Mashhad Mall Vaccination Center
Iran Expo Mall
Khatoon Restaurant Network (Cafe Ale, Cafe Shamroon, Black Alenj, Bahamas)
Super Dry, Mel & Mouj, RESS, Armani Exchange Stores

Professional Experience

Work experience at reputable organizations

Cybersecurity Project Manager

Fanavaran Asr Shabakeh Pasargad, Tehran | 2018 – Present

• Leading cybersecurity projects aimed at risk reduction in financial and government institutions

• Developing and implementing security protocols and incident response using penetration testing, network monitoring, and data protection strategies

• Utilizing Nessus, OpenVAS, and Burp Suite to strengthen client infrastructures, achieving a 30% reduction in security incidents

Cybersecurity Consultant

Techone24 Institute, Tehran | 2018 – Present

• Managing diverse cybersecurity projects and collaborating with financial and government clients

• Designing custom solutions based on specific threats and needs of each industry

• Designing and implementing multi-layered security frameworks and incident response programs

IT Manager

Payanghesh, Tehran | 2022 – Present

• Overseeing all IT operations including network infrastructure, cybersecurity, and support

• Designing and implementing comprehensive security policies and protocols to enhance data protection and reduce risk

• Leading a team for in-depth vulnerability assessment using OpenVAS, Nessus, and Burp Suite tools

Education and Teaching Experience

Educational institutions and courses delivered

Senior IT and Cybersecurity Instructor

Fanavaran Asr Shabakeh Pasargad Institute, Techone24 Institute, Arjen Higher Education Institute, Karyar Argham Institute | 2018 – Present

• Delivered over 500 hours of training in networking, Python programming, cybersecurity, and Linux administration

• Trained hundreds of students for CompTIA A+, Network+, Security+, Cisco CCNA, CCNP certifications, and SANS courses

• Developed educational resources for Network+, Security+, Cisco CCNA, Python Engineering, and various SANS courses

Technical Skills

Technical expertise and competencies

Electronics

Analog and Digital Electronic Circuit Design Microcontroller Programming (AVR, ARM, ESP32) PCB Design with Altium Designer and Eagle Electronic Board Assembly and Testing (SMD & Through-Hole) Embedded Systems (STM32, Arduino, Raspberry Pi) Internet of Things (IoT) Architecture PLC Programming and SCADA Systems Power Electronics (Buck/Boost Converters, Inverters) Sensor Integration and Signal Conditioning Circuit Simulation (SPICE, Proteus, Multisim) FPGA Design with Verilog / VHDL RF Circuit Design and Antenna Theory Motor Control (Stepper, Servo, BLDC) Battery Management Systems (BMS) Logic Analyzer, Oscilloscope, Spectrum Analyzer

System Administration

Linux System Administration (Ubuntu, CentOS, Debian) Windows Server Administration Automation System Implementation Advanced Storage Management (SAN, NAS, RAID) Virtualization with VMware vSphere and Hyper-V Containerization with Docker and Podman Orchestration with Kubernetes and OpenShift Infrastructure as Code (Terraform, Pulumi) Configuration Management (Ansible, Puppet, SaltStack) Backup & Disaster Recovery Planning

DevOps & Automation

Docker & Docker Compose Kubernetes (K8s) & Helm Charts Ansible Playbooks & Roles Jenkins Pipeline as Code GitLab CI/CD & GitHub Actions GitOps Workflow (ArgoCD, Flux) CI/CD Pipeline Design & Optimization Artifact Repository (Nexus, JFrog Artifactory) Service Mesh (Istio, Linkerd) Monitoring & Observability (Prometheus, Grafana, Loki)

MLOps & AI

MLflow for Experiment Tracking DVC for Data Version Control Kubeflow for ML Pipeline TensorFlow Extended (TFX) CI/CD for Machine Learning Models Model Serving with Triton Inference Server Feature Store (Feast) Data Pipeline with Apache Airflow ML Model Monitoring & Drift Detection A/B Testing Infrastructure for ML Models

Log Management & Monitoring

ELK Stack (Elasticsearch Cluster, Logstash, Kibana) Filebeat, Metricbeat, Packetbeat Configuration SIEM Architecture & Implementation Prometheus & Alertmanager Grafana Dashboards & Alerts Zabbix Enterprise Monitoring Nagios & Icinga Datadog & New Relic OpenTelemetry Instrumentation Centralized Logging with Graylog & Loki

Programming & Development

Python (FastAPI, Flask, Django, AsyncIO) Bash / Shell Scripting PowerShell Automation Go (Golang) for Network Tools C / C++ for Embedded Systems JavaScript / TypeScript (Node.js, React) REST API Design & Development GraphQL API Database Development (SQL, NoSQL, Redis) Test Automation with Selenium, Pytest, Robot Framework Version Control with Git (GitFlow, Trunk-Based)

Cybersecurity

Vulnerability Assessment with Nessus, OpenVAS Web Application Pentesting with Burp Suite Network Penetration Testing Social Engineering & Phishing Simulations SIEM & SOAR Implementation EDR/XDR (CrowdStrike, SentinelOne, Defender) DLP (Data Loss Prevention) Strategy ISO 27001 Implementation & Audit ISC² CISSP Framework PKI & Certificate Management Threat Intelligence & Threat Hunting Incident Response & Forensics Zero Trust Architecture (ZTA) Cloud Security (AWS Security Hub, Azure Security Center) Security Automation with Python & SOAR

Networking

MikroTik (RouterOS, SwOS, CAPsMAN) Ubiquiti UniFi & EdgeMAX Cisco (IOS, NX-OS, Catalyst, Meraki) Routing Protocols (OSPF, BGP, EIGRP, RIP) MPLS & VRF Firewall Management (FortiGate, Cisco ASA, pfSense) VPN Technologies (IPsec, WireGuard, OpenVPN) SDN (Software-Defined Networking) VoIP (Asterisk, Issabel, FreePBX) Wireless Networking (Aruba, Ruckus, Ubiquiti) Network Automation with Ansible & Python SD-WAN Implementation Load Balancing (HAProxy, NGINX, F5)

Cloud Computing

AWS (EC2, S3, Lambda, VPC, RDS, IAM) Microsoft Azure (VMs, Functions, AKS, Entra ID) Google Cloud Platform (GCP) Infrastructure as Code with Terraform Cloud Migration Strategy Hybrid Cloud Architecture Cloud Security & Compliance Serverless Computing Container Registry & Management Cloud Cost Optimization (FinOps)

Power & Data Center Infrastructure

UPS Systems (Online, Line-Interactive, Modular) Diesel & Gas Generator Sets Structured Cabling (Cat6, Cat6a, Fiber Optics) DCIM (Data Center Infrastructure Management) Precision Cooling (CRAC, CRAH, In-Row, Liquid) Power Distribution (PDU, RPP, ATS, STS) TIA-942 & Uptime Institute Standards Hot/Cold Aisle Containment Environmental Monitoring (Temp, Humidity, Leak) Electrical Switchgear & Panel Design Bonding & Grounding (TIA-607) Fire Suppression Systems (FM200, Novec, VESDA)

Firewall & Network Security Management

FortiGate (FortiOS, FortiManager, FortiAnalyzer) Cisco ASA & Firepower (FTD, FMC) MikroTik Firewall (Filter, NAT, Mangle) pfSense & OPNsense Palo Alto Networks (Panorama, GlobalProtect) Zero Trust Network Access (ZTNA) Dynamic Firewall Policies & Automation Firewall Configuration Drift Detection RBAC for Firewall Administration Stateful & Stateless Firewall Rules Web Application Firewall (WAF) DDoS Mitigation Strategies

Industrial Automation

PLC Programming (Siemens S7, Allen-Bradley, Delta) SCADA Systems (WinCC, Ignition, Wonderware) Modbus TCP/RTU & Profibus Protocols VFD (Variable Frequency Drive) Programming Industrial IoT (IIoT) HMI Design & Development Industrial Network Security (IEC 62443) Sensors & Actuators Integration Process Automation & Control Systems Robotics Programming & Integration

Professional Certifications

A collection of international professional certifications

Contact Me

Get in touch for collaboration and consulting on IT and cybersecurity projects

+98 912 034 1145
Tehran, Iran