AMAli Masood
Open to L2/L3 Technical Support, Systems Admin & B2B IT Consulting
Milton, ON (West GTA • Hybrid • Remote)

Enterprise IT Operations, Infrastructure Automation & ITSM Governance

I’m Ali Masood—an IT Infrastructure & Operations Specialist with 5+ years of dedicated Tier 2/3 technical escalation, hybrid identity & endpoint administration, and 6 years in federal public service operations. I build audit-first, documentation-driven systems: from VLAN-segmented enterprise-pattern networks and git-crypt automated configuration backup pipelines to ITIL 4 / KCS knowledge governance frameworks and human-in-the-loop AI support workflows. Available for full-time/contract roles and B2B engagements via dCode Canada Inc.

Capabilities Matrix

Technical Skills & Operational Stack

Spanning enterprise endpoint/IAM administration, network segmentation, automation, and ITSM governance.

Network & Security Infrastructure

  • OPNsense Firewalls
  • Aruba CX Managed Switching
  • Aruba Instant Virtual Controller
  • Fortinet & SonicWall
  • Multi-VLAN Segmentation & ACLs
  • WireGuard VPN (/24 Routing)
  • LACP / Link Aggregation
  • Cloudflare Edge & Dynamic DNS

Identity, Access & Endpoint Lifecycle

  • Microsoft Entra ID (Azure AD)
  • On-Prem Active Directory (GPO/OU)
  • Okta & SAML 2.0 / SSO
  • SCIM & JIT Provisioning
  • Microsoft Intune & Autopilot
  • Kandji / Jamf (macOS & iOS)
  • SCCM / MDT Imaging
  • Entrust PKI Certificates

Virtualization & Self-Hosted Systems

  • Proxmox VE (KVM & LXC)
  • Enterprise Server Hardware / iDRAC
  • Ubuntu Server & Debian Linux
  • Docker & Compose
  • NUT UPS Telemetry & Alerting
  • Syncthing Mesh Architecture

Automation, Backup & Data Engineering

  • Bash Orchestration
  • Expect CLI Automation
  • Git + git-crypt Encryption
  • API / SSH / TFTP / rsync Drivers
  • Python (pandas, Faker, ETL)
  • SQLite & Stripe Sigma SQL
  • Scheduled Jobs & Watchdog Alerting

ITSM, Documentation & Governance

  • ServiceNow (Incident/Problem/Change)
  • ITIL v4 & KCS Governance
  • Intercom & Freshservice
  • RACI Matrix & 13-Metric KPI Design
  • SOP & Runbook Engineering
  • Audit-First Change Management

AI-Assisted Operations & Guardrails

  • Human-in-the-Loop Case Workflows
  • 26-Gate Pre-Send Verification
  • Zero-Mapping-Key PII Scrubbing
  • Closed-Loop QA Rule Folding
  • Claude Code & Modular Skills
  • Epistemic Provenance Tagging

Featured Systems & Deliverables

Highlighted Work & Architecture Case Studies

Explore interactive showcase modules →
Production Architecture

Automated, Encrypted Multi-Vendor Configuration Backups

Scheduled Linux orchestration engine backing up 5 infrastructure targets (stateful firewall, managed switch, wireless controller, hypervisor host, and container workloads) across API, SSH/Expect, TFTP, and rsync transports into isolated git-crypt encrypted repositories with least-privilege scoped accounts.

BashExpectTFTP/SSH/rsyncgit-cryptREST APIsProxmox VE
Read Case Study →
Infrastructure Architecture

Segmented Enterprise-Pattern Network & Change Governance

Multi-VLAN network architecture across OPNsense, Aruba CX switching, and Aruba Instant APs featuring dedicated /24 WireGuard admin routing, NUT UPS telemetry, sequenced LACP cutover planning, and formal self-audit remediation tracking.

OPNsenseAruba CXAruba InstantWireGuard802.1Q VLANsNUT
Read Case Study →
AI Operations Architecture

CaseDesk & caseAssist: Closed-Loop AI Queue Governance (26-Gate QA)

Human-in-the-loop Tier 3 case-handling architecture (v1 to v11.7.4) enforcing default PII scrubbing, epistemic provenance tagging, a 26-gate pre-send verification checklist, and 9 sha256-verified releases across 39 logged rulings—sustaining a 90%+ QA accuracy pass rate.

Claude ProjectsPythonStripe Sigma SQLMetronomeIntercomsha256 Releases
Read Case Study →
ITSM & Process Governance

Institutional ITIL 4 & KCS Knowledge Governance Redesign

End-to-end ServiceNow knowledge lifecycle and endpoint provisioning SOP overhaul at the University of Toronto Mississauga supporting 1,000+ faculty and staff, featuring a formal RACI ownership matrix and a 13-metric KPI evaluation framework.

ITIL 4KCSServiceNowRACI FrameworksIntuneKandji
Read Case Study →

Professional Track Record

Career Experience & Enterprise Impact

Proven delivery across SaaS AI operations, higher education, policing, enterprise homebuilding, healthcare, and federal service.

Tier 3 Technical Support Specialist

Boldr (Supporting Enterprise AI SaaS / Anthropic Queue Operations)

Jul 2026 – Present

Advanced Tier 3 technical escalations, SaaS billing ledger reconciliation, and enterprise identity/SSO troubleshooting within strict tool-access boundaries.

  • Diagnosed complex SaaS billing exceptions and usage ledger disputes across Stripe Sigma SQL, Metronome usage ledgers, and Forge.
  • Remediated SAML 2.0 / SSO lockouts, IdP configuration defects (Okta, Entra ID), and SCIM vs. JIT provisioning mismatches.
  • Architected CaseDesk (v1–v11.7.4) and the caseAssist governance framework with default PII scrubbing and a 26-gate pre-send verification engine, sustaining a 90%+ QA accuracy pass rate across 9 sha256-verified releases.
Stripe Sigma SQLMetronomeSAML/SSO/SCIMIntercomPythonCaseDesk AI Ops

Principal / Independent IT Consultant

dCode Canada Inc. (16475817 Canada Inc.)

2024 – Present

Incorporated B2B IT consulting practice delivering infrastructure documentation, SOP re-engineering, network segmentation, and operational stabilization.

  • Deliver infrastructure documentation, SOP engineering, and field IT deployment services for SMB and enterprise clients under a formal corporate practice.
  • Design modular client runbooks, device-provisioning SOPs, and 90-day IT operations stabilization roadmaps that eliminate tribal knowledge and key-person dependency.
B2B IT ConsultingSOP & Runbook EngineeringNetwork HardeningITSM Governance

IT Specialist (Level 2)

University of Toronto Mississauga (UTM — I&ITS)

Jul 2024 – Jun 2026

Tier 2 hardware, software, identity, and endpoint infrastructure operations supporting 1,000+ faculty, staff, and researchers.

  • Provisioned, imaged, and managed Windows 10/11 and macOS endpoints using Microsoft Intune, Windows Autopilot, and Kandji, remediating rollout defects from an initial Apple device management deployment.
  • Administered hybrid identity lifecycles, licensing, and security group permissions across on-premises Active Directory and Microsoft Entra ID while maintaining 95%+ ServiceNow SLA compliance.
  • Authored the institutional UTM device provisioning SOP and engineered an ITIL 4 / KCS Knowledge Management Governance redesign featuring a RACI ownership matrix and a 13-metric KPI health framework.
ServiceNowMicrosoft IntuneWindows AutopilotKandji (macOS)Entra ID / Active DirectoryITIL 4 / KCS

Technical Consultant (Level 2 Support — Contract)

Peel Regional Police (via Buchanan Technologies)

Jun 2024 – Jun 2025

Tier 2 operational escalation, queue backlog clearance, and cryptographic identity management in a 24/7 mission-critical policing environment.

  • Systematically triaged and cleared an aging ServiceNow escalation backlog, resolving 100+ complex technical cases.
  • Administered Entrust PKI digital security certificates, encrypted signing workflows, and role-based access controls across Active Directory and Azure AD.
  • Conducted incident pattern analysis to isolate recurring hardware/software defects and staffed extended-hours operational rotations.
ServiceNowEntrust PKIActive DirectoryAzure ADIncident ManagementWindows 10/11

IT Services Specialist & Service Desk Analyst

Mattamy Homes (Sep 2023 – May 2024) & Mattamy Asset Management (Sep 2022 – Aug 2023)

Sep 2022 – May 2024

Enterprise endpoint lifecycle logistics, Day-1 onboarding, solo field network commissioning, and multi-channel Tier 1/2 technical support.

  • Managed end-to-end hardware lifecycle operations (procurement intake, zero-touch staging via Intune/Autopilot/MDT/SCCM, warranty repairs) and authored the enterprise device provisioning SOP.
  • Deployed as solo field IT specialist to commission remote construction trailers and sales offices, installing Fortinet firewalls, switches, and wireless infrastructure.
  • Maintained 95%+ SLA compliance across Tier 1/2 support queues, executing Azure AD identity provisioning, MFA administration, and interactive Day-1 onboarding.
Fortinet Firewalls & SwitchesMicrosoft IntuneAutopilotMDT/SCCMAzure ADAsset Management

Early IT Engagements (Clinical, Election & MSP Field Operations)

University Health Network (UHN) | Elections Ontario | TCP Network Services

Mar 2022 – Aug 2022

Healthcare clinical workstation support, regional polling station tabulator deployment, and multi-tenant SMB desktop/network administration.

  • Delivered clinical workstation and peripheral support at University Health Network (UHN) under strict patient-privacy and uptime standards.
  • Configured, tested, and troubleshot voting tabulators, modems, and network equipment across regional polling stations for Elections Ontario, plus SMB client infrastructure at TCP Network Services.
ServiceNowClinical WorkstationsTabulator HardwareActive DirectorySMB Networks

Payment Services Officer & Financial Services Foundations

Government of Canada (ESDC) | RBC | Bank of Montreal

Mar 2013 – Feb 2022

Six years of high-volume federal regulatory adjudication at ESDC, preceded by consumer lending and compliance roles at RBC and BMO.

  • Administered federal employment insurance claims, verified high-volume financial data, and interpreted complex legislative frameworks with documented audit precision.
  • Underwrote personal lending facilities, executed account reconciliations, and maintained strict regulatory compliance.
Legislative InterpretationFinancial ReconciliationData AuditingRegulatory Compliance

Certifications & Active Tracks

  • ITIL v4 Foundation

    PeopleCert / AXELOS

    In Progress
  • ServiceNow Certified System Administrator (CSA)

    ServiceNow

    In Progress
  • Foundations of Cybersecurity

    Google (via Coursera) • Verify Credential ↗

    Verified • Aug 2023
  • Introduction to PC Security

    Professional Continuing Education (Mike Meyers Curriculum)

    Completed • Oct 3, 2024
  • Introduction to PC Troubleshooting

    Professional Continuing Education (Mike Meyers Curriculum)

    Completed • Oct 1, 2024

Academic Foundations & Coursework

  • Bachelor of Computer Science (Part-Time)

    University of the PeopleIn Progress
  • Undergraduate Coursework in Aerospace Engineering, Physics & Communications Technology

    Carleton University2009 – 2013
  • Completed Technical Coursework: Data Science Foundations (IBM), Programming for Everybody / Python (Univ. of Michigan), Introduction to HTML5 (Univ. of Michigan)

    Coursera (NextGen Cyber Talent Learning Track)100% Completed

B2B Engagements • dCode Canada Inc. (16475817 Canada Inc.)

Consulting & Business Proposal Offerings

Request Statement of Work (SOW) →

IT Knowledge Management, SOP & Runbook Governance Overhaul

Ideal For: SMBs, enterprise IT departments, and MSPs battling tribal knowledge, inconsistent provisioning, and repeat escalations.

Replaces fragmented notes and undocumented procedures with an auditable, ITIL 4 and KCS-aligned knowledge lifecycle—reducing onboarding time, repeat ticket volume, and key-person risk.

Core Deliverables

  • Ticket backlog & documentation gap audit
  • Complete RACI ownership matrix (Author, Verifier, Domain Owner)
  • Standardized SOP, device-provisioning, and operational runbook templates
  • 13-metric KPI evaluation structure for ongoing knowledge health tracking

Network Segmentation, Hardening & Automated Config Backup

Ideal For: Small-to-midsize organizations running firewalls, managed switches, and APs with flat networks or unversioned configurations.

Audit-first network segmentation review paired with automated nightly configuration backups into git-crypt encrypted version control—so disaster recovery never depends on manual GUI exports.

Core Deliverables

  • VLAN segmentation & inter-VLAN firewall rule audit (IPv4/IPv6)
  • Sequenced remediation plan and living network specification document
  • Automated daily configuration backup dispatcher across mixed-vendor gear
  • Encrypted Git repositories with offline key-handling and bare-metal restore runbooks

90-Day IT Operations Stabilization & AI Support Queue Governance

Ideal For: Growing organizations with fragile day-to-day IT operations or SaaS support teams deploying human-in-the-loop AI workflows.

Stabilizes daily support delivery while introducing privacy-safe, verification-gated AI case workflows that prevent hallucinated policy exceptions and PII leaks.

Core Deliverables

  • Baseline IT operations & escalation routing assessment
  • Default PII redaction & multi-stage pre-send verification checklist design
  • Closed-loop QA feedback framework linking audit misses to versioned rule releases
  • Prioritized 90-day stabilization roadmap and handover documentation

Content Collection

Technical Case Studies & Architecture Notes

All articles (6) →