// IT Professional — Portfolio

Aman Faizal

أمان فيصل

Certified Ethical Hacker · IT Infrastructure Administrator · IoT Automation Specialist
Self-taught technology professional managing enterprise IT for 7,000+ users while building innovative automation solutions.

🔐 CEH Certified 💼 Freelance IT 🏢 Enterprise IT 🏠 IoT Expert 🌐 Network Engineer
4+Years Experience
7,000+Users Supported
15+Certifications
95%Issue Resolution Rate
Who I Am

I'm a technology enthusiast who transformed curiosity into expertise — without a traditional tech degree. My journey began with a simple question: "How does this work?" — leading me from disassembling gadgets as a hobbyist to managing mission-critical infrastructure for thousands of users.

What sets me apart is my hybrid approach: I combine enterprise-level IT administration with hands-on maker skills, cybersecurity expertise, and a passion for automation. Whether I'm managing HP ProLiant servers and Sophos firewalls at work, or building ESP8266-powered smart home systems at home, I bring the same level of precision and innovation.

What I Do

🏢 Enterprise IT Infrastructure

  • Managing 500+ staff, 6,500+ students
  • 170+ PCs, 190+ smartboards/projectors
  • HP ProLiant DL360 Gen10, Active Directory
  • QNAP NAS, CCTV, biometrics, POS systems
  • Microsoft 365 & AWS administration
  • Campus-wide network & vendor coordination

🏠 IoT & Home Automation

  • ESP8266/ESP32 firmware development
  • Multi-room smart home systems (4+ rooms)
  • Alexa, Google Assistant, Sinric Pro
  • Tasmota & ESP RainMaker platforms
  • IR/RF remote control systems
  • ~15% energy efficiency improvements

☁️ Cloud & Virtualization

  • Proxmox VE multi-OS hosting
  • Private cloud storage (Nextcloud)
  • Tailscale VPN & Cloudflare Tunnel
  • Media servers (Plex, Jellyfin)
  • VoIP systems (Asterisk/FreePBX)
  • 24/7 monitoring (Zabbix, Nagios)
Technical Arsenal

Operating Systems

Windows ServerLinux (Ubuntu · RHEL · Kali)macOSAndroidAndroid TV OS

Cloud & Virtualization

AWS (EC2 · S3 · VPC)Microsoft 365Proxmox VEVMwareHyper-VDockerLXC

Networking & Security

TCP/IP · DHCP · DNSVPN (WireGuard · Tailscale)Penetration TestingWi-Fi OptimizationZabbix · Nagios · NtopngSophos XGS

IoT & Automation

ESP8266 · ESP32Arduino · NodeMCUTasmotaESP RainMakerSinric ProHome AssistantRelay Modules · SSR

Web & Software

Vanilla JS · HTML5 · CSS3Google Apps ScriptREST APIsPDF-lib · QRCode.jsWeb Speech API
Professional Journey

IT Administrator

Gulf Asian English School, Sharjah, UAE · Nov 2024 – Present

Managing enterprise IT infrastructure for 7,000+ users. Overseeing HP ProLiant DL360 Gen10 servers, Sophos XGS 4500 firewall, QNAP NAS, Microsoft 365, AWS cloud services, and campus-wide network infrastructure. Supporting 170+ PCs, 190+ smartboards/projectors, CCTV, biometrics, and POS systems.

Freelance IT Support & Network Admin

Self-Employed · May 2021 – Present

PC assembly, network design, IoT automation projects. Deployed network for 160+ users, developed smart home systems, provided remote/onsite troubleshooting with 95% resolution rate.

Technical Support — Apple Certified

Ample Technologies, India · Feb 2022 – Oct 2023

iOS/macOS hardware and software diagnostics with 90% first-time resolution. Completed 318 Apple ATLAS courses. Supported 10+ cases daily with 90% customer satisfaction.

Certifications & Training
Certified Ethical Hacker (CEH)EC-Council · 2025
Advanced Penetration TesterRedTeam Hacker Academy · 2024
Google IT Support ProfessionalGoogle · 2024
RHCE & AWS Solution ArchitectScope India · 2023
Apple Technical Learning (318 Courses)Apple ATLAS · 2022
Network Administration DiplomaJetking (MCSA · RHCSA · CCNA · A+ · N+) · 2022
CompTIA Security+Udemy · 2023
DevOps FundamentalsIBM Coursera · 2023
Intel Network AcademyIntel · 2022
Why Work With Me

🔧 Hands-On Problem Solver

I don't just manage systems — I build, repair, and optimize them from scratch. From soldering circuits to configuring enterprise firewalls.

📚 Continuous Learner

15+ certifications, 318 Apple courses, constantly exploring new technologies. Self-taught journey proves passion rivals any formal degree.

💡 Cost-Effective Innovator

Proven track record of delivering enterprise solutions on tight budgets. Built complete cloud infrastructure with zero monthly costs.

🔐 Security-First Mindset

CEH certified with practical penetration testing experience. Network hardening, vulnerability assessment, and threat mitigation.

🎯 Full-Stack IT Skills

From microelectronics to cloud infrastructure. Hardware assembly, network design, security auditing, automation — complete end-to-end capability.

📝 Documentation & Teaching

Active creator of technical content and project documentation. Clear communicator who explains complex concepts simply.

// Detailed Projects
Hardware & Software Engineering

DIY IoT systems, server infrastructure, cybersecurity tools, and web apps — built from first principles using low-cost, open-source hardware and software.

01
Browser-Based IT Tools & Dashboards

Full-featured web apps built with Vanilla JS and Google Apps Script — enterprise-style admin consoles, network monitoring dashboards, and IT utility suites.

Active Directory Console — aman5z.in
Windows AD-style enterprise IT admin dashboard built entirely in the browser
Live Project

A fully functional browser-based IT administration dashboard inspired by Windows Active Directory Users and Computers. Single-page HTML application with a Windows-style UI — title bar, menu bar, toolbar, tabbed navigation, sidebar, and status bar — all running client-side with a Google Apps Script + Sheets backend.

User & Access Management

Role-based access control (Admin, Technician, User) with granular per-user permissions. Full user management: create, edit, enable/disable, delete, reset passwords.

IT Ticket System

Priority levels, SLA tracking, and assignment workflow. Audit log with filtering, action tagging, and CSV export.

Token Counter System

Manages numbered queues with a live display output — suitable for service desks and front-office environments.

File Drive

Google Drive-backed file manager with folder navigation, upload, delete, grid/list views, and storage usage indicator.

Built-in IT Tools Suite

QR & barcode generator, PDF tools (merge/split/compress/watermark/rotate), subnet calculator, ping monitor with live chart, Base64 encoder, hex/binary converter, password generator, MAC vendor lookup, DNS tools, and more.

System Dashboard & Terminal

Live charts for user stats and ticket status. Fully functional terminal shell with command history. Dark/light theme toggle.

Vanilla JSHTML5 / CSS3Google Apps ScriptGoogle Sheets (DB)PDF-libJsBarcodeQRCode.jsWeb Speech APIRBAC
ZKTeco Attendance Management Dashboard
Full-stack Python + Flask dashboard for biometric attendance tracking across 4 devices
Live Project

A complete attendance management system built in Python, replacing the legacy Middle East Attendance software. Connects live to 4 ZKTeco biometric devices (G3 + iFace950) over LAN using the ZK protocol, cross-references against a .mdb database, and generates department-filtered absent/present reports. Features a dark-themed web dashboard with PWA support for mobile access.

Live Device Integration

Pulls real-time punch data from 4 ZKTeco devices simultaneously using pyzk over port 4370. Per-device status monitoring with timeout detection (ping OK vs attendance fetch failure).

Smart Absent Reporting

Filters active employees (ATT=1) from .mdb database, cross-references live punches, and generates department-wise absent lists for Admin, Teaching, Support, Cleaning Staff, and Transport.

Interactive Web Dashboard

Flask-based single-page app with Overview, Today's Report, History, and Device Management tabs. Collapsible day-by-day history, searchable tables, and department bar charts.

Excel Export

One-click export of absent reports to formatted .xlsx with department grouping, alternating row colors, and summary sheet — for both today and any custom date range.

PWA + Mobile Ready

Installable as a home screen app on Android via PWA. Service worker caches the UI; API calls always fetch live data. Fully mobile-responsive layout.

Device Management

Per-device user count, serial number, firmware info, and punch log viewer for any date via modal popup.

PythonFlaskpyzkpyodbcpandasopenpyxlMicrosoft Access (.mdb)ZK ProtocolPWAService WorkerVanilla JS
School Circular Email Automation System
Bulk email system for distributing circulars to 5,500+ parents via Gmail
Live Project

An end-to-end circular distribution system built for Gulf Asian English School. Extracts and deduplicates parent emails from Excel, splits into 500-email BCC batches respecting Gmail limits, and distributes across 6 Gmail accounts automatically. Includes a browser-based batch manager and a desktop GUI sender.

  • Extracts & deduplicates emails from any Excel file
  • Splits into 500-per-batch columns with comma-separated copy buttons
  • HTML batch manager — copy per batch directly into Gmail BCC
  • Python desktop GUI with class filter, PDF attachment, live send log
  • Converts to standalone .exe — no Python required on other machines
  • Supports 6 Gmail accounts in rotation (2,000 emails/account/day)
PythonTkinteropenpyxlsmtplibSMTP / GmailPyInstallerVanilla JSHTML5 / CSS3
IT Helpdesk Ticket Management System
Web-based ticketing system with role-based access and SLA monitoring
Open Source

A browser-based IT ticket management system to streamline internal support workflows. Users submit issues while technicians manage, assign, and resolve tickets through a centralized dashboard. Powered by Google Apps Script as a serverless backend.

  • Role-based access: Users create/track; Technicians manage and resolve
  • Ticket creation with priority levels, description, and optional file attachments
  • SLA countdown, overdue detection, and dashboard analytics (open / closed / overdue)
  • Dark/light themes, live clock, weather display, auto-refresh, and search filtering
Vanilla JSGoogle Apps ScriptFetch APIFileReader APIGeolocation APISLA MonitoringRBAC
Token Queue Management System
Live queue display, ticket printing, and multi-counter support for service centers
Open Source

A web-based token queue system for clinics, banks, and service centers. Operators manage tokens via an admin dashboard; a public display shows current tokens in real time with flash animations and voice announcements via Web Speech API. Backed by Google Apps Script for real-time sync without a dedicated server.

  • Generate, repeat, and navigate tokens per counter with automatic prefix system
  • Admin controls: add, rename, and delete counters with role-based access
  • Public display with flash animation, beep alerts, and voice announcements
  • Printable service tickets with custom logo, heading, and timestamp
Vanilla JSGoogle Apps ScriptWeb Speech APIWeb Audio APIJSONPPrint API
IT Tools Dashboard
Swiss-army knife for IT admins — networking, security, and utility tools in one browser tab
Open Source

A browser-based multi-tool dashboard combining commonly used IT utilities into a single interface. All processing is client-side for fast performance and better privacy. Features search filtering, favorites, keyboard shortcuts, and exportable logs.

Utility Tools

QR/barcode generator, Base64 encoder/decoder, hex/binary/decimal converter, password generator with strength analysis, text diff tool.

Networking Tools

IP info, DNS lookup, URL-to-IP resolution, hosting provider detection, URL shortener, subnet calculator, MAC vendor lookup.

Monitoring & Files

Ping monitor with latency chart, real-time console output, Google Drive upload with QR sharing, client-side PDF editing.

Vanilla JSPDF-LibJsBarcodeQRCode.jsGoogle Apps ScriptBattery APIClipboard API
02
Ethical Hacking & Penetration Testing Tools

Custom hardware tools for Wi-Fi security research and HID exploitation — built for educational understanding of network vulnerabilities.

Wi-Fi Deauther + Wi-Fi Duck
Combined hardware toolkit for Wi-Fi DoS testing and HID injection
Research

A dual-purpose device combining a Wi-Fi deauthentication tool and a USB HID injection platform ("Wi-Fi Duck"), built using a Pro Micro (ATmega32U4) and D1 Mini (ESP8266). OLED display provides real-time feedback; RGB LED indicates device state. Powered by a TP4056 Li-ion charging circuit for portability.

Wi-Fi Deauther

Exploits the 802.11 deauthentication frame vulnerability to disconnect devices from a target Wi-Fi network. Used for DoS demonstration and network security auditing. For educational/authorized use only.

Wi-Fi Duck (HID Injection)

When plugged via USB, emulates a keyboard/mouse (HID device). Remote scripts are delivered over the ESP8266 hotspot, allowing keystroke injection undetected by most antivirus software.

Components
Pro Micro (ATmega32U4)USB HID emulation (keyboard/mouse)
D1 Mini (ESP8266)Wi-Fi deauth attacks + hotspot
0.96" OLED DisplayStatus & network selection UI
TP4056 ChargerLi-ion battery management
External AntennaExtended Wi-Fi range
WS2811 RGB LEDVisual state indicator
Wiring
SCL (3)→ D1 (ESP8266)
SDA (2)→ D2 (ESP8266)
GND→ GND (shared)
VIN→ 5V
Pin 7→ LED Data (RGB)
D5/D6/D7→ OK / Up / Down buttons
ESP8266ATmega32U4ArduinoUSB HID802.11 Mgmt FramesTP4056
03
Home Automation & Connected Devices

Full-home automation using ESP8266/ESP32, relay boards, Tasmota firmware, and voice assistant integration. Projects span smart rooms, vehicle access, and custom smart hardware.

Smart Home — Multi-Room Automation
4 zones: Bedroom 1 & 2, Living Room, Kitchen
DIY

Bedroom 1

8-channel relay + NodeMCU controlling tube lights, ceiling fan, Philips Wiz bulb, DIY RGB lamp, study lamp, and 3 sockets. Sockets auto-shutoff at 100% charge. AC via Homemate Wi-Fi IR remote with scheduled temperature automation (24°C → 26°C → off by 5 AM).

Bedroom 2

Philips Wiz smart bulb as night lamp (10% brightness). AC via 40A SSR + NodeMCU flashed with Tasmota inside the AC stabilizer. Auto-shutoff at 5 AM, stabilizer powers down 5 min later. DIY SSR using LED + LDR for optoisolation.

Living Room

Echo Dot 3rd Gen for voice control. 4-channel relay + ESP8266 manages TV, bias lighting, and 5.1 soundbar via Sinric Pro. Custom Alexa routines: "Movie Time" dims lights & enables soundbar; "Movie Break" pauses media and restores lights to 50%.

Kitchen

Water pump timer using 40A SSR + Arduino Nano. 3-button interface: 2-min, 7-min, and reset. Prevents tank overflow and saves energy. Housed in a standard 2-module electrical box.

Voice Automation Scenarios
"Movie Time"TV on → soundbar connects via HDMI ARC → LED strip on → main light off
"Movie Break"Media paused via IR → Wiz bulb at 50% brightness
Scheduled 3–5 AMAC steps down 24°C → 26°C → off; fan off at 6 AM
Sinric ProAlexaGoogle AssistantPhilips Wiz40A SSR8-ch RelayArduino NanoHomemate IRESP8266
Smart Extension Box V3
6-socket individually-controlled smart power strip
DIY

Upgraded a standard GoldMedal 6-socket extension box with a 6-channel relay (4+2), ESP32, and AC-to-DC 5V 2A adapter. Individual socket control via IR remote, ESP RainMaker app, Alexa, or Google Assistant. Added a reset switch and external USB-A port for OTA reprogramming.

  • IR remote assigns unique commands per socket; '0' kills all sockets
  • Timer and automation support via ESP RainMaker
  • Voice control via Alexa and Google Assistant
  • External reset + reprogramming port for field updates
ESP32ESP RainMakerIR (TSOP)Relay ModuleAlexaGoogle Assistant
Bike Keyless Entry via IoT
Wi-Fi & RF-based proximity keyless system for a motorcycle
DIY

A 4-channel relay + NodeMCU ESP8266 connected to the bike's ignition, kill switch, and self-start — controllable via Alexa, Google Assistant, or a WearOS app. Powered by 12V-to-USB adapter from the bike battery. Salvaged RF module from an RC car converted into a keychain remote for proximity auto-lock/unlock (locks beyond ~10m). Helmet-triggered engine start via Bluetooth receiver.

  • Ignition, kill switch, and self-start via app/voice
  • Proximity auto-lock/unlock via salvaged RF module
  • Helmet-triggered start via Bluetooth receiver
  • WearOS Alexa app integration
NodeMCU ESP82664-ch RelayRF ModuleBluetoothWearOSAlexa
IoT RC Car with Custom Web Controller
Wi-Fi controlled car built from salvaged RC parts, controlled via a local HTTP page
DIY

Built a Wi-Fi RC car using a NodeMCU ESP8266 and motor controller, salvaging the gearbox, motors, and wheels from an old RC chassis. Control handled through a locally hosted HTTP page served by the ESP8266 — no app install needed.

NodeMCU ESP8266Wi-Fi host + HTTP control server
Motor Controller BoardDrives direction and speed
RC Car Gearbox + WheelsSalvaged drivetrain
3.7V + 9V BatteriesLogic and motor power supply
NodeMCU ESP8266Motor ControllerHTTP Server
DIY Smart Home Display (Echo Show Clone)
Repurposed damaged POCO M3 as a portable smart home hub
DIY

A POCO M3 with a broken charging port, dead SIM, and broken GPS was repaired (display replaced), debloated (85–90% MIUI removed), and mounted in a custom holder with an integrated 5W speaker and 10,000 mAh power bank. Runs Alexa as a full voice assistant for smart home control and media playback. Also controllable from a WearOS watch.

POCO M3AlexaMIUI DebloatWearOS10,000 mAh Power Bank
04
Server Virtualization, Cloud & Network Engineering

Homelab and production-grade network deployments using open-source tools — from multi-OS Proxmox environments to enterprise-style network design for a 35-room villa compound.

AIO Home Server — Multi-OS Virtualization Platform
Repurposed HP i3 laptop running Proxmox VE + Raspberry Pi 5 node
Self-Hosted

Transformed an idle HP i3 laptop by upgrading SSD/RAM and modifying the power button for lid-closed booting. Installed Proxmox VE for full virtualization, running multiple OS instances with automated backups and snapshots. A Raspberry Pi 5 runs UmbrelOS/CasaOS with a 500 GB SSD for private cloud storage. All infrastructure is zero-cost using free, open-source software.

Virtualization & VMs

Proxmox VE hosting Ubuntu Server, Kali Linux, Windows 11, Windows Server, Android TV OS, and multiple LXC containers. Accessible via VNC from any browser.

Remote Access

Cloudflare Tunnel for HTTPS public access via custom subdomains. Tailscale VPN (WireGuard) for secure mesh networking across all devices.

Private Cloud Storage

Nextcloud + OpenMediaVault on Raspberry Pi 5 with 500 GB SSD. Accessible across Windows (SMB), Linux, and Android.

Media & Web Services

Plex + Jellyfin for media streaming. Internal web server for personal projects. Firefox proxy browser inside CasaOS.

IoT Integration

Tasmota-managed IoT devices on LAN, remotely accessible via Tailscale + Cloudflare Tunnel.

VoIP System

Asterisk + FreePBX configured for a local IVR and telephony setup.

Proxmox VERaspberry Pi 5Tailscale / WireGuardCloudflare TunnelNextcloudOpenMediaVaultPlex / JellyfinAsterisk / FreePBXTasmotaUmbrelOS
Villa Network — Multi-Compound Wi-Fi Deployment & NOC Dashboard
35-room, 160+ concurrent user network across two compounds · Freelance · Dec 2024
Freelance

Designed and deployed a cost-effective enterprise-grade Wi-Fi network across two villa compounds with 35 rooms, supporting 110+ Wi-Fi users and 160+ peak concurrent users. All 16 routers repurposed from existing hardware, configured as APs with static IPs and non-overlapping channels. Achieved 200–230 Mb/s stable throughput — all monitoring at zero additional cost.

Network Hardware
ComponentRole
TP-Link Archer AX53 (AX3000)Primary router — traffic management & inter-compound link via CAT6
TP-Link LS1008G SwitchDistribution switch linked to main Etisalat ISP router
D-Link DGS108G + Linksys LGS105V2Access-layer switches for both compounds
16 × Mixed-brand routersAccess Points — DHCP disabled, static IPs, staggered channels
HP Laptop (Proxmox)24/7 monitoring via Zabbix, Nagios, Ntopng — zero additional cost
NOC Monitoring Dashboard

Custom homelab-style Network Operations Center web dashboard using Vanilla JS, hosted via Blogger layout override. Provides unified LAN/WAN health visibility with embedded monitoring tools, real-time clock, and a dark-mode admin UI.

WAN Monitoring

Embedded Fast.com speed test, public uptime tracking, external network status monitoring.

Planned Enhancements

Prometheus + Grafana, Docker backend, SNMP, authentication layer, PWA deployment, AWS/Azure hosting.

Pi-hole DNS & Filtering

Self-hosted Pi-hole for network-wide ad blocking, DNS filtering, and traffic monitoring — acts as a lightweight firewall layer across all 160+ users.

TP-Link AX3000CAT6ProxmoxUbuntu ServerZabbixNagiosNtopngTailscaleVanilla JSFast.com
05
DIY Electronics, Mods & Old Hardware Revival

Creative reuse of old smartphones, scrap components, and consumer electronics — from Li-Fi audio transmission to hardware phone modifications.

Electronics & Smartphone Projects
Li-Fi audio, IP camera, smart display, glyph clone, and hardware mods — all from salvaged or repurposed components
DIY

A collection of electronics experiments and smartphone repurposing projects — proof-of-concept builds, zero-cost hardware upgrades, and creative mods using off-the-shelf or salvaged components.

💡 Li-Fi Audio Transmission

Transmitted audio wirelessly using light modulation. Aux output drives a laser diode or LED; a solar panel on the receiver side converts the light signal back to audio via aux input. A proof-of-concept for Li-Fi using entirely off-the-shelf components.

📷 Wi-Fi IP Camera

Converted a retired Android phone into a Wi-Fi IP camera accessible over the local network. A zero-cost alternative to dedicated IP cameras — leveraging existing hardware and a streaming app.

🖥️ Smart Home Display (Echo Show Clone)

A POCO M3 with broken charging port, dead SIM, and broken GPS — repaired, debloated (85–90% MIUI removed), and mounted in a custom holder with an integrated 5W speaker and 10,000 mAh power bank. Runs Alexa for voice control; also operable from a WearOS watch.

✨ Nothing Phone Glyph Clone

Added a rear LED strip to a POCO M3 to replicate the aesthetic of the Nothing Phone (1) glyph interface — purely hardware, no software modifications required.

🔊 Speaker + Battery Upgrade

Integrated an external 5W speaker and 10,000 mAh power bank into a custom phone holder. Extended the power button externally for easy one-handed access in closed-lid configuration.

Li-Fi Laser Diode / LED Solar Panel Android IP Camera App POCO M3 Alexa MIUI Debloat WearOS LED Strip 5W Speaker 10,000 mAh Power Bank

What Drives Me

"Technology should empower, not complicate."

I believe the best solutions combine security, efficiency, and user experience. Whether I'm hardening a school network against threats, automating a home to save energy, or repurposing old hardware into something useful, my goal is always the same: make technology work smarter, not harder.

My journey from curious hobbyist to certified ethical hacker and IT administrator proves that passion and persistence can rival any formal degree. I'm constantly learning, building, and sharing — because technology is too exciting to keep to yourself.

Let's Connect

Whether you need enterprise IT support, cybersecurity consulting, custom IoT solutions, or just want to talk tech — I'm always up for a conversation.

Turning curiosity into capability, one project at a time.