I'm a
I design, secure and run the IT backbone of modern businesses — from networks, servers and identity to endpoint security and ERP. 10+ years turning complex infrastructure into reliable, well-documented systems.
Senior IT specialist and system administrator with 10+ years across networking, infrastructure, identity, endpoint security and ERP — spanning Malaysia and Uzbekistan.
I'm Oybek Gaffarov. My career started with hands-on network and helpdesk support in Kuala Lumpur and has grown into senior IT roles covering the full stack — Windows Server & Active Directory, Microsoft 365, identity & access management, endpoint security (MDM/UEM), firewalls and VPNs, IP telephony, and 1C:Enterprise/ERP infrastructure.
Today I support a remote-first, security-conscious workforce with zero-trust access, automated backups and tight SLAs — while keeping everything documented and reliable. I'm a technology addict who believes that staying curious is the real edge.
B.Tech, Business Information System (BIS) — Asia Pacific University of Technology & Innovation (APU), Kuala Lumpur, Malaysia (2012 – 2016)
A decade of hands-on work across infrastructure, identity, security and enterprise systems.
A timeline of where I've worked and studied.
Remote-first IT operations across identity, endpoint security and zero-trust networking for a distributed workforce.
Own the full IT stack — network, servers, security and industrial systems — for a manufacturing business.
IT operations and network switching support in a university environment.
Configuration and commissioning of new 2G/3G base stations (BBU/RRU).
End-to-end IT services — from network and servers to identity, security and automation.
Design and manage office networks — firewalls, managed switches, dual-WAN, SSL/IPsec VPN and structured cabling for solid uptime.
Windows Server, Active Directory & DNS, Microsoft 365 / Google Workspace administration, and automated NAS backups for disaster recovery.
Centralized directory, SSO and user lifecycle with JumpCloud and Microsoft 365 — secure onboarding and offboarding done right.
Device compliance, patch management and asset tracking across macOS & Windows fleets with ManageEngine Endpoint Central and zero-trust access.
Install, configure and maintain 1C:Enterprise and ERP systems — integrations with barcode scanners, weighing terminals and reliable backups.
Deploy and manage Yeastar IP PBX / VoIP endpoints and CCTV/NVR surveillance for connected, secure premises.
Build custom Telegram bots for automation, notifications, internal tooling and customer interaction.
Tier 2/3 support with clear SLAs and root-cause analysis through Jira Service Management — issues resolved and documented.
Have a project, opportunity, or just want to say hi? Send me a message.