I'm a
I design, secure and run the IT backbone of modern businesses — from networks, servers and identity to endpoint security and ERP. 10+ years turning complex infrastructure into reliable, well-documented systems.
Senior IT specialist and system administrator with 10+ years across networking, infrastructure, identity, endpoint security and ERP — spanning Malaysia and Uzbekistan.
I'm Oybek Gaffarov. My career started with hands-on network and helpdesk support in Kuala Lumpur and has grown into senior IT roles covering the full stack — Windows Server & Active Directory, Microsoft 365, identity & access management, endpoint security (MDM/UEM), firewalls and VPNs, IP telephony, and 1C:Enterprise/ERP infrastructure.
Today I support a remote-first, security-conscious workforce with zero-trust access, automated backups and tight SLAs — while keeping everything documented and reliable. I'm a technology addict who believes that staying curious is the real edge.
M.Sc., Security Architecture — ITP University, Tashkent, Uzbekistan (2026 – 2028, in progress)
B.Tech, Business Information System (BIS) — Asia Pacific University of Technology & Innovation (APU), Kuala Lumpur, Malaysia (2012 – 2016)
A decade of hands-on work across infrastructure, identity, security and enterprise systems.
A timeline of where I've worked and studied.
Own the full IT stack — network, servers, security and industrial systems — for a manufacturing business.
Remote-first IT operations across identity, endpoint security and zero-trust networking for a distributed workforce.
IT operations and network switching support in a university environment.
Configuration and commissioning of new 2G/3G base stations (BBU/RRU).
A few builds that show how I approach infrastructure problems end to end.
An ageing flat network with a single uplink kept dropping production traffic and had no safe remote path in.
Rebuilt the topology around Zyxel firewalls and managed switches, added dual-WAN failover, and stood up SSL and IPsec VPN for off-site access.
Production data lived on paper and spreadsheets, so stock and weighing figures never reconciled.
Provisioned the server and database infrastructure, administered 1C:Enterprise, and integrated barcode scanners and weighing terminals on industrial PCs with automated NAS backups behind it.
Drivers needed a way to confirm delivered orders from the road, with the result landing straight in 1C rather than waiting on paperwork.
Built an installable progressive web app where drivers mark orders as delivered, wired to 1C:Enterprise through its OData REST interface so each confirmation updates the order record directly.
A remote-first workforce on mixed macOS and Windows hardware needed one identity and no flat VPN trust.
Centralised directory, SSO and user lifecycle in JumpCloud with Google Workspace, enforced device compliance through ManageEngine Endpoint Central, and replaced blanket VPN access with FortiClient ZTNA and Pritunl.
The university needed a working teaching lab for hands-on networking coursework.
Joined the project team to configure Cisco and Ruckus switching and wireless, run the cabling and access points, and connect MS SQL databases to the lab applications.
End-to-end IT services — from network and servers to identity, security and automation.
Design and manage office networks — firewalls, managed switches, dual-WAN, SSL/IPsec VPN and structured cabling for solid uptime.
Windows Server, Active Directory & DNS, Microsoft 365 / Google Workspace administration, and automated NAS backups for disaster recovery.
Centralized directory, SSO and user lifecycle with JumpCloud and Microsoft 365 — secure onboarding and offboarding done right.
Device compliance, patch management and asset tracking across macOS & Windows fleets with ManageEngine Endpoint Central and zero-trust access.
Install, configure and maintain 1C:Enterprise and ERP systems — integrations with barcode scanners, weighing terminals and reliable backups.
Deploy and manage Yeastar IP PBX / VoIP endpoints and CCTV/NVR surveillance for connected, secure premises.
Build custom Telegram bots for automation, notifications, internal tooling and customer interaction.
Tier 2/3 support with clear SLAs and root-cause analysis through Jira Service Management — issues resolved and documented.
Have a project, opportunity, or just want to say hi? Send me a message.