I'm Ahmed — a recent IT Network Security graduate. I design, segment, and automate small-scale enterprise environments: pfSense routing, VLAN-isolated switching, Hyper-V infrastructure, and workflow automation between GLPI, n8n and Active Directory.
I graduated in IT Network Security and immediately built a physical HomeLab to translate theory into operational practice — designing segmented networks, hardening servers, and automating the boring parts of IT operations.
VLAN isolation, firewall rule design, VPN access for restricted segments, and least-privilege routing on pfSense.
Windows Server 2019, Hyper-V virtualization, Active Directory user lifecycle, GPOs and group-based access.
Webhook-driven workflows in n8n that connect ticketing (GLPI), identity (AD) and IT operations end-to-end.
An end-to-end workflow that turns a single HR form into a fully provisioned AD account and a ready-to-action helpdesk ticket — eliminating manual hand-offs between HR and IT.
HR fills a new-hire form inside GLPI with the employee's name, department and role.
On submission, GLPI calls an n8n webhook with the structured payload.
The workflow normalizes data, generates a username/password, and routes to AD.
PowerShell over WinRM creates the AD user, assigns the right security groups and OU.
A guided ticket is auto-created in GLPI so the IT tech knows exactly which PC to prepare.
Manual onboarding reduced from ~30 minutes of IT work to a single HR click.
Webhook security, idempotent provisioning, PowerShell remoting, AD schema attributes, and how to design workflows that fail loudly instead of silently.
Hardware-backed lab where every layer is configured by hand — not a cloud sandbox. Used daily to validate security designs before recommending them.
Mini PC running pfSense — DHCP, inter-VLAN routing, firewall rules, OpenVPN for the Devs VLAN.
802.1Q trunk to pfSense, access ports tagged per VLAN (10/20/30/40).
Windows Server 2019, 16 GB RAM. Runs Active Directory, GLPI on XAMPP, and n8n in dedicated VMs.
Admin VLAN reachable only from a hardened jump host. Devs VLAN requires VPN. Guests fully isolated.