Ash Kavousi
I'm
About
Resourceful IT/OT Systems Engineer and Technical Leader with extensive experience across MSP, enterprise, industrial, and mining environments. I specialize in designing and implementing secure, high-performance infrastructure that bridges IT and OT, delivering scalable, resilient solutions that enhance cybersecurity, reliability, and operational performance.
Supports technology roadmaps and digital transformation with strategic guidance, and manages ICT teams to deliver effective solutions. Combines strong hands-on knowledge of networking and cybersecurity with effective engagement with customers and stakeholders to ensure technology solutions meet business needs.
IT/OT Systems Engineer & Technical Leader
I design and deliver secure, resilient IT and OT systems that improve efficiency and support business continuity. My work focuses on cybersecurity, networking, cloud platforms, and automation—helping organizations modernize infrastructure while maintaining operational integrity and performance. Experienced in leading technical teams and delivering complex projects on time and within scope, while building reliable systems that support business continuity and align with organizational goals.
- IT & OT Network Support & Operations
- Azure Cloud & Hybrid Infrastructure
- OT/ICS Integration & Reliability
- Infrastructure & Architecture
- Cybersecurity & System Hardening
- Technology Strategy, Roadmaps & ICT Management
Certifications: Microsoft (MCSE, MCSA), Cisco (CCNA, SCOR), ISO 27001 Lead Implementer/Auditor; CISSP expected Dec 2025.
Passionate about building reliable, secure systems that empower operations and people, translating business requirements into practical solutions and delivering successful projects with a business-focused mindset.
Skills
Using AI, these ratings assess my expertise, certifications, and IT/OT experience. Percentages reflect mastery (100% = expert/certified), strong proficiency (80–95%), solid experience (60–79%), and foundational knowledge (<60%), ensuring credible, honest highlights of my strengths.
Professional Experience
My experience spans multiple sectors including MSP, enterprise, industrial, and mining. For each role, I have listed the key technologies, tools, and practices I have worked with. While this demonstrates broad exposure and hands-on involvement, it does not imply mastery of every item; instead, it reflects my ability to quickly learn, adapt, and apply relevant skills.
Newmont Mining
As the world’s largest gold mining company, Newmont operates one of Australia’s largest and most technologically advanced mining sites.
OT/ICS Technology Advisor
Sep 2023 - Present Orange, NSW — Hybrid
Providing regional-level guidance on operational technology, network architecture, and cybersecurity uplift across multiple mining sites. Led initiatives to enhance OT resilience through a zoning-based security model and directed the migration from Forescout to Claroty for asset visibility and threat monitoring. Designed and deployed a cloud-managed cybersecurity platform leveraging Linux-based collectors and SPAN port traffic analysis, improving visibility, compliance, and incident response across OT environments.
Technologies & Practices
- Claroty, Forescout and SPAN Port Traffic (OT/IoT Cybersecurity)
- Industrial Switches (Hirschmann, Moxa, Cisco & RuggedCom)
- Network Segmentation/Zoning, Systems HA and Redundancy
- OT/ICS Protocols: Modbus, Profibus, OPC
- Yokogawa DCS, FCS, Citect SCADA & FactoryTalk networks
- ControlLogix, STARDOM and SIMATIC S7 PLCs comms
- Eaton Industrial UPS (Online double-conversion, IGBT-based)
Infrastructure Specialist
Sep 2022 - Aug 2023 Orange, NSW — Hybrid
Supported a large-scale, converged IT/OT environment across surface and underground operations. Managed local data centre infrastructure divided between Business and Production domains, ensuring high reliability, performance, and security. Contributed to Newmont’s Cloud-First strategy by implementing, testing, and integrating new systems and services across hybrid and on-prem environments. Focused on optimising infrastructure to meet vendor-specific technology and cybersecurity requirements within the Production network.
Technologies & Practices
- Microsoft Azure, Entra ID, Intune (MDM)
- Microsoft CSSM, MDT and WSUS
- VMware ESXi, vSphere and vCentre
- Cisco ISE (Identity Services Engine)
- Eaton modular UPS (data centre-grade)
- Cisco Unified Computing System (UCS) and Dell PowerEdge
- SolarWinds, NetBrain and Lansweeper
- Symantec Endpoint Protection (SEP/SEPM)
The Missing Link
The Missing Link is a Sydney-based, award-winning MSP specialising in IT, Cloud, and Cybersecurity solutions for enterprise and government clients.
Senior System Engineer
Jul 2020 - Aug 2022 Sydney — Remote
Served as a trusted technology advisor within the Solutions Team, collaborating with clients and internal stakeholders to design and deliver scalable IT infrastructure and cloud solutions. Conducted detailed assessments of enterprise environments, identifying performance and security gaps, and developing modernization strategies leveraging Microsoft 365, Azure, virtualization, and hybrid cloud architectures.
Led key cybersecurity and compliance initiatives, implementing Intune/MEM frameworks with MFA, Conditional Access, geo-blocking, SSO, and automated patch management to strengthen endpoint and identity security.
Delivered multiple infrastructure and migration projects, including private cloud VM migrations, network upgrades, and security integrations. Demonstrated strong technical leadership and cross-functional collaboration to ensure reliable, secure IT operations.
Technologies & Practices
- VMware ESXi, vSphere, vCenter, vMotion and HCX.
- Entra ID, MDM (Intune), IAM, PAM, SSO, MFA, CA and RBAC.
- Defender for Endpoint (MDE) and Defender XDR
- Veeam, NetApp, Cloudflare, Mimecast and Proofpoint
- Private Cloud and VPS Hosting.
- Dell Hyperconverged infrastructure (HCI).
5G Networks
Australian teleco and cloud services provider delivering data centre, cloud, and managed IT solutions to enterprise and government clients nationwide.
Network Engineer
Jan 2017 - Jun 2020 Sydney — Remote
Joined the core technical team following 5G Networks’ acquisition of Inabox Group, contributing to the design, deployment, and support of enterprise-grade network and ICT systems.
Key responsibilities included:
- Support mission-critical network infrastructure
- Recommend and implement network and ICT upgrades
- Act as L3 escalation point for complex issues
- Design and deploy network and security improvement projects
- Improve network security and optimize performance
- Collaborate with service providers and contractors
- Lead network implementations and post-deployment support
Technologies & Practices
- FortiGate, ASA, Meraki-MX, Juniper and pfSense Firewalls
- Cisco ISR, DrayTek, Catalyst, Meraki-MS and Dell PowerSwitch
- Cisco Umbrella, Zscaler, Nginx (Reverse Proxy/Load Balancer)
- VPN (IPSec/SSL), MPLS, VLAN, STP, SPAN, QoS, SNMP & NetFlow
Anittel
MSP delivering cloud, voice, data, and managed IT solutions across regional Australia; IT services merged with Inabox and hosting/network integrated into BigAir (Superloop) in 2014.
Senior System Engineer
Jan 2016 - Dec 2017 Orange, NSW – On-site
Focused on project-based initiatives, leading design, deployment, and handover to support teams:
- Designed and delivered network, infrastructure, and IT solutions based on client requirements.
- Prepared Statements of Work (SOW) and managed project planning, execution, and delivery.
- Oversaw migrations, system upgrades, and deployments, ensuring minimal disruption to client operations.
- Coordinated with support teams for seamless post-deployment handover.
- Provided guidance and recommendations to optimize infrastructure performance and security.
Technologies & Practices
- Microsoft 365, Exchange and EOP (Exchange Online Protection)
- ADDS, GPO, RDS, IIS, WSUS, WDS and Hyper-V
- NAS, SAN, Qnap, Synology, Veeam, Acronis and ShadowProtect
- Cisco ISR, Catalyst, Meraki-MX, Sophos and ASA Firewalls
- Cisco Aironet, Ubiquiti and Meraki-MR WAPs
Senior Support Engineer
Feb 2014 - Dec 2015 Orange, NSW – On-site
Provided high-level IT support to multiple regional clients:
- Delivered end-to-end IT services, including configuring, troubleshooting, and testing hardware, software, and network connections.
- Served as the L3 escalation point for complex IT issues.
- Performed proactive maintenance and system health checks to ensure business continuity.
- Implemented and managed critical business systems, including backup and remote access solutions.
- Managed and monitored LAN and WAN networks across the NSW Central West region.
Agile Insights
IT consultancy specializing in Microsoft BI, data analytics, and AI, delivering consulting and project services to enterprise and public sector clients (formerly Agile BI).
Infrastructure and Cloud Specialist
Jul 2013 - Jan 2014 Sydney – Project-based
Provided short-term project-based expertise to support clients’ cloud adoption and infrastructure optimization.
- Designed and deployed robust cloud infrastructures on Microsoft Azure.
- Hosted and managed mission-critical business databases using Azure SQL services.
- Supported clients through the cloud migration lifecycle, ensuring reliability, performance, and scalability.
Technologies & Practices
- Successfully delivered multiple Azure cloud infrastructure projects.
- Ensured high availability and performance of business-critical systems.
- Guided clients through secure and scalable cloud migrations.
Attaché Software
Software company specializing in developing financial management and payroll solutions for medium-sized businesses, optimizing accounting, payroll, and operational processes.
Infrastructure Consultant
Apr 2013 - Jun 2013 Sydney – Project-based
Delivered a short-term infrastructure relocation project, ensuring seamless migration and uninterrupted service for corporate clients.
- Migrated physical servers, 100+ virtual machines, critical data, backup systems, and cloud/network services.
- Designed optimized rack layout for servers, network equipment, and peripherals.
- Maintained comprehensive technical documentation for post-migration operations.
- Ensured minimal downtime and continuity of business operations during relocation.
Technologies & Practices
- Micro Data Centre layout design & rack management
- Redundancy and HA design and deployment
- VMware ESXi, vSphere, vCenter & vMotion
- Veeam Backup
United Nations
Worked with UN agencies, including UNHCR, UNDP, and UNESCO, on multiple projects and operations across developed and underdeveloped regions.
ICT Project Officer
Jan 2010 – Jun 2013 UNESCO – Tehran Cluster Office
Designed and deployed IT infrastructure supporting regional operations. Implemented digital systems for national libraries in Iran and Tajikistan and deployed micro data centers in three Middle Eastern universities. Maintained secure network connections between seven mobile units across remote areas, liaising with local authorities, NGOs, and service providers to ensure project success and sustainability.
Technologies & Practices
- Microsoft Exchange, Terminal Server & SQL Server
- ADDS, GPO, DNS, DHCP, WSUS & File Services
- Citrix, Novell, Hyper-V & Tape Backup (HP StorageWorks)
Field Operations Officer
Jan 2006 – Dec 2009 UNHCR – Iran & Syria
Coordinated field operations for UNHCR missions, including voluntary repatriation of Afghan refugees and preparations for the Iraqi refugee influx. Supported medical services and camp management for three refugee camps on the Iran-Afghanistan border. Organized Afghanistan’s first refugee election in Iran and facilitated Iraq’s first parliamentary election for refugees in Syria, collaborating with governmental and international partners to ensure smooth operations.
System Administrator (EDP)
Apr 2004 – Dec 2005 UNHCR – Field Offices
Managed IT infrastructure for two UNHCR sub-offices, including servers, networks, and end-user support, while maintaining secure communications with headquarters. Coordinated logistics for field operations, including inventory, resource allocation, and supply chain management. Provided technical and operational support to ensure continuity of IT and field operations across challenging environments.
Projects
This section includes a selection of projects I have worked on across Infrastructure, Cybersecurity, OT/ICS, Networking, Services, and Lab environments. My involvement varied from full project ownership—covering initiation, design, delivery, and handover—to contributing as part of a technical team. The Lab/Research category represents both personal development projects and proof-of-concept work carried out in my home lab or work testing environments.
Core Competencies
These are the key skills and areas of expertise I have developed through professional experience, projects, and leadership roles.
Project Management & Technical Lead
Successfully lead complex IT and OT projects, ensuring timely delivery, quality, and alignment with business goals.
Stakeholder & Client Engagement
Build strong relationships with clients and stakeholders, translating technical requirements into actionable solutions.
Team Leadership & Mentorship
Guide and mentor teams, fostering collaboration, skill development, and high performance.
Technology Strategy & Roadmapping
Define technology strategies and roadmaps to support innovation, scalability, and business growth.
Systems Design & Deployment
Design, implement, and optimize IT and OT systems for reliability, security, and efficiency.
Budget & Resource Management
Plan and manage budgets and resources effectively to maximize project outcomes and operational efficiency.
Education & Certifications
Academic background and qualifications.
BS (Bachelor of Science)
Information Technology – IAU University, Tehran – 2003
CCNP – Security
SCOR certificate successfully obtained in August 2023 and complementary exam scheduled for late-2025
CCNA – Routing and Switching
Cisco Certified Network Associate – Renews in August 2023
Information Security Management System (ISMS)
ISO/IEC 27001:2013 – Lead Implementer and Auditor – 2022
Microsoft Certified Solutions Expert (MCSE)
Infrastructure – 2013
Microsoft Certified Solutions Associate (MCSA)
Windows Server – 2012
Campus Network Design
Dell EMC – 2018
Sophos Certified Engineer
The Sophos Partner Channel – 2019
Contact
If you’d like to get in touch, please reach out using the details below.
Name
Afshin (Ash) Kavousi
Location
Australia
Phone
+61 400 736 319