colorful dots of lights

Majid Nassir

IT Manager & Cybersecurity Leader

Building secure, scalable and compliant IT infrastructures for growing organizations

About Me

I am an IT Manager and security-focused leader with 13+ years of experience designing, operating and securing complex IT infrastructures for organizations ranging from telecom carriers to SaaS scale-ups across Iran and Europe.

Currently, I manage the IT environment at Ninox Software GmbH in Germany, where I oversee Azure Entra ID, Intune MDM/MAM, and contribute to ISO 27001/27002 and BSI C5 certification processes while building an ITIL-aligned service desk for our distributed teams.

My background uniquely combines:

  • Deep technical expertise across security, cloud infrastructure, networking, virtualization and enterprise collaboration platforms
  • Proven leadership managing teams of up to 9 engineers and supporting 1000+ users in fast-paced environments
  • Business acumen from my MBA course at the University of Tehran, enabling me to align IT strategy with organizational goals
  • Hands-on experience with governance frameworks including ITIL, ISO 27001/27002, C5/SOC 2, and GDPR compliance

I specialize in bridging the gap between technology and business objectives—delivering secure, resilient IT solutions that enable growth while maintaining compliance and operational excellence. I’m particularly passionate about information security management, identity & access control, disaster recovery, and building high-performing IT teams.

Currently advancing my expertise in offensive security and cyber defense through CEH v13 certification, while improving my German language skills (currently A2) to better serve the DACH market.


Beyond IT

Born in Iran (1985) and now based in Germany, I’m a family person who stays active through cycling (road, gravel, and mountain biking) and racquet sports (badminton, tennis, padel). I’m fascinated by emerging technologies—from blockchain to AI—and enjoy deep research before making decisions, whether technical or personal.

Feel free to connect on LinkedIn if you’re in the IT field or share similar interests—I’m always open to meaningful conversations!

Core Competencies

My expertise spans strategic IT leadership, hands-on security operations, and infrastructure modernization:

🛡️ Security & ISMS

  • ISO 27001/27002 implementation
  • BSI C5 & SOC 2 compliance
  • Security audits & risk assessment
  • Firewall & endpoint protection
  • VoIP security (SBC, encryption)
  • Incident response & forensics

☁️ Cloud & Identity

  • Microsoft Azure & Entra ID
  • Intune MDM/MAM management
  • Conditional Access & RBAC
  • M365 & Google Workspace
  • Privileged Access Management
  • SSO & identity federation

👥 Leadership & Governance

  • Led teams up to 9 engineers
  • ITIL service management
  • Budget & vendor management
  • Policy design & documentation
  • Stakeholder communication
  • Change & project management

🏗️ Infrastructure & Operations

  • VMware vSphere/vCenter (5.5-8)
  • Veeam & Acronis backup solutions
  • HPE & Supermicro servers
  • SAN/NAS storage design
  • Disaster recovery planning
  • High availability & clustering

🌐 Network & Telecom

  • Cisco Routers & switches
  • Cisco CUCM, CUC, IM&P, UCCX
  • VoIP carrier-grade platforms
  • SD-WAN & VPN solutions
  • QoS & traffic optimization
  • Network monitoring & NOC

💼 Business & Strategy

  • MBA in Business Administration
  • IT strategy & roadmap planning
  • Budget ownership & TCO analysis
  • Vendor & contract negotiation
  • Risk mitigation & continuity
  • Cross-functional collaboration

Professional Experience


IT Manager

Ninox Software GmbH | Berlin, Germany
November 2023 – Present (2+ years)

Leading IT operations and internal cybersecurity for a growing SaaS company, focusing on secure cloud infrastructure, identity management, and compliance.

  • Contribute to ISO 27001/27002 and BSI C5 compliance initiatives, managing ISMS processes, documentation, risk assessments, and audit preparation for IT department to ensure secure handling of cloud-based services
  • Oversee Azure Entra ID and Intune for enterprise identity management, implementing role-based access control (RBAC), conditional access policies, and mobile device/application management (MDM/MAM) for distributed teams
  • Design and maintain IT security architecture, including endpoint protection, network security, privileged access management, and security incident response procedures
  • Built ITIL-aligned service desk on the Ninox platform, implementing incident, request, problem, and change management workflows to support end users efficiently
  • Manage IT supplier relationships, security assessments, and SLAs for critical services and vendors
  • Deploy and maintain enterprise infrastructure, including Microsoft 365, collaboration tools, backup solutions, and network security controls

🎯 Key Impact: Strengthened security posture, achieved ISO certification readiness, established modern IAM foundation for scalable growth


IT Service Manager (Telecommunication Department)

Asiatech Co. | Tehran, Iran
May 2020 – June 2023 (3 years 2 months)

Led IT operations for carrier-grade telecom infrastructure, managing VoIP and bulk SMS services for thousands of concurrent users.

  • Led team of 9 IT DevOps, system administrators and VoIP engineers in comprehensive development of carrier-grade service structure, delivering remarkable infrastructure improvements:
    • 200% security increase and greater flexiblitiy by replacing and deploying new VoIP firewall (Session Border Controller) with advanced threat protection
    • 400% capacity enhancement through replacement and deployment of new soft switch clusters with optimized routing
    • 30% stability improvement by implementing load balancing, fault tolerance, and expanded interconnections with all landline and mobile operators
  • Analyzed and monitored virtualization infrastructure daily using VMware vSphere 7, Cisco routing, vSwitch network structure, and service/user behavior patterns via Zabbix and Grafana for continuous improvement
  • Developed comprehensive project plans with defined scope, timelines, and resource allocation for telecom solution deployments
  • Managed vendor relationships to secure necessary resources and services within estimated time and capacity requirements
  • Oversaw budgets, mitigated operational and security risks, and maintained stakeholder communication for aligned business objectives
  • Implemented quality assurance processes ensuring service deliverables met or exceeded established standards and customer SLAs

🎯 Key Impact: Transformed carrier-grade platform security, capacity, and reliability; enabled business growth through scalable telecom infrastructure


IT Manager

TAPSI | Tehran, Iran
December 2017 – April 2020 (2 years 5 months)

Directed IT strategy and operations for Iran’s leading ride-hailing platform, supporting rapid scale-up to 600+ employees.

  • Led team of 6 IT professionals managing data center development, network security, collaboration solutions, and service desk operations with focus on innovation and resilience
  • Designed and executed end-to-end infrastructure projects:
    • VMware-based hybrid cluster data centers (on-premises and co-located cloud)
    • Network infrastructure using Cisco switches and routers with redundancy
    • Cybersecurity layers leveraging Sophos, Kerio Control, and Mikrotik firewalls
    • Collaboration solutions including Cisco UCM, Unity, IM&P, UCCX, WebEx, and Skype for Business
  • Developed comprehensive disaster recovery plans with on-site and off-site backups using Veeam Backup & Recovery, FreeNAS, and automation tools to meet stringent RPO/RTO objectives
  • Designed and implemented robust monitoring system using SolarWinds NCM, NPM, and NTA for coordinated event management, service uptime tracking, and security incident handling
  • Modernized IT service delivery aligned with ITIL framework using ManageEngine Service Desk to enhance efficiency and quality
  • Executed major infrastructure upgrades for HP SAN, Brocade switches, Cisco campus LAN, firewalls, VMware vSphere, Active Directory, Exchange, and SharePoint—maintaining 99.8% uptime with minimal downtime
  • Elevated Help Desk performance through training and process improvements, significantly enhancing satisfaction among 600+ employees

🎯 Key Impact: Built enterprise-grade infrastructure from ground up; zero data loss incidents; 99.8% availability supporting hyper-growth phase


IT Manager

Nomatec Software Group | Tehran, Iran
November 2013 – August 2017 (3 years 10 months)

  • Designed and established corporate server room with 13 HPE servers, 2 HP SAN/NAS storage systems, 2 Cisco ISR routers, and 8 Cisco switches meeting industry standards
  • Led virtualization infrastructure deployment (VMware 5.5, vCenter, Veeam Backup) ensuring high availability for 50+ virtual machines
  • Managed Cisco Unified Communications (CUCM 8.5, CUC, IM&P, UCCX) for seamless enterprise telephony and conferencing
  • Deployed critical internal services: Active Directory, DNS, DHCP, Exchange, Skype for Business for daily operations
  • Implemented security measures: Cisco ASA & FirePower firewalls, Kaspersky endpoint protection, Group Policy hardening
  • Procured cost-effective equipment, provided end-user support, and collaborated on software development environment setup

🎯 Key Impact: Built modern IT infrastructure from scratch, enabling digital transformation for engineering firm


IT System Administrator

TorfehNegar Group | Tehran, Iran
June 2012 – November 2013 (1 year 6 months)

  • Contributed to infrastructure planning and IT upgrade initiatives
  • Installed and managed Microsoft Active Directory, Exchange 2010, Lync 2010, WSUS, SCCM, and Certificate Authority
  • Deployed VMware ESX 4 and vCenter with VMotion, High Availability, and DRS
  • Enhanced cybersecurity with Cyberoam UTM, Kerio Control, Kaspersky Security Center, and GFI Endpoint Security

IT Support Specialist

Shatel | Tehran, Iran
July 2010 – July 2012 (2 years 1 month)

  • Provided comprehensive technical support for 500+ end-users (networks, hardware, software, peripherals)
  • Diagnosed and resolved network, hardware, and software issues demonstrating strong troubleshooting skills
  • Implemented Virtual Desktop Infrastructure (VDI) using Microsoft RDS for Thin Clients
  • Deployed and managed antivirus solutions (Kaspersky Security, GFI)

Certifications & Training

✅ Completed Certifications

  • Cisco Certified Network Professional (CCNP) Collaboration
    Cisco Systems
    Advanced enterprise VoIP, UC platforms, QoS, and collaboration infrastructure
  • Cisco Certified Network Associate (CCNA)
    Cisco Systems
    Network fundamentals, routing & switching, security basics
  • SOC 2 Compliance Essential Training
    LinkedIn Learning
    Navigate SOC 2 Compliance in the Cloud

🎯 In Progress

  • Certified Ethical Hacker (CEH) v13
    EC-Council
    Offensive security, penetration testing, vulnerability assessment, and cyber defense techniques
  • German Language (B1)
    Ongoing
    Currently A2 level, advancing toward professional working proficiency

Frameworks & Methodologies

✓ ITIL (IT Service Management)

✓ ISO 27001/27002 (Information Security Management)

✓ BSI C5 (Cloud Computing Compliance)

✓ SOC 2 Type II concepts

✓ GDPR/DSGVO compliance

✓ NIST Cybersecurity Framework (awareness)

✓ Agile project management

✓ Risk management & business continuity

Technical Skills

Comprehensive expertise across security, infrastructure, cloud, and enterprise IT operations:

🔒 Security & Compliance

  • Firewalls: Sophos XGS, Cisco Firepower, Meraki, pfSense, Cyberoam UTM, Kerio Control
  • ISMS: ISO 27001/27002, BSI C5, SOC 2, risk assessment, audit support, policy development
  • Endpoint: Kaspersky Security, Bit Defender, GFI Lan Guard, McAfee DLP
  • VoIP Security: SBC (Session Border Controllers), SIP firewall traversal, encrypted signaling
  • Monitoring: SIEM concepts, Zabbix, Grafana, SolarWinds, PRTG
  • IAM: Azure Entra ID, RBAC, Conditional Access, PAM

☁️ Cloud & Identity

  • Microsoft Cloud: Azure, Entra ID (formerly Azure AD), Intune MDM/MAM, Conditional Access, Privileged Identity Management
  • M365: Exchange Online, Teams, SharePoint, OneDrive, Security & Compliance Center
  • Google Workspace: Admin Console, SSO, device management, security controls
  • On-premises: Active Directory, Group Policy, LDAP, Certificate Authority (CA), WSUS, SCCM

🏗️ Infrastructure & Operations

  • Virtualization: VMware vSphere/vCenter 5.5-8 (ESXi, HA, DRS, VMotion), Hyper-V, Proxmox
  • Backup/DR: Veeam Backup & Replication, Acronis, replication strategies, RPO/RTO planning
  • Servers: HPE ProLiant DL320/360/380/580 (G5-G10), Supermicro
  • Storage: HPE MSA SAN series, QNAP NAS, FreeNAS, Windows File Server (SMB/CIFS)
  • OS: Windows Server (2008-2022), Windows 10/11, macOS, Linux (Ubuntu, CentOS), iOS, Android

🌐 Network & VoIP

  • Routing & Switching: Cisco ISR/CSR routers, Catalyst L2/L3 switches, Meraki, Mikrotik RouterBoard, D-Link, Zyxel, UBNT
  • Cisco UC: CUCM, CUC, IM&P, UCCX, CME (Unified Communications)
  • VoIP: SIP, RTP, QoS, Session Border Controllers, Homer 5, Elastix, SS7, Sigtran
  • Protocols: TCP/IP, IPv4/IPv6, SNMP, DHCP, DNS, VPN (IPSec, SSL), NAT, VLANs

🛠️ ITSM & Tools

  • Service Desk: ManageEngine ServiceDesk Plus, Solarwinds Helpdesk, Ninox custom ITSM
  • Monitoring: SolarWinds (NCM, NPM, NTA), PRTG Network Monitor, ManageEngine OPManager,Zabbix
  • Remote Support: Dameware, RDP, SSH, TeamViewer
  • Scripting: PowerShell, Bash, Python (basic), XML configuration
  • Project Management: Trello, Jira, Microsoft Project, Agile methodologies
  • Documentation: Confluence, SharePoint, Markdown, Visio

Education

  • Master of Business Administration (MBA)
    University of Tehran, Faculty of Management | Iran | 2017–2018
    Focus: IT strategy, organizational management, business process optimization
  • Associate’s Degree in Computer Hardware Technology
    Islamic Azad University | Iran | 2003–2006
    Foundation in systems architecture, networking, and hardware infrastructure

Ongoing: CEH v13 certification and advanced IT security studies.

Next Target: CISO certification

Languages

🇮🇷 Persian : Native

🇬🇧 English: Professional Working (C1)

🇩🇪 German: Elementary / Improving (A2-B1)

Get In Touch

I’m open to senior IT leadership opportunities in Germany, particularly roles focused on IT management, cybersecurity, infrastructure, and digital transformation.

Contact Information

Send a Message