Kamran Ziveh

All case studies →

1. Aug 2025 – Present

   Systems Administrator / Network Specialist

   Cardin Healthcare Inc. · Long Beach, CA

   Sole IT owner for the full technology stack supporting 85+ users across 7 clinical suites in a HIPAA-regulated environment; highest escalation point for all infrastructure, security, and application issues.

   Key projects & impact

   • Designed and implemented VLAN segmentation isolating clinical, administrative, guest, and IoT traffic, reducing lateral-movement risk and strengthening compliance posture.
   • Led the end-to-end network build-out of a new clinical suite (VLAN design, switching, wireless coverage, surveillance), delivered as an isolated tenant network.
   • Led endpoint incident response and remediation: contained the threat, rebuilt the affected device, and reset compromised credentials.
   • Analyzed six months of VoIP and SMS billing data, identified the drivers behind ~33% bill growth, and built a data-backed case to renegotiate per-line pricing.
   • Built Power Automate workflows that route incoming clinical faxes and documents into structured, department-based SharePoint libraries.

   Identity & Microsoft 365

   • Manage Entra ID identity security: Conditional Access, MFA enforcement, RBAC, full user lifecycle; investigate authentication and access issues through sign-in log analysis.
   • Administer Microsoft 365 Business Premium end to end (Exchange Online, SharePoint, Teams, OneDrive), including mail flow, transport rules, shared mailboxes, and permissions.
   • Deployed Windows Web Sign-In with Temporary Access Pass through the Intune Settings Catalog for secure lock-screen authentication.

   Endpoint & security operations

   • Manage Intune for device compliance, endpoint security baselines, and standardized Windows 11 Pro deployment across all company endpoints, including Autopilot registration for new devices.
   • Monitor and act on Defender XDR alerts; implement anti-spam, anti-phishing, and email authentication (SPF, DKIM, DMARC).
   • Conduct a comprehensive annual security and systems audit across identity, endpoints, network, and access controls; prioritize by risk, remediate personally, document outcomes.
   • Assess every change for business impact and schedule it around clinical operations, with rollback plans for higher-risk changes.

   Network & infrastructure

   • Designed and administer the complete UniFi network: security gateway, multiple 24-port PoE switches, and 8 wireless access points across all suites.
   • Deploy and maintain ~40 IP cameras across 3 NVRs, including network capacity planning and PoE power budgeting.
   • Administer RingCentral VoIP across all sites, including user provisioning, call routing, and fax workflow integration.

   Automation, vendors & documentation

   • Automate administrative and reporting tasks with PowerShell.
   • Manage vendors and evaluate infrastructure contracts, hardware purchases, and service agreements.
   • Maintain network diagrams, configuration records, and SOPs as living documentation.

Show full detailsHide full details

1. Jun 2025 – Aug 2025

   Network Administrator

   Laguna Adult Day Health Center · California

   • Supported a hybrid environment of Microsoft 365, Google Workspace, and on-premises Active Directory, including group policy, user access, and authentication.
   • Resolved email, login, and system access issues for end users.
   • Maintained system security, backups, and infrastructure monitoring; improved stability and reduced downtime through proactive maintenance.
2. 2023

   IT Specialist

   Sunpeak Construction · California

   • Provided IT support for hardware, software, and Microsoft systems across office and field users in a construction services environment.
   • Managed user accounts, email setup, and access permissions; supported network connectivity and endpoint security.
3. 2009 – 2023

   IT Systems Support / Network Technician

   Travel Agencies (Multiple Organizations) · Iran

   • Supported IT systems, networks, and business applications across multiple travel agencies, including early adoption of online booking platforms.
   • Managed hardware setup, system configuration, user support, and network infrastructure across distributed offices.
   • Implemented secure connectivity and system reliability improvements.

Education

Languages English Persian (Farsi)