Shivam Pajiyar | LinkedIn | GitHub
Centennial College — Computer Systems Technician Capstone (2024)
End-to-end enterprise IT infrastructure design and implementation for a fictional manufacturing client (Precision Industrial Group) — covering multi-site network topology, Azure cloud migration, Windows Server 2022 hardening, Elastic SIEM deployment, and full security architecture documentation.
My primary contributions: network topology design in Cisco Packet Tracer, Windows Server 2022 configuration, RBAC and Group Policy implementation, Elastic SIEM deployment, and security architecture documentation.
datasphere-network-lab/
├── topology/
│ └── Corporate_Topology.pkt ← Open with Cisco Packet Tracer 8.x+
├── docs/
│ └── Final_Technician_project_Datasphere.docx
├── network-security-project/
│ └── Network_Security.docx
├── windows-server/README.md
├── azure/README.md
├── siem/README.md
└── rbac/README.md
Open topology/Corporate_Topology.pkt in Cisco Packet Tracer 8.x or later.
Multi-site corporate network — 4 locations across Canada:
| Site | VLAN | Subnet |
|---|---|---|
| Headquarters (Toronto) | VLAN 10 | 192.168.10.0/24 |
| Manufacturing — Alberta | VLAN 20 | 192.168.20.0/24 |
| Manufacturing — British Columbia | VLAN 30 | 192.168.30.0/24 |
| Sales Office — Nova Scotia | VLAN 40 | 192.168.40.0/24 |
Devices: routers, switches, PCs, VoIP — fully interconnected with inter-VLAN routing and department segmentation.
Full lab on VMware Workstation:
- Active Directory Domain Services (ADDS)
- DNS — forward + reverse lookup zones
- DHCP — scopes, exclusions, reservations
- IIS, SMTP, FTP Server
- OUs:
Projections Projects→ Security Group + Developers Group - User accounts: Security Manager, IT Compliance, Application Architect, Software Developer
- Resource Groups, Virtual Networks, Azure VMs
- Network Security Groups (NSGs) with restricted inbound rules
- Encrypted storage with identity-based access
- SQL Server on Azure VM with secure connections
- Windows event log ingestion
- Alert rules for suspicious authentication events
- Network anomaly dashboard
- Threat investigation workflow
- Admin: full read/write on sensitive directories
- HR Employee: read-only — cannot edit or delete
- Department-level GPOs: password policy, software restrictions, desktop lockdown
- Demonstrated privilege separation in live VMware environment
| Category | Tools |
|---|---|
| Network Design | Cisco Packet Tracer |
| Virtualization | VMware Workstation |
| Server | Windows Server 2022 |
| Cloud | Microsoft Azure |
| SIEM | Elastic Stack |
| Security | Active Directory, GPO, RBAC, NSGs |
- Institution: Centennial College, Toronto
- Program: Computer Systems Technician — Networking
- Year: 2024
- Team: Shivam Pajiyar, Shashank Karn, Shristi Bhattarai
GIAC GCIH | GSEC 97% | GIAC Advisory Board Member