{
  "profile": {
    "name": "Amjad Alrifaai",
    "role": "Junior System Administrator",
    "status": "Open to opportunities"
  },

  "pages": [
    { "id": "about",      "num": "01", "label": "About",          "title": "About Me", "media": "assets/portrait.jpg", "objPos": "center 16%" },
    { "id": "experience", "num": "02", "label": "Experience",     "title": "Experience" },
    { "id": "certs",      "num": "03", "label": "Certifications", "title": "Certifications" },
    { "id": "skills",     "num": "04", "label": "Skills",         "title": "Skills" },
    { "id": "lab",        "num": "05", "label": "Home Lab",       "title": "Home Lab" },
    { "id": "contact",    "num": "06", "label": "Contact",        "title": "Contact" }
  ],

  "about": {
    "eyebrow": "Profile",
    "lede": "Red Hat Certified Computer Science (Cyber Security) professional bridging hands-on IT operations with proactive security.",
    "paragraphs": [
      "With 2+ years across IT support, infrastructure monitoring, and system administration, I resolve complex L1/L2 service-desk tickets, manage enterprise device lifecycles, and keep network environments secure — day to day spanning Windows, macOS, Microsoft 365, RHEL, hardware, and connectivity.",
      "My focus is Linux administration, system hardening, and workflow automation with Go and Bash — including a custom RHEL management framework of my own design. I run vulnerability assessments, apply CIS benchmarks, and automate compliance auditing with OpenSCAP, always working to SOPs, escalation procedures, and security best practices."
    ],
    "education": {
      "degree": "BSc (Honours) Computer Science — Cyber Security",
      "meta": "Asia Pacific University · Mar 2023 – Mar 2026 · CGPA 3.5"
    },
    "stats": [
      { "value": "3.5",            "label": "CGPA, BSc (Hons) Cyber Security" },
      { "value": "50",  "unit": "+", "label": "Service-desk tickets resolved weekly" },
      { "value": "100", "unit": "+", "label": "Windows & macOS devices deployed" },
      { "value": "20",  "unit": "+", "label": "Lab environments maintained" }
    ]
  },

  "experience": {
    "groups": [
      {
        "id": "technical",
        "label": "Technical",
        "jobs": [
          {
            "when": "Nov 2023 – Oct 2025",
            "org": "Asia Pacific University",
            "title": "IT Support",
            "bullets": [
              "Resolved 50+ weekly Service Desk tickets across Windows systems, software, user accounts, and access issues using Jira — within SLA timelines.",
              "Delivered L1/L2 end-user support for hardware, software, desktop/laptop, peripheral, printer, and connectivity issues.",
              "Installed, configured, and deployed 100+ Windows and macOS PCs, applications, and peripherals for onboarding and lab operations.",
              "Maintained 20+ lab environments, ensuring availability, smooth daily operations, and reliable workstation performance.",
              "Troubleshot LAN/Wi-Fi connectivity and ran basic network diagnostics — TCP/IP, DNS, DHCP, ping, tracert, nslookup.",
              "Supported meeting-room A/V including Teams Rooms — audio/video, screen sharing, and user readiness before meetings.",
              "Monitored backups, system checks, and updates; reported failures and supported service continuity.",
              "Maintained IT asset inventory, device lifecycle tracking, documentation, and SOP-based incident escalation."
            ]
          },
          {
            "when": "Jan 2025 – Apr 2025",
            "org": "Asia Pacific University · On-site",
            "title": "IT Security & Risk Intern",
            "bullets": [
              "Conducted vulnerability assessments on web applications (Django, Flutter), identifying and documenting security gaps.",
              "Performed security testing and analysis using Burp Suite, Nmap, and Wireshark.",
              "Reviewed Windows Firewall configurations to strengthen access control and reduce exposure risks.",
              "Evaluated endpoint protection solutions to support stronger threat detection and response readiness.",
              "Assessed Windows Server security updates and patches to reduce exposure to known vulnerabilities.",
              "Collaborated with the Systems Development team to improve security measures and support follow-up actions.",
              "Prepared technical documentation, including security reports and configuration guidelines."
            ]
          }
        ]
      },
      {
        "id": "nontechnical",
        "label": "Non-Technical",
        "jobs": [
          {
            "when": "Jun 2025 – Oct 2025",
            "org": "Asia Pacific University · Hybrid",
            "title": "TA Assistant Lab Chief",
            "bullets": [
              "Ensured efficient work delivery across Functional Units and maintained order among Technical Assistant teams.",
              "Oversaw successful task completion and supported coordination between team members and functional leads.",
              "Represented the Lab Chief and assumed responsibilities during periods of unavailability or absence.",
              "Applied project planning, project management, team coordination, and operational follow-up skills."
            ]
          },
          {
            "when": "Feb 2025 – Jun 2025",
            "org": "Asia Pacific University · Hybrid",
            "title": "Head of TA Human Resources",
            "bullets": [
              "Oversaw the performance, workload, and task accuracy of the Human Resources Functional Unit.",
              "Identified team challenges and supported resolution to maintain productivity and smooth operations.",
              "Coordinated HR responsibilities for Technical Assistants, including communication and workload tracking.",
              "Applied management, HR coordination, leadership, and team communication skills."
            ]
          },
          {
            "when": "Oct 2024 – Dec 2025",
            "org": "APU Red Hat Club",
            "title": "President",
            "bullets": [
              "Directed the executive committee and set strategic goals promoting open-source technologies, Linux administration, and cybersecurity across the student body.",
              "Spearheaded planning and execution of technical workshops, community events, and successful leadership handovers — driving member engagement and skill development.",
              "Acted as primary liaison between students, faculty, and external partners to foster collaborative learning around Red Hat enterprise solutions and industry best practices."
            ]
          },
          {
            "when": "Jun 2024 – Feb 2025",
            "org": "Asia Pacific University · Hybrid",
            "title": "TA Human Resources",
            "bullets": [
              "Supported HR functions for Technical Assistant teams, ensuring smooth operations and adherence to policies and technical SOPs.",
              "Managed workforce allocation, recruitment support, onboarding coordination, employee relations, and communication channels.",
              "Fostered a positive work environment by addressing concerns and helping mediate conflicts.",
              "Applied team management, leadership, communication, HR, and operational coordination skills."
            ]
          }
        ]
      }
    ]
  },

  "certifications": {
    "categories": [
      {
        "id": "professional",
        "label": "Professional",
        "items": [
          { "img": "assets/cert-rhcd.jpg",  "name": "Red Hat Certified Developer in Cloud-Native Applications", "meta": "Red Hat · ID 260-075-684",                          "year": "Jun 2026", "mark": "RH" },
          { "img": "assets/cert-ta.jpg",    "name": "Technical Assistant Attachment Programme",                  "meta": "Asia Pacific University · Technology Services",     "year": "2023–25",  "mark": "TA" },
          { "img": "assets/cert-esol.jpg",  "name": "ELITE Live SOC Module — ESOL",                              "meta": "Tecforte @ APU · 50 lab hours",                      "year": "Aug 2024", "mark": "SOC" }
        ]
      },
      {
        "id": "courses",
        "label": "Courses",
        "items": [
          { "img": "assets/cert-rh124.jpg", "name": "Red Hat System Administration I (RH124)",          "meta": "Red Hat Academy · APIIT", "year": "Oct 2024", "mark": "RH" },
          { "img": "assets/cert-az104.jpg", "name": "AZ-104: Prerequisites for Azure Administrators",   "meta": "Microsoft Learn",         "year": "Oct 2025", "mark": "AZ" }
        ]
      },
      {
        "id": "awards",
        "label": "Awards",
        "items": [
          { "img": "assets/cert-3rdrunner.jpg", "name": "3rd Runner-Up — Cyber Traditions Battle", "meta": "BAT × APU Week Campaign · APU", "year": "2024", "mark": "★" }
        ]
      },
      {
        "id": "events",
        "label": "Events",
        "items": [
          { "img": "assets/cert-iboh.jpg",    "name": "International Battle of Hackers 2024 — CTF", "meta": "APU · FSEC-SS",                "year": "Sep 2024", "mark": "CTF" },
          { "img": "assets/cert-metactf.jpg", "name": "MetaCTF December 2024 Flash CTF",            "meta": "MetaCTF · 4-hour competition", "year": "Dec 2024", "mark": "CTF" }
        ]
      },
      {
        "id": "volunteering",
        "label": "Volunteering",
        "items": [
          { "img": "assets/cert-redhatclub.jpg", "name": "President — Red Hat Club, School of Technology",  "meta": "APU Red Hat Academy",   "year": "2024–25",  "mark": "RH" },
          { "img": "assets/cert-yemeni1.jpg",    "name": "Grand Iftar — Yemeni Students’ Union Malaysia",   "meta": "Community organizing",  "year": "Mar 2025", "mark": "YSU" },
          { "img": "assets/cert-yemeni2.jpg",    "name": "Yemen Revolution Day — Yemeni Students’ Union",   "meta": "Community organizing",  "year": "Oct 2024", "mark": "YSU" },
          { "img": "assets/cert-maybank.jpg",    "name": "Group Technology & Digital Hackathon 2025",       "meta": "Maybank × APU",         "year": "Nov 2025", "mark": "MB" }
        ]
      }
    ]
  },

  "skills": {
    "eyebrow": "What I work with",
    "groups": [
      { "title": "IT Support & Helpdesk",        "chips": ["L1/L2 Support", "End-User Support", "Incident Management", "Service Desk", "Ticket Handling", "SLA Support", "Escalation", "User Training", "Teams Rooms A/V"] },
      { "title": "Systems & Devices",            "chips": ["RHEL", "Windows 10/11", "macOS", "Microsoft 365", "Active Directory", "Desktop/Laptop Setup", "Printer Support", "Peripherals"] },
      { "title": "Programming & Scripting",      "chips": ["Go (Golang)", "Bash", "Python"] },
      { "title": "Networking & Infrastructure",  "chips": ["TCP/IP", "DNS", "DHCP", "Subnetting", "Docker", "Podman", "systemd", "firewalld", "Pi-hole", "Uptime Kuma"] },
      { "title": "Security & Endpoint",          "chips": ["CIS Benchmarks", "OpenSCAP", "Vulnerability Assessments", "System Hardening", "Patch Management", "Endpoint Protection", "Windows Firewall", "Burp Suite", "Nmap", "Wireshark"] },
      { "title": "Operations",                   "chips": ["IT Asset Inventory", "Asset Tagging", "Documentation", "SOPs", "Vendor Coordination", "Preventive Maintenance"] },
      { "title": "Languages",                    "chips": ["Arabic — Native", "English — Fluent"] }
    ]
  },

  "lab": {
    "eyebrow": "My home lab",
    "hint": "// Drag any node to rearrange — click one to see its details",
    "legend": [
      { "kind": "net",  "label": "Local network" },
      { "kind": "vpn",  "label": "Tailscale tunnel (WireGuard)" },
      { "kind": "host", "label": "Azure VM host" }
    ],
    "reset": "Reset layout",
    "colors": { "router": "#2740E6", "dreamax": "#2740E6", "pihole": "#C0392B", "azurevm": "#0078D4", "kuma": "#16A06B" },
    "defaults": {
      "router":  { "x": 26, "y": 22 },
      "dreamax": { "x": 26, "y": 50 },
      "pihole":  { "x": 20, "y": 78 },
      "azurevm": { "x": 75, "y": 40 },
      "kuma":    { "x": 75, "y": 76 }
    },
    "zones": {
      "home":  { "label": "HOME NETWORK",    "icon": "",   "color": "#2740E6", "cx": 26, "cy": 50, "rx": 23, "ry": 44, "members": ["router", "dreamax", "pihole"] },
      "azure": { "label": "MICROSOFT AZURE", "icon": "☁ ", "color": "#0078D4", "cx": 75, "cy": 53, "rx": 22, "ry": 39, "members": ["azurevm", "kuma"] }
    },
    "nodeZones": { "router": "home", "dreamax": "home", "pihole": "home", "azurevm": "azure", "kuma": "azure" },
    "links": [
      { "from": "router",  "to": "dreamax", "kind": "net" },
      { "from": "dreamax", "to": "pihole",  "kind": "net" },
      { "from": "dreamax", "to": "azurevm", "kind": "vpn", "label": "Tailscale Tunnel" },
      { "from": "azurevm", "to": "kuma",    "kind": "host" }
    ],
    "nodes": [
      {
        "id": "router", "kind": "router", "icon": "router",
        "label": "Home Router", "sub": "GATEWAY · DHCP · WAN",
        "detail": {
          "tag": "Gateway",
          "title": "Home Router",
          "body": "Handles WAN access and DHCP for the house, and forwards every DNS query from home devices to Pi-hole on the Dreamax box.",
          "list": [
            "DHCP for all home devices",
            "DNS forwarded to Pi-hole",
            "10/100 Mbps LAN to Dreamax",
            "Monitored via the Tailscale tunnel"
          ]
        }
      },
      {
        "id": "dreamax", "kind": "dreamax", "icon": "server", "shape": "square",
        "label": "Dreamax B9S2X", "sub": "CoreELEC · S905D · TAILSCALE GATEWAY",
        "detail": {
          "tag": "Server · beoutQ Dreamax B9S2X",
          "title": "Repurposed TV box",
          "body": "An Android satellite receiver reflashed with a permissive Amlogic bootloader, now running CoreELEC from MicroSD with Docker — and acting as the Tailscale subnet-router gateway that exposes local services to the cloud monitor.",
          "list": [
            "Amlogic S905D · 4× Cortex-A53",
            "1 GB DDR3 · 8 GB eMMC bootloader",
            "CoreELEC 21.3 Omega · 64-bit ARM",
            "Tailscale subnet-router gateway",
            "Advertises local routes to the cloud",
            "Managed remotely over SSH"
          ]
        }
      },
      {
        "id": "pihole", "kind": "pihole", "icon": "pi",
        "label": "Pi-hole", "sub": "DNS · AD BLOCK",
        "detail": {
          "tag": "Service · Docker",
          "title": "Pi-hole",
          "body": "Network-wide DNS sinkhole that blocks advertising and tracking domains for every device, then forwards clean lookups upstream.",
          "list": [
            "Network-wide DNS server",
            "Ad & tracker blocking",
            "Per-device query statistics",
            "Custom allow / block lists",
            "Local DNS records",
            "Host networking mode"
          ]
        }
      },
      {
        "id": "azurevm", "kind": "azurevm", "icon": "cloud", "shape": "square",
        "label": "Azure VM", "sub": "RHEL 9 · BURSTABLE COMPUTE",
        "detail": {
          "tag": "Cloud Infrastructure · Microsoft Azure",
          "title": "Azure VM",
          "body": "A hardened burstable RHEL 9 virtual machine in Microsoft Azure. It terminates the Tailscale tunnel from the homelab gateway and hosts the Uptime Kuma monitoring container — with no public inbound exposure.",
          "list": [
            "Tailscale tunnel endpoint",
            "Hosts the Uptime Kuma container",
            "Reaches Pi-hole via the gateway",
            "No public inbound ports"
          ]
        }
      },
      {
        "id": "kuma", "kind": "kuma", "icon": "activity",
        "label": "Uptime Kuma", "sub": "MONITORING · PODMAN CONTAINER",
        "detail": {
          "tag": "Cloud Service · runs on Azure VM",
          "title": "Uptime Kuma",
          "body": "Self-hosted monitoring in a rootless Podman container on the Azure VM. It watches local homelab services securely over the Tailscale tunnel — never exposed to the public internet.",
          "list": [
            "Rootless Podman container",
            "HTTP / ping / TCP / DNS checks",
            "Monitors Pi-hole via the tunnel",
            "Uptime % & response graphs",
            "Incident history & status pages",
            "Web UI on :3001 (tunnel-only)"
          ]
        }
      }
    ]
  },

  "contact": {
    "eyebrow": "Get in touch",
    "rows": [
      { "key": "Email",    "value": "amjad.refaai.2004@gmail.com", "href": "mailto:amjad.refaai.2004@gmail.com", "action": "Send →" },
      { "key": "LinkedIn", "value": "/in/amjad-alrifaai",          "href": "https://linkedin.com/in/amjad-alrifaai", "external": true, "action": "Open →" },
      { "key": "Location", "value": "Saudi Arabia" }
    ]
  }
}
