Responsibilities:- Design of cloud native architecture for applications with high availability and disaster recovery solutions.- Design of integrations of different applications and technologies.- Infrastructure as a code and CI/CD pipelines design.- Design of monitoring systems for cloud environments.- Design of blue green & canary releases.- Creation of security posture & compliance policies and hardening for cloud environments.- Application Pentesting.- Automation of processes.- Identity management architecture design (Auth/Authz): Applications, Kubernetes, APIs. OIDC/Oauth with EntraID.Technologies:CI/CD:Azure Devops - Jenkins - Github Actions - Gitlab - ArgoCD - KustomizeIaC:ARM, Terraform, AnsibleContainer management:Kubernetes (AKS, EKS, GKE), Openshift, Docker, Podman.Images: ECR, ACR, Jfrog, HarborPlugins/tools: Velero (Backup), Hashicorp Vault (Secrets operator), Sysdig(Hardening), Fluent bit, Prometheus, Grafana.Azure:App Gateway, WAF, LB, Traffic Manager, Front Door, CDN, NSG, NAT, Vnets, ExpressRoute, VPN, LogAnalytics, Alerts, App Insights, VMs & VMSS, App Services, Container service, AKS, CR, Automation Accounts, Function & Logic Apps, Azure SQL, MySQL, MongoDB, Redis, Azure Data Factory, Databricks, Cosmos DB, Az Defender, API Management, Key Vault, Storage Accounts, Datalake V2, EntraID, Azure Policy, Blueprints, etcDevelopment stack:Go, Python, .NET Core, C#, Angular, NodeJS, React, Java, JavaScript, TypeScriptApp servers:NGINX, Kestrel, IIS, Apache. -> Hardening: Cors, API Rate-Limits, HSTS, CSP, XSS, X-frame.CMS: WordpressScripting:PowerShell, Bash.Security tools:Qualys - Checkpoint (Dome9) - Spectral (IaC Scanning) - Hashicorp Vault - Fortify (SAST/DAST) - Gitleaks (Open source secrets discovery)Client: Santander Digital Services Current Project:Assigned to Global CTO - Security Reference Architecture - GLUON.Previous project: Global Security- Attack Surface Management -> Advanced security

Member of Tax Global – Project engineering teamTeam Responsible of creation of applications from scratch, working with architects, developers and multiple teams involved in the process of the deployment/post deployment or migration of new applications on Azure environments to ensure the reliability, performance and security.Microsoft Azure: IaaS – PaaS – SaaS – IaaCVMs, Availability Sets / Scale sets, VNETs , Peering, NSG, UDR, WAF, NAT Gateway, Load Balancers, Traffic manager, App Services, Docker, Azure SQL, Azure Key Vault, Azure Active Directory, Azure Defender, Alerts, Log Analytics, Application Insights, Recovery Services Vault, Azure Disk Encryption, Storage Accounts, Kubernetes clusters, API Management, Azure Policy, DSC, Automation, Blueprints, ARM, Ansible Tower, PowerApps, Azure Shared Disks on Failover Clusters, Azure CLI /AzureRM/ AZ.Monitoring:Creation of different monitors on Azure artifacts, directly from the resources or by integrating the logging to Log Analytics Workspace and developing custom queries to get events of specific failures. Creation of automatic fix by Azure automation or trigger alerts to different production support teams.Azure DevOpsCI/CD Pipelines development, deployment, and monitoring of DevOps agents.Microsoft TechnologiesInternet Information Services (IIS), Active directory, Group Policy Objects, Microsoft Endpoint Configuration Manager, Enterprise & public Certification Authority, DNS, DHCP, WSUS, Remote Desktop Services (RDS) & Licensing, Failover Clusters, Roaming profiles, Microsoft Dynamics / NAV, SQL ServerScriptingPowershell (Advanced): OS Customizations / Automation of different required processes / Azure Automation through Azure CLI, AzureRM or Az modules / monitoring of SQL server’s health / Automatic workaround to fix potential issues on OS /AU3Windows Batch.Development knowledgeJava, .NET, Javascript, C#, HTML, CSS.Other TechnologiesCitrix, NGINX, Linux

Team lead (Operative and Technical), responsible of Microsoft and Citrix professional services.Microsoft (Gold Partner)Microsoft Azure: IAAS – PAAS – SAAS – IAACActive Directory Services - Active Directory B2C, B2B - Recovery Services (Azure Backup, Site Recovery) - Networking (NSG, Peering - VPN Gateway – ExpressRoute - Nat Gateway - UDR) - SQL Server - Load Balancer (High Availability) - Azure disk encryption - Azure Monitor - Log analytics - Application Gateway/proxy - API Management - Analysis Services - Azure Information Protection (O365) – Blueprints – Containers – Docker – Kubernetes - Azure DevOps - Azure Sentinel – Event hub – IOT hub - Event Grid – Stream Analytics – Azure Security Center – Azure Policy – Azure Key Vault - AI Cognitive Services (ComputerVision & Face recognition) - Application Insights.Automation: Azure Resource Manager (ARM) - DevOps Pipelines CI/CDAzure based Technologies:-Windows Virtual Desktop – Architecture & service deployment-MECM: Cloud management gateway-Citrix on Azure – Architecture & service deploymentInfrastructure & device management:Microsoft Endpoint Configuration Manager (SCCM 2012 R2 - SCCM CB - MECM CB) Senior Engineer - Active Directory Domain Services - SQL Server - Microsoft Intune - Windows Autopilot - Windows Update Services (WSUS - SUP) - Microsoft 365 - Hybrid-Azure AD Join - AD-Connect - PowerBI - DirectAccess - AlwayOn VPNSecurity:Windows Defender ATP - Windows Hello for Business - Microsoft Cloud Application Security (MCAS) - Microsoft Advanced Threat Analytics - Microsoft MBAM services - Active Directory Federation Services (ADFS) - Certification Authority & PKI - Azure SentinelScripting - AdvancedPowershell - AU3 - Windows Batch.Development knowledge:Java, .NET, Javascript, C#Citrix (Gold Partner):Citrix Workspace - Virtual Apps & Desktops - Citrix Content Collaboration - Citrix Hypervisor - Citrix ADC - NetScaler - Citrix Application Delivery Management - Gateway - App Firewall

Clients: 26000Devices: 20000Windows Server: 2008 – 2012R2 – 2016 – 2019.Microsoft Endpoint Configuration Manager - Senior Engineer-Architecture, implementation, upgrade and administration-Deployment: Applications, packages, scripts, updates, drivers, operating systems deployment (PXE)-Reporting: WQL, SQL and Powershell-Task sequences: OS deployment, capture, migration.-Software update point: integration and administration-Features: Peer Cache, Co-Management, Cloud management gateway, internet-based clients, Intune.-Deep Knowledge: Database structure, DRS Replication, SCCM WMI Structure on servers, automation scripting for native SCCM actions, Client & servers fix automation, Environment optimization (Bandwidth: BITS), Hardware Inventory Cycle, Software Metering, Office365 services, Microsoft Endpoint Security Administration, Windows Defender ATP integration.Hybrid & Cloud technologies:Microsoft Azure – Hybrid Azure AD join – ADFS – AD-Connect – Windows Defender ATP – Windows Hello for business – Microsoft Cloud Application Security (MCAS) – Microsoft self -service password reset.On-premise technologiesWindows Active Directory (Administration & GPO) – WSUS – Microsoft MBAM 2.5 SP1 – SQL Server – Print Server – Microsoft LAPS – MDT – Windows ADK & DISM.Scripting - Advanced level:PowerShell – Windows Batch – Vbscript – AU3Completed projects -Office 365 migration-SCCM re-architecture

Responsibilities and tasks:-Application, Packages and Updates deployment for South-Latam Region.-Creation of scripts and queries to provide environment status.-Responsible of South-Latam hardware Inventory.-Troubleshoot and installation of SCCM Components (Management Point, Distribution Point, Software Update Point)

ProjectsMigration: Lotus notes to Microsoft Office 365Responsibilities and tasks:-Creation a list of all the business add-ins used in Microsoft Office 2010.-Remediation of those add-ins.-Perform pilot of the deployments to test the automation and update Microsoft Office with SCCM.-Work with the IT global Member to schedule the migration.-Report weekly to Global IT Manager the advances of the project.During this project, the company affronted two different changes:-Change of the email service: From Lotus Notes on premises to Microsoft Office 365.-Change of Microsoft Office 2010 to Microsoft Office 365 ProPlus.Migration: Windows XP to Windows 7Responsibilities and tasks:-Creation of a list of all the business applications and categorize them from low impact to critical.-Remediation of the applications in Windows 7.-Work with the infrastructure team to provide to the company access to legacy (non-working in Windows 7) applications through Citrix.-Creation of a troubleshoot documentation to all help desk members before starting the migration.-Creation of a standard OS image for South Latam region in the company.-Creation of a plan to migrate the OS in the company (With hardware change)-Lead a group of technicians dedicated to the migration.-Report weekly to Global IT Manager the advances of the project.In the same time that this project, the company implemented Microsoft System Center Configuration Manager (SCCM 2012 R2).