Asael Fuentes

Infrastructure & Systems Administration

• Maintain secure baselines across 200+ physical, virtual, and cloud systems, consistent with hardening guidelines to reduce organizational risk.

Cloud Administration

• Manage Microsoft 365 and hybrid cloud infrastructure (Azure, AWS) for 100k+ users, overseeing user provisioning, license assignments, and administration of identity, collaboration, and compliance platforms.
• Implement cloud security controls, including RBAC, audit logging, and mail flow policies, to reduce unauthorized access and enhance compliance posture.

Identity & Access Management (IAM)

• Led key phases of the IAM cloud migration, contributing planning expertise and technical implementation to support seamless transition.
• Implement and manage SSO (LDAP / SAML/ OIDC) integrations and Privileged Identity Management (PIM), enhancing authentication security.

Automation & Scripting

• Develop and maintain scripts in PowerShell / JavaScript to automate provisioning, system configuration, and monitoring tasks, reducing manual workload and improving efficiency.
• Created a runbook to track expiring certificates and client secrets, proactively mitigating service disruptions.

Security & Threat Mitigation

• Mitigated high-priority CrowdStrike and Microsoft Security Optimization findings, enhancing endpoint protection and reducing exposure.
• Partnered with InfoSec to deploy a secure cloud VPN and remove external mail forwarding for staff, improving remote access control and data protection.

Projects & Strategy

• Lead architectural planning and infrastructure initiatives as a trusted SME, aligning secure, scalable solutions with organizational priorities.

• Delivered Tier 3 support for 100,000+ users, diagnosing advanced issues across systems, applications, and devices to ensure reliable IT service delivery.
• Implemented enterprise mobile deployment initiative for 60,000+ iPads by leveraging Jamf Pro, Microsoft Intune, and Apple School Manager to streamline provisioning, enforce security policies, and manage device lifecycles.
• Used PowerShell to automate the removal of devices from Microsoft Endpoint Configuration Manager and Active Directory, enabling secure re-imaging, ensuring compliance with security policies, and minimizing downtime.

• Implemented database requests to ensure data standardization, integrity, consistency, and security across multiple systems, improving data reliability and reducing discrepancies.
• Partnered with programming teams to deploy secure software aligned with compliance standards.
• Participated in the orientation and training of new employees to facilitate their integration and ensure they were well-prepared for their roles.