Derek Vasquez
AI / Enterprise Architect
San Antonio,Texas
Summary
AI / Enterprise Architect with over 24 years of experience leading Azure platform architecture, enterprise cloud modernization, AI adoption, cybersecurity governance, and IT transformation across municipal, federal, and large-scale enterprise environments. Skilled in designing Azure IaaS, PaaS, and SaaS architectures using Availability Zones, hub-and-spoke networking, identity-driven access, policy enforcement, and resilient deployment patterns. Experienced with AI agents, LLM-enabled workflows, RAG concepts, automation, and model governance to improve documentation, architecture analysis, operational decision support, and service delivery. Strong background in SDLC, infrastructure standards, security-by-design, cost optimization, vendor management, and executive-level technology strategy. Recognized as a servant leader who builds high-performing teams, translates complex architecture into business outcomes, and delivers secure, scalable, cost-effective solutions that support public service excellence.
Overview
24
24
years of professional experience
5
5
Certificates
10
10
Military Experience
18
18
Government Experience
5
5
years of post-secondary education
Affiliations
United States Air Force
03/2022 - 09/2004
Texas Air National Guard
09/2004 - 09/2011
Education
MBA - Executive Business Administration
The University of Texas At San Antonio
San Antonio, TX 08.2018 - 05.2020
Bachelor of Science - Management Information Systems
University of The Incarnate Word
San Antonio, TX 08.2013 - 12.2016
Certification
Azure Solutions Architect - Expert
Work History
Enterprise Architect
City Of San Antonio
12.2024 - Current
- Partnered with executives and department heads across City organizations—including Pre-K4SA, the San Antonio Public Library, and SAMHD—to align technology strategy with business objectives, driving innovation, compliance, and measurable efficiencies.
- Advanced Azure platform architecture across enterprise modernization efforts, translating business needs into secure designs using Azure Virtual Networks, subnets, hub-and-spoke patterns, private endpoints, load balancing, storage, monitoring, and identity-integrated services.
- Designed cloud resiliency patterns leveraging Azure regions, Availability Zones, paired-region concepts, zone-redundant services, backup strategy, and disaster recovery planning to improve service continuity for mission-critical municipal systems.
- Used AI agents and LLM-enabled tools to accelerate architecture analysis, meeting summaries, requirements decomposition, documentation, risk review, and solution-option comparison while maintaining human review and governance oversight. Additionally, utilized Python, Bash, Java, and PowerShell to generate various AI workloads and solutions.
- Expanded Azure Security & Governance practices using RBAC, least privilege, Azure Policy, Defender for Cloud, Key Vault, Microsoft Sentinel, logging, tagging, and compliance controls to strengthen cloud accountability and operational visibility.
- Defined Azure cost optimization strategies including right-sizing, reserved capacity planning, lifecycle management, budget alerts, tagging standards, orphaned-resource cleanup, and service-tier reviews to align cloud spend with business value.
- Led 4 domain architects in standardizing designs, technology adoption strategies, and sound enterprise IT architecture principles. The 4 domains are the Public Safety, Health, Library, and Aviation departments
Cloud Architect
3DJ Consulting, LLC
01.2022 - 02.2026
- Implemented enterprise security architecture and security operations solutions for federal and municipal clients, ensuring compliance with regulatory frameworks and improving overall IT resilience.
- Prototyped AI and automation technologies for architects and government entities, leveraging platforms such as IBM Watsonx, Azure AI Foundry, and Google Vertex AI Studio to explore innovative service delivery models.
- Directed vendor assessments, process improvements, and technology adoption frameworks, creating documentation and procedures to guide system-level security architecture reviews.
- Engaged executive stakeholders to develop long-term IT roadmaps aligned with organizational goals and managed vendor relationships to ensure cost-effective and secure service delivery.
Cybersecurity Architect (Contract)
Dept. of Veteran Affairs
11.2024 - 02.2026
- Led System Security Architecture Reviews (SSARs) for enterprise systems, evaluating diagrams, system boundaries, data flows, interconnections, authentication patterns, inherited services, and cloud dependencies against NIST 800-53 Rev. 5 and federal cybersecurity expectations.
- Assessed cloud, hybrid, and enterprise application architectures for identity and access management, network segmentation, encryption, logging, data protection, FedRAMP dependencies, privileged access, and secure integration patterns.
- Developed risk-based architecture assessments identifying security gaps, control weaknesses, Zero Trust alignment issues, documentation defects, and remediation actions needed before authorization, modernization, or production deployment.
- Mapped technical findings to security and compliance controls, translating complex architecture issues into actionable risk decisions, executive summaries, findings matrices, and defensible remediation recommendations.
- Partnered with system owners, engineering teams, security stakeholders, and governance leaders to reinforce security-by-design, Zero Trust, CIS, TOGAF, DoDAF, and federal compliance practices across enterprise review work
Cloud Architect
Commonwealth of Massachusetts
01.2022 - 10.2024
- Architected AI-powered enterprise solutions using Azure AI Studio / Azure AI Foundry, IBM Watsonx, Google Vertex AI, LLM concepts, prompt engineering, and machine learning patterns to improve service delivery and modernization planning.
- Developed cloud adoption strategies emphasizing Azure services, scalable landing zones, network segmentation, identity integration, monitoring, resiliency, and cost-aware architecture for enterprise workloads.
- Evaluated AI agents, RAG patterns, model governance, and LLM-enabled workflows for documentation automation, knowledge retrieval, solution design support, and business process improvement.
- Applied SDLC discipline to emerging technology initiatives by defining requirements, architecture options, risk considerations, testing expectations, implementation plans, and operational handoff documentation.
- Engaged executive stakeholders to build long-term IT roadmaps, vendor strategies, and governance models aligned with secure, cost-effective, and sustainable cloud and AI adoption.
- Leveraged Infrastructure as Code capabilities and technologies, including ARM, Terraform, and Bicep, to design, build, and manage Azure based infrastructure.
Director, Cloud Engineering
Claritas
01.2022 - 10.2023
- Served as Director of Cloud Engineering within organization of 338 staff, spearheading innovative, tactical solutions for resource allocation and strategic multi-cloud planning to maximize ROI while ensuring quality products were provided to various customers.
- Established operational processes using security analytics tools to address client-specific metrics while directing AWS and Azure cloud technologies to best suit customer requirements.
- Developed high-performing teams by providing mentorship, guidance, and opportunities for professional growth.
- Cultivated a positive work environment that fostered employee engagement, increased retention rates, and boosted overall team morale.
Cloud Engineer
Commonwealth of Massachusetts
01.2022 - 04.2022
- Actively engaged in CI/CD pipelines which supported development of organizational applications.
- Applied agile methodologies to projects and managed timelines, sprints, milestones, and key deliverables.
- Performed migration of core services to Azure environment and began adoption of cloud-first strategy for organization.
Senior IT Manager
City of San Antonio
10.2020 - 01.2022
- Led the Computing Systems Infrastructure Division supporting 13,500+ employees across 40 departments, managing infrastructure strategy, enterprise operations, lifecycle planning, and service delivery for a large municipal environment.
- Managed and collaborated with 41 staff members, including 5 direct reports across 8 technical sections, balancing operational support, modernization priorities, vendor performance, and long-range technology planning.
- Architected solutions leveraging Microsoft Azure IaaS, PaaS, and SaaS capabilities, including identity integration, hybrid connectivity, storage, compute, collaboration platforms, and resilient cloud adoption patterns.
- Oversaw budgeting, procurement, and 5-year capital planning, incorporating lifecycle management, cloud cost control, modernization roadmaps, licensing considerations, and vendor accountability.
- Directed vendor assessments, process improvements, governance procedures, and security architecture review practices to improve solution consistency, supportability, and enterprise risk management.
Messaging Systems Engineer (Exchange / SharePoint)
City of San Antonio
06.2015 - 10.2020
- Maintained 99.999% uptime for enterprise messaging and collaboration services supporting 13,500+ users, ensuring high availability, disaster recovery readiness, and business continuity.
- Led migration of 13,500+ mailboxes from Exchange 2010 to Exchange Online / Microsoft 365 with zero downtime, improving security posture, scalability, and operational reliability.
- Performed enterprise architecture functions for Microsoft 365, hybrid identity, messaging, SharePoint, network dependencies, domain services, compliance, retention, and data protection capabilities.
SharePoint / System Architect (Contract)
Department of Labor (Job Corps)
06.2017 - 10.2020
- Presented architecture proposals to senior management, securing buy-in for strategic initiatives that improved organizational performance, collaboration, compliance, and enterprise service delivery.
- Managed Microsoft SharePoint environments nationwide for the Department of Labor Job Corps network of centers, supporting secure collaboration, document management, and operational continuity.
- Performed security, redundancy, patching, backup, and operational support for central systems as part of an enterprise production environment with high availability and compliance expectations.
CEO/Founder
Vasquez IT Consulting
05.2014 - 06.2015
- Performed as multi-faceted infrastructure architect and IT security consultant for various clients in private and public sectors.
IT Manager / Engineer / CEO
USAF, TXANG, Private Organizations
03.2002 - 05.2015
- Managed operating budgets of hundreds of thousands of dollars and led 4-7 staff members, cross-functional teams, and contractors to deliver secure and reliable IT services.
- Oversaw technology buildouts for new offices in four Texas cities, providing end-to-end infrastructure design covering networks, systems, security, communications, and operational support models.
- Operated as a systems and domain architect for military and private-sector environments, creating diagrams, requirements, implementation plans, and enterprise application architecture documentation.
IT Manager
Joeris
09.2011 - 04.2014
- Managed vendor relationships for hardware, software, and services procurement, ensuring quality products at competitive prices.
- Collaborated with other departments to help meet IT needs and properly integrate and secure systems.
- Oversaw IT department operations and training.
- Collaborated with IT teams to integrate robust security controls within the infrastructure, reducing potential attack vectors.
- Developed comprehensive information security policies for the organization, ensuring compliance with industry best practices.
IT Security Engineer & Manager
United States Air Force, USAF
03.2002 - 09.2011
- Led regular tabletop exercises simulating various cyberattack scenarios, improving preparedness across teams.
- Collaborated with cross-functional teams to integrate security best practices into product development processes.
- Developed secure coding practices, resulting in fewer application vulnerabilities and improved software integrity.
- Spearheaded the creation of disaster recovery plans to ensure business continuity in case of critical incidents or breaches.
Timeline
Enterprise Architect
City Of San Antonio
12.2024 - Current
Azure Solutions Architect - Expert
11-2024
Azure Administrator Associate
11-2024
Cybersecurity Architect (Contract)
Dept. of Veteran Affairs
11.2024 - 02.2026
Cloud Architect
3DJ Consulting, LLC
01.2022 - 02.2026
Cloud Architect
Commonwealth of Massachusetts
01.2022 - 10.2024
Director, Cloud Engineering
Claritas
01.2022 - 10.2023
Cloud Engineer
Commonwealth of Massachusetts
01.2022 - 04.2022
Lean Six Sigma Green Belt
05-2021
Senior IT Manager
City of San Antonio
10.2020 - 01.2022
MBA - Executive Business Administration
The University of Texas At San Antonio
08.2018 - 05.2020
SharePoint / System Architect (Contract)
Department of Labor (Job Corps)
06.2017 - 10.2020
Messaging Systems Engineer (Exchange / SharePoint)
City of San Antonio
06.2015 - 10.2020
CEO/Founder
Vasquez IT Consulting
05.2014 - 06.2015
Bachelor of Science - Management Information Systems
University of The Incarnate Word
08.2013 - 12.2016
IT Manager
Joeris
09.2011 - 04.2014
CompTIA Security +
04-2010
CompTIA Network +
10-2009
IT Manager / Engineer / CEO
USAF, TXANG, Private Organizations
03.2002 - 05.2015
IT Security Engineer & Manager
United States Air Force, USAF
03.2002 - 09.2011
References
Thomas Meier - IT Director
Commonwealth of Massachusetts - (617) 694-3598
John Rodriguez - Assistant Director
City of San Antonio – (210) 387-6969
Steve Meyer - IT Manager
City of San Antonio – (830) 305-4377
Dewon Johnson - Senior IT Manager
City of San Antonio – (210) 421-5832