Technology executive and hands-on Azure infrastructure and security architect with 20+ years leading enterprise IT strategy, infrastructure operations, and cybersecurity program delivery, while architecting hybrid cloud environments, hardening network and security posture, troubleshooting Active Directory replication including GPO/Security Policy/Server Hardening, managing PKI environments, directing backup/disaster recovery (Dell EMC ECS), and integrating enterprise applications (APIs, SFTP/MFT). Combines strategic ownership, budgeting, vendor management, governance, and team leadership with deep technical execution across multi-site environments supporting 6,400+ users at 99.9% uptime, driving cost reduction and secure digital innovation.
LEADERSHIP IMPACT
• Directed enterprise IT operations & cybersecurity strategy supporting 6,400+ users through Azure AD, IAM, and hybrid cloud infrastructure
• Led IT department of 12 engineers and administrators across infrastructure, network security, and identity & access management functions
• Delivered 99.9% system availability across mission-critical environments through Azure networking, virtualization (Hyper-V/ Vmware/Proxmox), and proactive infrastructure management
• Reduced infrastructure and licensing costs by 25-30% through cloud governance, vendor optimization, and Azure resource consolidation
• Implemented automation solutions (PowerShell, Power BI, AI-driven workflows) reducing workload by 65-70%
• Directed 10+ enterprise cloud and digital transformation initiatives, improving delivery timelines by 25%, while personally owning Azure infrastructure architecture, network configuration, and security hardening (Fortinet, Cisco, Sophos, SonicWall, WatchGuard) across all deployments
• Configured and monitored enterprise security platforms (Microsoft Defender, Splunk, ManageEngine, SolarWinds) to detect and respond to security incidents across cloud and hybrid environments
• Spearheaded AI-driven automation solutions, reducing process completion time by 45%
• Directed backup, disaster recovery, and storage recovery operations, including Veeam, Veritas, and Dell EMC ECS environments, ensuring data integrity and rapid restoration for enterprise platforms
• Led application and file integration efforts spanning API connectivity and SFTP/MFT processes to support secure enterprise data exchange
• Administered hybrid Microsoft Entra ID (Azure AD) and on-premises Active Directory environments; including Group Policy Objects (GPO), Conditional Access policies, Role-Based Access Control (RBAC), security policy enforcement, and server hardening - as part of secure, scalable platform deployments supporting 9,600+ users
• Administered Microsoft endpoint and systems management platforms (SCCM/MECM, SCOM, Microsoft Intune) for Windows 10/11 device deployment, patching, configuration, and monitoring across enterprise deployments
• Troubleshot Active Directory replication issues across multiple domain controllers and sites, ensuring consistent directory synchronization, DNS/DHCP service reliability, and identity availability across hybrid cloud and on-premises environments
• Managed PKI (Public Key Infrastructure), the system used to create, issue, manage, validate, renew, and revoke digital certificates supporting secure authentication and encrypted communications across enterprise systems
• Deployed secure, scalable platforms supporting 9,600+ users, improving operations
• Directed enterprise IT strategy and operations supporting 6,400+ users, driving business alignment, performance, and digital transformation across finance, operations, and academic functions, while personally designing and managing hybrid cloud and on-premises network architecture (Azure, LAN/WAN, DNS, DHCP, AD/GPO, VPN, firewalls) across 80+ servers at 99.9% uptime
• Built and led a 12-person cross-functional infrastructure, security, and applications team, overseeing performance management, mentoring, and technical career development; directed vendor management and budget planning, reducing costs by 25-30%
• Administered identity and access management through Microsoft Entra ID (Azure AD) and on-premises Active Directory, including Group Policy Objects (GPO), Conditional Access policies, Role-Based Access Control (RBAC), IAM, SSO, OAuth, MFA, security policy enforcement, and server hardening across hybrid cloud and on-premises environments
• Resolved Active Directory replication issues across multiple domain controllers and sites in an 80+ server, multi-site environment, maintaining directory consistency, DNS/DHCP service reliability, and uninterrupted identity services
• Managed PKI (Public Key Infrastructure) the system used to create, issue, manage, validate, renew, and revoke digital certificates supporting secure authentication, encrypted communications, and ISO 27001-aligned compliance
• Managed enterprise storage and server hardware, including Dell EMC storage systems and HPE iLO/OneView administration for ProLiant rack and blade server deployments
• Administered Microsoft endpoint and systems management platforms (SCCM/MECM, SCOM) for enterprise-wide patching, configuration, and monitoring across 80+ servers
• Administered Windows 10/11 desktop and laptop environments for 6,400+ end users, including Dell and Microsoft hardware platforms, PC registry configuration, print services, and antivirus management console administration (Microsoft Defender)
• Integrated real-time analytics with program operations, allowing cross-site leadership to react instantly to fluctuations in attendance, which contributed to an increase in on-time activity starts from 85% to 97% across two consecutive summer sessions, 2021 & 2022.
• Identified and eliminated process bottlenecks using Power BI analytics, cutting support resolution times from an average of 20 minutes to 8 minutes per incident while maintaining more than 98% program satisfaction.
• Spearheaded end-to-end planning and delivery for summer school operations serving over 200 students and 50 staff, integrating cloud-based scheduling tools and optimizing resource allocation to increase program capacity by 25% while maintaining 98% satisfaction rates over two consecutive seasons.
• Integrated real-time analytics with program operations, allowing cross-site leadership to react instantly to fluctuations in attendance, which contributed to an increase in on-time activity starts from 85% to 97% across two consecutive summer sessions, 2021 & 2022.
• Identified and eliminated process bottlenecks using Power BI analytics, cutting support resolution times from an average of 20 minutes to 8 minutes per incident while maintaining more than 98% program satisfaction.
• Spearheaded end-to-end planning and delivery for summer school operations serving over 200 students and 50 staff, integrating cloud-based scheduling tools and optimizing resource allocation to increase program capacity by 25% while maintaining 98% satisfaction rates over two consecutive seasons.
• Implemented Group Policy Objects (GPO) optimization across Windows infrastructure, accelerating account provisioning workflows by 40% and reducing helpdesk incident response times by 25% using integrated automation tools and process documentation.
• Supported ERP systems for finance, payroll, inventory, and POS operations.
• Facilitated coordination between five departmental IT teams and four external vendors, improving incident resolution time by 30% over a 12- month period through efficient ticketing and routine performance KPIs reviews.
• Provided second-level technical support across multiple operational departments.
I have over 20 years of experience in IT, with a strong background in IT management, infrastructure and systems administration, network operations, cybersecurity, cloud technologies, and technical support.
Throughout my career, I’ve managed enterprise IT environments, including servers, networks, Active Directory, Microsoft 365, Azure, virtualization, backup and disaster recovery, and security operations. I’ve also led IT teams, managed vendors and projects, and worked closely with business stakeholders to align technology with business needs.
More recently, my focus has expanded into AI solutions architecture, automation, cloud transformation, and data-driven operational improvements. I’ve used technologies such as PowerShell, Python, SQL, and Power BI to automate processes, improve reporting, strengthen security, and increase operational efficiency.
Overall, my experience combines hands-on technical expertise with IT leadership, architecture, cybersecurity, automation, and business-focused technology management.
PMP (Project Management Professional)
ITIL v3 - Information Technology Infrastructure Library
Six Sigma Yellow Belt
SCRUM
ISO 27001, ISO 27002, ISO 9001, ISO 19011
Microsoft Certified: Azure Administrator (AZ-104)
Microsoft Certified: Azure Solutions Architect (AZ-303/304)
Microsoft Certified: Azure Fundamentals (AZ-900)
Microsoft 365 Security (MS-500, MS-900)
Cisco CCNA
Microsoft MCSA
Huawei Certified ICT Associate - Datacom
MikroTik Certified Network Associate (MTCNA)
Ubiquiti Broadband Routing & Switching Specialist (UBRSS)
Windows Server Administration
Linux Administration
VMware Virtualization
Microsoft Azure
SQL Database Management
HTML Development
JavaScript Development
SCCM (System Center Configuration Manager)
SCOM (System Center Operations Manager)
ERP Systems Management
Microsoft 365 Administration
Azure Active Directory
Bash Scripting
Project Management Software
Confluence for Documentation
Microsoft Teams for Collaboration
Splunk for Log Management
Google Cloud Platform (GCP)
Power BI for Business Analytics
Zoho CRM
VMware vSphere for Virtualization
Hyper-V for Virtualization
Veeam for Backup Solutions
Veritas NetBackup
Microsoft SQL Server Management Studio
Symantec Endpoint Protection
McAfee ePolicy Orchestrator
Splunk for Security Information and Event Management (SIEM)
SolarWinds Network Performance Monitor
Cisco Meraki for Network Management
Adobe Creative Suite
PowerShell Scripting
Python Scripting
GitHub Actions (CI/CD)
Fortinet
Sophos
SonicWall
WatchGuard
Microsoft Defender
ManageEngine
Microsoft Intune
WSUS (Windows Server Update Services)
SCVMM (System Center Virtual Machine Manager)
Exchange Online
Proxmox Virtual Environment
Dell EMC ECS (storage recovery platform)
HPE iLO / HPE OneView (server hardware management)
VMware ESXi
Microsoft Entra ID
PKI / Certificate Management tooling