Yannick Rugamba

Senior IT Infrastructure & Cybersecurity Specialist with 10+ years of experience managing complex Windows, VMware, and automation environments in global enterprise settings. Skilled in designing and supporting secure infrastructures in multi-tenant environments (2,000+ servers), implementing patching automation, backup strategies, and access control frameworks. Proven ability to lead system migrations, enforce security compliance, and automate IT operations using PowerShell and Ansible. Recently completed Master's in IT Auditing & Cybersecurity, strengthening expertise in compliance, risk management, and secure design. Trusted SME for integrating security into infrastructure at scale.

• Achieved 40% reduction in security vulnerabilities through effectively implementing automated patching and compliance workflows using WSUS and Ansible Tower.
• Achieved 50% decrease in patching time by completing full automation of Windows Server update process with accuracy and efficiency.
• Achieved improved threat detection by introducing Science Logic integration with Ansible for [automated security incident remediation tasks.
• Collaborated with team of 5 engineers in the development of Disaster Recovery Planning procedures that reduced RTOs by 50%.
• Used PowerShell and Ansible to develop secure infrastructure automation scripts that enforced security standards across 2,000+ servers.
• Documented and resolved identity management vulnerabilities which led to enhanced RBAC implementation and reduced unauthorized access by 40%.
• Resolved security compliance issues through implementation of consistent hardening standards across Windows Server and VMware environments.
• Led security migration of Kaspersky to Trend Micro Deep Security and Microsoft 365 Defender across 2,000+ endpoints, enhancing organizational security posture.

• CCNA, Cisco Certified Network Associate
• CISSP, In Progress – Target certification May 2025

• Infrastructure Security Automation, Full automation of patching and compliance workflows using WSUS + Ansible Tower, reducing security vulnerabilities by 40%
• AV & Endpoint Security Upgrade, Led migration from legacy antivirus to Trend Micro + Defender integration, covering 2,000+ endpoints across multiple clients
• Secure Access Design, Designed RBAC structure and automated user onboarding workflows via Ansible & AD, ensuring compliance with principle of least privilege
• DRP Participation, Actively supported Disaster Recovery tests (infrastructure failover and data validation), reducing Recovery Time Objectives by 50%