// about

Security-minded infrastructure engineer with a decade in the trenches.

I'm an IT and cybersecurity professional with 10+ years of hands-on experience running the systems organizations depend on every day: perimeter security, enterprise networks, virtualization, databases and cloud.

My career started on the service desk and grew into designing and operating infrastructure for more than 1,200 users across dozens of sites, leading migrations to Microsoft Azure, and managing a distributed engineering team as a player-coach — still hands-on, still on the keyboard.

What I bring to a team or a client:

  • Security that is operated, not just documented — firewalls, WAF, VPN, SSO and monitoring that cut security incidents by more than 70%.
  • Reliability as a habit — 99.9x% uptime targets met across networks, data centers and cloud workloads.
  • Clear communication — fully bilingual (English C2 / Spanish native), comfortable with executives, auditors and engineers alike.

This site is also my lab notebook: every project in the portfolio is reproducible, with write-ups, code and downloadable source.

Contact me

At a glance

  • Medellín, Colombia · Remote worldwide
  • 10+ years in IT operations, infrastructure & security
  • English — C2 — Proficient
  • Spanish — Native
  • B.Sc. in Computer Engineering · Universidad Católica del Norte (2018)

// impact

Key achievements

10+
years in IT, infrastructure and security

Continuous hands-on experience across support, networking, databases, cloud and security operations.

Experience
0
incidents or unplanned downtime in 2 years

Proactively assessed and managed IT risk, performance and capacity across all technology domains.

Reliability
70%+
fewer security incidents

Administered perimeter firewalls, WAF, anti-spam filtering and site-to-site VPNs for a 1,200-user environment.

Security
50%
faster critical transactions after an Azure migration

Halved processing time of core business transactions by leading an on-premises-to-Azure migration.

Cloud
97%
client satisfaction in support

Directed the technical support team's adherence to ITSM frameworks and corporate SLAs, reaching a 97% client satisfaction rate.

Service
99.97%
availability after moving critical systems to the cloud

Led the full migration of business-critical systems to the cloud and sustained 99.97% average availability.

Cloud
1,200+
users on unified SSO

Implemented and governed Single Sign-On, consolidating authentication across organizational systems.

Identity
90+
database instances migrated

Migrated and maintained SQL Server, MySQL and Oracle instances, including hardware refreshes and partial cloud migrations.

Databases
8x
network bandwidth per site

Redesigned core/edge switching over a dark-fiber ring, raising 25 sites from 120 Mbps to 1 Gbps.

Networking
0
incidents in 28 months

Maintained ISO 9001 certification with zero incidents by enforcing IT service continuity and information-security practices.

Compliance
99.96%
multi-site network uptime

Designed and monitored resilient LAN/WAN/MAN architectures with dynamic routing across 118 distributed sites.

Networking
80+
production VMs · 4 PB storage

Operated Hyper-V, Proxmox and VMware hypervisors, NAS storage and Dockerized services across 8 interconnected sites.

Infrastructure
4x
telephony capacity

Architected, tuned and secured an Asterisk VoIP platform, scaling from 200 to 400 simultaneous operators over a SIP trunk.

VoIP
~$700K
annual revenue from in-house software

Led a four-person development team through the full build-and-maintenance lifecycle of two company-owned products.

Leadership
9
engineers across 3 countries

Led a distributed team across Colombia, the United States and Pakistan while staying hands-on.

Leadership

// skills

Skills

Cybersecurity

  • Fortinet (Firewall/UTM)
  • WAF
  • Anti-spam
  • Site-to-site VPN
  • OpenVPN
  • SSO
  • ISO 9001 compliance
  • CIS Benchmarks
  • Vulnerability management (Greenbone/OpenVAS)
  • Detection engineering (Sigma)
  • Cloud security posture (Prowler)
  • Secrets scanning & code analysis (gitleaks, CodeQL)

Networking

  • Cisco (CCNA)
  • LAN / WAN / MAN
  • Dynamic routing (OSPF/BGP)
  • Fiber optics
  • VLAN segmentation

Cloud

  • Microsoft Azure (IaaS, PaaS, SaaS)
  • Microsoft 365
  • Google Workspace
  • Zoho ONE
  • AWS (security audit)

Identity

  • Active Directory
  • Microsoft Entra ID
  • SSO

Infrastructure & virtualization

  • Hyper-V
  • Proxmox
  • VMware
  • Docker
  • Kubernetes (basic)
  • Windows Server
  • Linux (Ubuntu / Debian / CentOS)

Databases

  • Microsoft SQL Server
  • PostgreSQL
  • MySQL
  • Oracle
  • Backup & disaster recovery

Automation & DevSecOps

  • Python
  • Bash
  • PowerShell
  • Terraform
  • Ansible
  • GitHub Actions (CI/CD)
  • Git / GitHub
  • Django
  • C# / .NET

VoIP

  • Asterisk
  • SIP trunks
  • Zoom Workplace

Management

  • Team leadership (distributed teams)
  • ITSM / SLAs
  • IT risk management

// career

Experience

Roles across consulting, public-sector and enterprise environments. Client and employer names are kept confidential.

2024 – Present

IT Manager (player-coach)

Training & consulting company

Hands-on technical leadership of a distributed engineering organization.

  • Led a 9-person team across three countries while executing day-to-day technical work.
  • Delivered 88% of IT projects on time through functional analysis against technology standards.
  • Zero incidents or unplanned downtime over two years through proactive risk and capacity management.
  • Led the migration of business-critical systems to the cloud — 99.97% average uptime.
  • Kept ISO 9001 certification with zero incidents over 28 consecutive months.
  • Led a 4-person development team building two in-house products (~$700K USD annual net revenue).
2021 – 2024

Technology Infrastructure & Support Coordinator

Research & technology organization

Owned perimeter security, data center, network and database operations for a 1,200-user environment.

  • Cut security incidents by 70%+ administering Fortinet firewalls, WAF, anti-spam and site-to-site VPNs.
  • Operated 80+ production VMs and 4 PB of distributed storage across 8 sites linked by 40 Gbps optics.
  • Raised per-site bandwidth 8x (120 Mbps → 1 Gbps) across 25 institutions over a dark-fiber ring.
  • Sustained 99.96%+ uptime across 118 distributed sites with dynamic routing (OSPF/BGP).
  • Migrated and maintained 90+ SQL Server, MySQL and Oracle instances; halved transaction time moving core systems to Azure.
  • Implemented Single Sign-On for 1,200+ users and scaled an Asterisk VoIP platform 4x.
2020 – 2021

Technology Infrastructure Engineer

Public-sector engagement

On-site engineering for a municipal-scale institutional environment.

  • Operated 10 site-to-site VPN tunnels serving ~400 remote users, plus WAF and anti-spam controls.
  • Supported 12 physical hosts, ~50 VMs and 300 TB of NAS storage across two data centers.
  • Designed and deployed the organization's first integrated IP telephony solution for 600 users.
2016 – 2020

IT Operations Technician

Public environmental agency

Technical and administrative support for corporate information systems.

  • Maintained 97%+ SLA compliance resolving ~10 tickets per day for 260 employees.
  • Kept 12 coordinated mission-critical processes running across 7 interconnected systems.
  • Audited 7 production databases semi-annually against GDPR/CCPA-aligned data-protection standards.

// let's talk

Need a security assessment, an infrastructure lead or an extra pair of expert hands?

Tell me about your environment and goals. I usually reply within one to two business days.

Get in touch