Am Services

IT Lead

VLBPO • Período integral

Oct 2024 - Present • 1 yr 7 mos

Providing strategic leadership and technical oversight of IT operations and network infrastructures across both internal systems and managed client environments. Collaborated with executive leadership to define IT strategy, roadmap, and digital transformation initiatives, and aligned IT investments with business goals. Designed and implemented cloud infrastructure solutions across AWS, Azure, GCP, and OCI including IaC deployments, hybrid networking, cloud security controls, and Identity and Access Management (IAM). Implemented comprehensive IAM solutions using Microsoft Entra ID, Conditional Access Policies, Privileged Identity Management (PIM), and Identity Governance to enforce least privilege, MFA, and compliance-driven access control across hybrid environments. Implemented enterprise-grade monitoring with PRTG Network Monitor, SolarWinds, and Zabbix to ensure proactive infrastructure visibility and automated alerting. Built centralized logging with ELK stack and set up Prometheus with Alert Manager, increasing system observability and reducing incident response time by 30%. Implemented SIEM solutions like Azure Sentinel, enhancing threat detection and incident response workflows for both internal and client infrastructures. Designed and implemented a GitLab CI/CD pipeline, working closely with developers to deploy microservices, enabling 3x faster release cycles. Led the company’s ISO 27001 and PCI DSS compliance program by collaborating with cybersecurity vendors, aligning IT controls, system configurations, and security operations to regulatory standards, and achieving successful compliance audits.

Senior IT Specialist

Bonn Consulting UG • Período integral

Jul 2021 - Dec 2024 • 3 yrs 5 mos

Led the design, deployment, and management of IT and network infrastructures for multiple clients across diverse industries for scalable, secure, and high-availability environments. Implemented containerized environments using Docker, Docker Compose, and Kubernetes. Automated infrastructure provisioning with Terraform, reducing manual processes and configuration drift. Developed configuration management scripts with Ansible, standardizing environment setup and reducing errors. Implemented and maintained robust CI/CD pipelines using Jenkins, GitLab CI, and GitHub actions. Designed and implemented a highly available and automated Kubernetes-based platform on AWS, supporting microservices and serverless workloads. Led performance monitoring initiatives to identify and resolve system bottlenecks by setting up Prometheus and Grafana dashboards, improving system uptime to 99.9%. Developed Bash, Python, and PowerShell scripts to automate routine administration tasks such as user provisioning, mailbox management, reporting, and infrastructure monitoring across hybrid environments.

Senior System & Network Engineer

Hedra Technology Consultants • Período integral

Aug 2018 - Jul 2021 • 2 yrs 11 mos

Deployed and maintained network security infrastructures including Juniper SRX, Cisco Firepower/Secure Firewall, FortiGate, and pfSense to secure perimeter networks, enable site-to-site and remote-access VPNs, and enforce security policies. Designed and maintained high-availability switching and routing infrastructures using Juniper EX/QFX, Cisco Catalyst/Nexus/Meraki switches, and Juniper MX/Cisco ASR routers. Implemented MPLS, EVPN, and VXLAN overlays for scalable, resilient, and virtualized data center and WAN environments. Implemented Network Access Control (NAC) solutions such as Cisco ISE, Aruba ClearPass, and FortiNAC to enforce user/device authentication, posture checks, and access policies. Implemented high-performance wireless solutions using Cisco, Ruckus, Juniper Mist, and Fortinet WLAN platforms, enabling seamless mobility, guest access, and secure wireless segmentation. Deployed enterprise network monitoring and performance management using Junos Space, PRTG, SolarWinds, and WhatsUp Gold, ensuring high availability, fault detection, and SLA compliance. Developed comprehensive High-Level Designs (HLDs) and Low-Level Designs (LLDs) aligned with client requirements, translating business needs into scalable, secure, and high-performance network architectures. Automated network devices provisioning using Ansible, replacing manual configurations across 150+ nodes, resulting in 60% faster deployments and zero config drift. Provided architectural input and hands-on expertise for network design and infrastructure upgrades, including capacity planning, failover design, and migration to next-gen platforms. Authored and maintained detailed documentation for network topologies, configurations, change management, and disaster recovery procedures. Managed and administered Linux-based systems (Ubuntu, Debian, CentOS, RHEL), performing system updates, shell scripting, log analysis, and automation of routine tasks.