Panama City, Panamá, Panama
Cloud and Security Specialist with over 15 years of experience transforming complex infrastructures into effiicient, secure, and automated environments. Expert proficiency in AWS, Terraform, and containerized architectures (ECS/EKS). Specialized in implementing Cloud Security Posture Management (CSPM) strategies and designing architectures under the Well-Architected Framework. Passionate about operational effiiciency, with a proven track record of executing critical zero-downtime migrations and drastically reducing operational costs through advanced cloud governance and rightsizing strategies. Cloud & Security AWS (WAF · Security Hub · GuardDuty · Inspector · CloudTrail · Cloudwatch · IAM · IAM Identity Center · Config · Lambda · Eventbridge · ECS · ECR · EKS · Client VPN · Athena · AWS Backup · S3 · RDS · Codepipeline · Zero Trust arquitectures). IaC, automatization and monitoring Terraform · Prowler · Grafana · Lens · Lambda · Codepipeline CICD · Github OS & Virtualization VMware vSphere 6.5/7.0 · Hyper-V · Zerto · Active Directory · DNS · DHCP · RHEL/CentOS · Windows Server Security Frameworks CIS · SOC 2 · ISO 27001 · ITIL
Cloud Hardening & CSPM: Led the implementation of advanced security strategies, automating over 50 controls across multiple regulatory frameworks and industry standards, successfully increasing the environment's security score from 80% to 95%. Perimeter Security: Implemented perimeter protection solutions using AWS WAF to mitigate Layer 7 attacks, integrating analytical queries in Amazon Athena to automate the detection and reactive blocking of malicious IP addresses. Connectivity & Access Control (VPN): Designed a secure network infrastructure based on AWS Client VPN with SAML authentication, centralizing VPC routing and subnet segmentation to strengthen access control, traceability, and audit logging. Infrastructure as Code (IaC): Automated environment provisioning by developing reusable Terraform modules, eliminating configuration drift and ensuring absolute consistency and immutability between QA and Production environments. Modern Architecture Design: Designed elastic, serverless-based environments leveraging container architectures (ECS/EKS), ensuring deployment immutability and operational consistency throughout the entire software development lifecycle. Cost Efficiency: Engineered scheduled automation tasks using AWS Lambda and EventBridge for automated infrastructure shutdown during non- operational hours; complementarily, developed a Terraform-driven tagging strategy to map and optimize project-specific cloud expenditures.
Successfully implemented Cyberextruder (AI-driven security tool), reducing critical malicious access alerts and ensuring compliance with Anti-Money Laundering (AML) regulations.
System Engineer specialized in the area of ICT infrastructure of the mine. In charge of ensuring the delivery and availability of the services and systems of the mine. The main responsibilities of the position include the following: - Administration and Support of Operating Systems (WS2012, WS2016, WS2019, Linux Centos, Redhat), management tools, and scripts (vSphere CLI, Powershell, PowerCLI). - Management of active directory and DNS, FS, DFS, DHCP, WSUS, CA, and GPO roles. - Administration and Support of Rack and Blade Servers (Cisco, Dell, HP) - Administration and Support of storage devices (IBM, VNX, Hitachi, Dell) - Administration and Support of the Mail System Microsoft Exchange Server 2010, 2016 - Administration, Support, and Capacity Planning for virtual environments in VMware vSphere 6.5, 7.0 - Administration and Support of vCenter, vRealize Operations, VMware Horizon, and Skyline Advisor. - Administration, provisioning, and maintenance of CCTV systems (Avigilon) - Planned policies and executed backups of the different servers and services of the company. - Management and implementation of IT projects - Manage incidents, requests, and changes in the different managed services. - Identify points for improvement and/or capacity requirements.
- Responsible for the design, implementation, provision, security, and support of the services and servers that support the different technology platforms of the company. (AWS / Linux). - Administration of communication and security networks. (LAN / WIFI - Ubiquity) - Administration of IP telephony platform (VOIP-PBX). - Office 365, OneDrive, and Sharepoint Online administration and support. - Management of mail platforms On-premise (iRedMail) and in the cloud. (AWS / UK-Cloud) - Backup management on AWS (S3). - Monitoring of services in production and applications (Site24x7)
- Assistance to Presales and Projects validating architectures and services. - Implement new and existing client projects. - Documentation of technical memories of the new implementations. - Management of incidents, requests and changes on the different managed services. - Inventory management (Hardware / Software / Lic), guarantees and allocation of resources. - Generate capacity, performance, monitoring and log reports. - Manage accounts, backups, security, baselines. - Maintain updated software and service platforms. - Identify points of improvement and / or capacity requirements. - Actively participate in the implementation of processes and audits.