Cloud Infrastructure Engineer

I serve as Infrastructure Lead supporting the administration, security, and governance of Microsoft Azure, Microsoft Entra ID, Microsoft 365, and cloud security integrations for multiple government institutions. I manage identity controls including users, groups, RBAC, MFA, Conditional Access, privileged roles, access reviews, break-glass accounts, and least-privilege governance.

I support Azure infrastructure operations, cloud security posture reviews, tenant hardening, and remediation of configuration findings using Secure Score, Defender for Cloud, Azure Policy, and Microsoft Cloud Security Benchmark guidance. I create reusable Terraform-based deployment patterns and documentation for Azure networking, virtual machines, storage, Key Vault, tagging, and baseline configurations.

I collaborate with SOC, development, infrastructure, and institutional teams on cloud, identity, DNS, WAF, connectivity, and monitoring issues. I also contribute to DevSecOps reviews, technical documentation, runbooks, compliance artifacts, and cybersecurity awareness sessions aligned with ISO 27001, NIST, SIM3, and secure access practices.

I supported a cloud infrastructure project for a Citrix environment with more than 500 virtual machines, validating server provisioning, virtual machine readiness, domain joins, user access, application delivery prerequisites, and secure desktop and application availability. I administered hybrid infrastructure across VMware, Nutanix, Citrix, Azure, Active Directory, Windows Server, Linux, and Microsoft 365.

I managed Azure servers, user and group access, privileged access controls, patching, update validation, and operational infrastructure changes. I documented reusable provisioning and baseline configuration procedures and created Terraform-based examples for Azure resource groups, virtual networks, subnets, network security groups, virtual machines, storage accounts, and tagging standards.

I supported Kubernetes and container hosting readiness reviews, backup and recovery operations with Veeam Backup, update management with WSUS, CyberArk-supported privileged access practices, system health checks, troubleshooting, incident response support, and operational continuity activities.

I investigated CSIRT operations and cybersecurity services delivered through the CSIRT Americas network. I researched incident management processes and maturity practices based on NIST, SANS, FIRST, and SIM3.

I supported CSIRT maturity evaluation activities under a SIM3-certified auditor by reviewing interviews, documentation, operational processes, and supporting evidence. I analyzed account lifecycle controls, privileged access processes, and incident response procedures related to identity risks and access abuse.

I developed structured findings and recommendations to improve access governance, monitoring, incident handling, and overall CSIRT maturity.

I supported AWS and Microsoft Azure environments, including cloud instance deployment, access configuration, secure credential practices, and technical documentation. I also managed developer provisioning, group-based permissions, secure authentication policies, and access segmentation across cloud and collaboration platforms.

I supported DevOps automation, CI/CD integrations, version-controlled deployments, QA activities, and environment provisioning. I documented repeatable cloud deployment patterns, environment variables, access prerequisites, and deployment steps for development and QA environments.

I gained practical exposure to Docker and Kubernetes deployment concepts and coordinated team tasks as an acting Scrum Master. I also supported occasional development activities using C#, Java, and MySQL.