Profile
IT infrastructure professional with 5+ years of experience in systems administration, cloud engineering, network architecture, and security. Currently serving as sole infrastructure owner for a 1,400-user global enterprise, managing 400+ AWS EC2 instances and 100+ on-premises VMs across 6 locations spanning cloud, networking, security, and systems operations. Own the full project lifecycle from architecture and vendor negotiations through implementation, automation, and documentation.
Skills
Amazon Web Services – EC2, VPC, Lambda, S3, CloudWatch, Route 53, CloudFront, Workspaces, IAM
Microsoft Azure – Compute, Storage, Entra ID, Intune, Entra Connect, Conditional Access, Compliance Policies, App Deployment, Functions, Networking, Databases, Office 365
Networking – BGP, VLANs, SD-WAN, site-to-site VPN, hybrid and cloud networking, routing and switching
Firewall & Zero Trust – Fortinet FortiGate (SSL decryption, IPS, web filtering, application control), Zscaler ZIA, Zscaler ZPA
Security & SIEM – SentinelOne, Microsoft Defender for Endpoint, Elastic SIEM
Windows Server – Active Directory, Group Policy, DNS, Hyper-V, Exchange, NPS
Linux – Ubuntu, RedHat
Automation & Infrastructure as Code – Ansible (AWX), Terraform, Jenkins, GitHub Actions, Python, Bash
Virtualization & Containers – VMware, Proxmox, Hyper-V, Docker
Backup & Recovery – Veeam Backup & Replication (VMware, Proxmox, Hyper-V, Azure, AWS), Veeam Backup for Microsoft 365
Monitoring & Observability – Datadog, CloudWatch, custom API-driven Slack alerting
Certifications
Cisco Certified Network Associate (CCNA)
Microsoft Azure Administrator Associate
AWS Certified Cloud Practitioner
Microsoft Azure Fundamentals
CompTIA Network+
CompTIA Security+
CompTIA Cloud+
LPI Linux Essentials
ITIL v4 Foundations
Experience
Continuity Centers — Woodbury, NY
Lead Infrastructure Engineer – Dedicated Client
April 2024 – Present
- Serve as the sole infrastructure owner for a 1,400-user software company across a primary site and 5 global branch offices, serving as their lead internal IT resource across cloud, systems, networking, and security.
- Manage 400+ AWS EC2 instances across multiple VPCs and regions, administering compute resources, VPC networking, security groups, and IAM to maintain a secure and reliable cloud infrastructure.
- Automate AWS infrastructure management and reporting using Python and boto3, including programmatic identification and remediation of security group misconfigurations across the environment.
- Replaced legacy SonicWall firewalls with FortiGates across all locations, configuring BGP to connect branch offices to AWS, SD-WAN for WAN path optimization, SSL decryption, IPS, web filtering, and application control.
- Architected and deployed Zscaler ZIA and ZPA to replace SonicWall SSLVPN for 1,400 remote users, enabling SSL inspection at scale, DNS filtering, web filtering, and DLP enforcement.
- Planned and executed a zero-downtime Active Directory migration from Windows Server 2012 R2 to 2022 across multiple domain controllers in a complex multi-site environment hosted on AWS.
- Deployed Microsoft Intune to 1,400+ end users, defining and building all compliance policies, configuration profiles, conditional access policies, and app deployments in collaboration with leadership.
- Deploy and manage enterprise monitoring and observability across all network devices, servers, and cloud infrastructure using Datadog and AWS CloudWatch, with real-time alerting pipelines delivered to Slack via Lambda.
- Develop comprehensive technical documentation and operational runbooks, enabling support teams to independently manage end-user issues.
Lead Recovery Engineer – Internal Infrastructure
April 2024 – Present
- Manage a production datacenter environment housing 100+ VMs across 10+ hosts running VMware and Proxmox, alongside colocation services for multiple clients requiring managed hands and on-site support.
- Administer Veeam Backups across VMware, Proxmox, Hyper-V, Azure, Office 365, and AWS workloads.
- Deploy and manage a client-facing Veeam self-service restore portal for Microsoft 365, enabling end users to independently restore Exchange, Teams, SharePoint, and OneDrive data without engaging support.
- Designed and deployed a self-service disaster recovery portal using Ubuntu, nginx, and the Microsoft Graph API, enabling DR clients to independently provision ephemeral Azure VMs on demand.
- Migrated virtualization infrastructure from VMware to Proxmox, building a clustered environment for high-availability workloads.
Edge Technology Group / Thrive Networks — Greenwich, CT
Systems Administrator
March 2023 – April 2024
- Served as sole systems administrator and third-level escalation for 20+ global financial services clients including hedge funds, managing infrastructure across cloud, virtualization, networking, and productivity platforms.
- Assisted with infrastructure projects including file server migrations to SharePoint and Egnyte, Exchange to O365 migrations, Windows Server upgrades, Intune deployments for workstations and mobile devices, and VPN deployments using Ivanti Secure.
- Administered Microsoft 365 environments including Exchange Online, SharePoint, and Teams, managing permissions, user lifecycle, and troubleshooting across multiple client tenants.
- Administered Mimecast across multiple client tenants, managing inbound and outbound email security policies, attachment sandboxing, URL protection, impersonation protection, DLP, email archiving, retention policies, continuity, directory sync, and automated signatures.
- Managed Active Directory functions including user provisioning, group policy, DNS management, and replication troubleshooting across multiple client environments.
- Managed configuration and troubleshooting of Cisco routers and switches to maintain network performance and reliability across client environments.
Client Support Engineer
June 2022 – March 2023
- Provided technical support and administration across Microsoft 365, Active Directory, and virtualization platforms for financial services clients.
- Gained foundational experience in backup operations using Veeam and Commvault, and supported email security administration across Proofpoint and Mimecast platforms.
Sourcepass — East Northport, NY
Client Onboarding Manager
October 2021 – June 2022
- Led a team of 4–6 engineers through 100+ client onboardings, overseeing the full lifecycle from initial kick-off through technical implementation and handoff.
- Executed technical implementation work including new site buildouts, server deployments, firewall swaps, network equipment refreshes, and O365 migrations.
- Configured SonicWall firewalls including SSL inspection, application control, VLAN segmentation, and QoS policies to baseline client environments to company security standards.
- Conducted security audits for incoming clients, identifying gaps and implementing remediation as part of the onboarding process.
- Trained and mentored team members on implementation procedures and technical best practices.
Project Engineer
August 2020 – October 2021
- Executed new client site buildouts including server deployments, routers, switches, and wireless infrastructure from the ground up.
- Completed server migrations, firewall swaps, O365 migrations, Intune deployments, and MFA rollouts across a diverse client portfolio.
Education
Western Governor's University
Bachelor of Science, Cloud Computing