Este es mi perfilContactar vía CazVidEste perfil está escrito en inglés
Lisandra
Infrastructure & Cloud Systems Coordinator | DevSecOps
Contacto
Competencias
Demonstrated experience with Azure Infrastructure.
Demonstrated experience with Azure Networking.
Demonstrated experience with Microsoft Azure.
Demonstrated experience with AWS.
Demonstrated experience with Microsoft 365.
Educación
Idiomas
Resumen
Infrastructure & Cloud Systems Coordinator | DevSecOps open to new opportunities
Experiencia
Infrastructure & Cloud Systems Coordinator | DevSecOps
Serve as Infrastructure Lead, supporting the administration, security, and governance of Microsoft Azure, Microsoft Entra ID, Microsoft 365, and cloud/security integrations for multiple government institutions.. Manage identity and access controls, including Entra ID users and groups, RBAC assignments, MFA, Conditional Access policies, privileged roles, access reviews, break-glass accounts, and least-privilege governance.. Support Azure infrastructure operations by reviewing resource configurations, access requirements, monitoring needs, service availability, governance recommendations, and remediation of cloud security misconfigurations.. Participate in tenant hardening initiatives for public institutions by reviewing Microsoft Secure Score, Defender for Cloud recommendations, Azure Policy findings, MFA readiness, Conditional Access gaps, identity risks, privileged access exposure, and Microsoft Cloud Security Benchmark alignment.. Use Terraform and Infrastructure as Code concepts to create and adapt reusable Azure deployment templates for resource groups, virtual networks, subnets, network security groups, storage accounts, virtual machines, Key Vault baseline settings, tagging standards, and repeatable infrastructure documentation.. Support Azure application and infrastructure deployments, including virtual machines, App Services, DNS/WAF routing, access configuration, onboarding workflows, monitoring requirements, and secure production cutover coordination.. Review Kubernetes/AKS and container-based workload requirements with technical teams, focusing on cloud networking, identity, access, monitoring, and security considerations before deployment.. Operate and integrate cybersecurity and network platforms such as Elastic/Kibana, Sophos, Fortigate, Cisco Umbrella, Reblaze WAF, Office 365 tenants, and related monitoring/security services.. Support Microsoft Defender for Cloud and security monitoring workflows to identify misconfigurations, review recommendations, prioritize remediation actions, and validate closure of findings.. Contribute to DevSecOps practices in Azure DevOps, including secure deployment reviews, access controls, policy/compliance checks, and security baselines before release.. Collaborate with SOC, infrastructure, development, and institutional teams to troubleshoot identity, cloud, WAF, DNS, access, and connectivity-related issues.. Deliver and support mentoring and awareness sessions for children, students, and public-sector institutions on cybersecurity fundamentals, cloud security hygiene, tenant hardening, identity protection, MFA, secure access, phishing prevention, and responsible technology use.. Create technical documentation, architecture notes, operational procedures, hardening guides, runbooks, and governance artifacts aligned with ISO 27001, NIST, SIM3, Microsoft Cloud Security Benchmark, and least privilege best practices.
Cybersecurity Policies and Procedures Analyst | Previous Role
Created, reviewed, and audited cybersecurity policies, procedures, control narratives, and operational runbooks aligned with ISO 27001, NIST, SIM3, Microsoft security practices, and institutional governance requirements.. Translated cybersecurity and compliance requirements into practical controls for identity, access management, incident response, business continuity, data protection, logging, vulnerability remediation, and secure cloud operations.. Supported governance, compliance, and audit readiness by reviewing evidence from cybersecurity tools and operational processes, identifying control gaps, and recommending improvements to strengthen security maturity.. Reviewed controls and audit evidence related to Microsoft Entra ID, MFA, Conditional Access, RBAC, privileged access, Microsoft Purview DLP, Defender for Cloud, WAF/DNS processes, SIEM/logging, and incident management workflows.. Helped map findings from technical teams and security platforms into remediation actions, policy updates, risk notes, compliance artifacts, and management-ready recommendations.. Documented and reviewed access control, incident response, business continuity, CSIRT operations, escalation paths, evidence handling, audit trails, and operational responsibilities for institutional use.
Sysadmin IT Infrastructure | Cloud Administrator | IT Support
Supported a cloud infrastructure project for a Citrix environment involving 500+ virtual machines, helping validate server provisioning steps, VM readiness, domain join requirements, user access, application delivery prerequisites, and secure desktop/application availability.. Administered and supported hybrid infrastructure across VMware, Nutanix, Citrix, Microsoft Azure, Active Directory, Windows Server, Linux, and Microsoft 365, including VM lifecycle tasks, access administration, basic capacity checks, and service availability reviews.. Managed Azure cloud servers and related operational tasks, including user and group access, privileged access controls, server patching, update validation, resource availability checks, and coordination of infrastructure changes with technical teams.. Documented repeatable server provisioning and baseline configuration procedures, including naming standards, access requirements, patching steps, monitoring checks, and operational handoff tasks, so they could be reused as IaC-ready workflows.. Created and adapted practical Terraform-based examples for Azure infrastructure standardization, including resource groups, virtual networks, subnets, network security groups, virtual machines, storage accounts, tagging standards, and baseline configuration documentation.. Worked with Kubernetes and containerization concepts from an infrastructure support perspective, reviewing application hosting requirements such as networking, DNS, ports, environment variables, secrets handling, monitoring needs, and deployment dependencies before production support.. Followed CyberArk-supported privileged access practices to help protect administrative credentials, reduce direct credential exposure, and support controlled access to critical infrastructure components.. Supported backup and recovery operations with Veeam Backup and update management with WSUS, helping validate backup availability, patch status, recovery readiness, and operational continuity for infrastructure services.. Performed access administration, infrastructure troubleshooting, system health checks, patch validation, and incident response support for server, application, access, and security-related issues.
Cybersecurity Internship
Investigated CSIRT operations and cybersecurity services delivered through the CSIRT Americas network.. Researched incident management processes and maturity practices based on NIST, SANS, FIRST, and SIM3.. Supported CSIRT maturity evaluation activities under a SIM3-certified auditor by reviewing interviews, documentation, operational processes, and evidence.. Analyzed account lifecycle controls, privileged access processes, and incident response procedures related to access abuse and identity-related risks.. Developed structured findings and recommendations to improve access governance, monitoring, incident handling, and CSIRT maturity.
Technical Assistant | Cloud, DevOps
Supported AWS and Microsoft Azure environments, including cloud instance deployment, access configuration, secure credentials, and technical documentation.. Managed developer provisioning, group-based permissions, secure authentication policies, and access segmentation across cloud and collaboration platforms.. Supported DevOps automation, CI/CD integrations, version-controlled deployments, QA activities, and environment provisioning.. Worked with Infrastructure as Code concepts by documenting repeatable cloud deployment patterns, environment variables, access prerequisites, and deployment steps for development and QA environments.. Gained practical exposure to containerized application deployment concepts, including Docker/Kubernetes terminology, service dependencies, environment configuration, and deployment readiness checks.. Created technical documentation in English, onboarding guides, platform instructions, and developer references.. Coordinated team tasks as acting Scrum Master and supported occasional development activities using C#, Java, and MySQL knowledge.