I design, build, and secure the systems and solutions that IT teams rely on — from infrastructure and identity architecture, through automation and integration, to the full-stack applications end users touch every day.
Most tickets aren't really about the ticket. A slow login is a Conditional Access policy fighting a stale token.
A "the app is broken" complaint is an SSL inspection profile silently breaking an OAuth handshake.
A recurring password reset is a symptom of an identity architecture that was never designed with least privilege in mind.
Surface-level fixes buy time; root-cause fixes buy it back.
That's the throughline across identity and security (Entra ID, Conditional Access, PIM, Intune, Purview, Zero Trust),
infrastructure (Windows Server, Active Directory, virtualization, networking, VoIP, and physical security systems),
and the data and automation layer that ties it all together (Power Platform, Power BI, RPA, and full-stack development
across SQL, Python, PowerShell, and modern web stacks). Each domain is a different vantage point on the same discipline:
trace the symptom back to its structural cause, then engineer a fix that holds — not one that reappears next quarter.
That approach extends naturally into AI and intelligent automation — Copilot, RAG-based agents, LLM-driven workflows, and
governance frameworks that keep them accountable — because the same question applies: is this tool solving the actual
bottleneck, or just making the workaround faster? Paired with DevOps practices (CI/CD, IaC, containerization)
that make fixes repeatable and auditable rather than one-off patches, the goal stays constant:
fewer recurring fires, more permanent solutions.
Design and ship alt1060, a real-time messaging app, from frontend to backend to infrastructure.
Direct operational engineering and security strategy across global EUC platforms — Intune (configuration profiles, Windows Autopilot, MDM/MAM, application deployment and lifecycle management), Microsoft Defender for Endpoint (including advanced threat hunting), Windows Update for Business, Conditional Access policies, and Privileged Identity Management (PIM) — coordinating with EUC Operations and InfoSec leadership to prioritize and deliver security improvement initiatives across the global endpoint estate.
Oversee investigation and remediation of vulnerabilities at scale across Windows, macOS, iOS, Azure Virtual Desktop, and M365 endpoints, ensuring smooth execution of monthly patch cycles and driving maturity of patch/vulnerability management processes.
Manage workstation compliance against security controls and industry benchmarks, overseeing pen test cycles and audit readiness, providing data/evidence to internal and external audit teams.
Deliver executive-level reporting on the global workstation estate against security SLAs/KPIs, and directed the production of technical documentation and training materials for the wider organization.
Designed and maintained core IT infrastructure — servers (Windows/Linux), Active Directory, DNS/DHCP/GPO, storage, virtualization, and hybrid cloud environments (Azure/AWS) — alongside backup, patching, and firmware management.
Deployed and managed VoIP (3CX: SIP trunks, extensions, IVRs), networking (Ubiquiti UniFi: VLANs, SSIDs, VPNs, firewalls, site-to-site links), and IP-based CCTV/VMS systems (NVRs, DW Spectrum) covering provisioning, retention, and remote access.
Implemented cybersecurity controls and endpoint protection, and provided Tier 2/Tier 3 troubleshooting across infrastructure, network, VoIP, and CCTV systems.
Managed core Microsoft 365 services (Exchange Online, SharePoint, Teams, OneDrive, Entra ID, Intune, Purview, Defender for Office 365) as primary contact for 220 clients across 260+ tenants and 4,000+ end users, including identity/access governance, security policy configuration, and threat remediation.
Governed Entra ID app registrations and service principals for AI/system integrations (Claude, AvePoint Fly, QuickFortify), scoping API permissions and enforcing OAuth2/Application Access Policy controls.
Built automated solutions with Power Platform (Power Apps, Power Automate, Power BI) and PowerShell for onboarding/offboarding, license provisioning, and recurring admin tasks, and delivered client-facing dashboards translating technical metrics into business terms.
Directed and coached cross-functional IT teams as a strategic partner to senior leadership — pioneering the Philippine data center build-out and spearheading the pandemic-era WFH rollout of production apps and services.
Owned SLA performance and root-cause resolution across multiple production systems end to end, from incident response through people management — hiring, coaching, and evaluating talent while reporting into IT management and the Senior Leadership Team.
Turned that operational depth into measurable innovation, architecting RPA solutions across SharePoint, Power Apps, Power Automate, and UiPath — including SARSA, an automated asset-tracking and retrieval system, plus automated exit-clearance and compliance-acknowledgment workflows — that saved the business roughly 34,000 hours of manual work in two years.
Led global IT initiatives spanning Asia-Pacific (Philippines, India, China), North America, Latin America, and Europe — delivering eight-figure annual savings and bringing onshore infrastructure to the Asia-Pacific region.
Delivered end-to-end enterprise IT support — desktop, server, LAN, telephony, and PBX — across 6,000+ seats at Megamall, Robinsons, and Alabang sites, while owning Active Directory and DHCP administration, Group Policy and SCCM software/patch deployment.
Drove real-time workforce management and reporting for a multi-LOB contact center floor — forecasting staffing 3 months out, monitoring live queue performance, and delivering automation in maintaining service level agreements.
Credential ID E6H714-F96A01
A real-time messaging app built from scratch — group chats, DMs, typing indicators, read receipts, and reactions, with sign-in via Google or Microsoft.
Infrastructure, identity and security posture, or your next build — happy to talk through any of it.
lmjimena@wizzzsolutions.com