Director of IT · Senior Systems Administrator · San Jose, CA
20+ years building, securing, and operating enterprise infrastructure across Linux, Windows, and hybrid cloud. Most recently: 200+ users · 250+ servers · USA / Canada / Europe — on-prem, Azure, and OCI. I don't just manage IT — I build it.
| 🖥 250+ server hybrid environment | On-prem Windows/Linux + Azure + OCI, administered end-to-end |
| 👥 200+ users across 3 countries | USA, Canada, Europe — full IT and security ownership |
| 🛡 PCI DSS 4.0.1 — full certification | Gap analysis → remediation → audit completion; ~60% faster with automation |
| 📊 Full observability stack | Prometheus · Grafana · Alertmanager · Loki · cAdvisor · Node Exporter |
| 🔐 CIS Benchmark automation | Scripted Level 1+2 hardening and audit for Ubuntu, Debian, RHEL families |
| 🗄 Multi-engine DB toolkit | SQL Server 2022 · MySQL 8 · PostgreSQL 16 — health checks, audits, S3 backup |
| 🤖 Primary Defender admin | Endpoint protection, device onboarding, Intune security baselines |
| Repo | Description |
|---|---|
| prometheus-grafana-stack | Full Prometheus + Grafana + Alertmanager + Loki + cAdvisor stack. Docker Compose + bare metal installer. Telegram alerting. |
| linux-cis-audit | CIS Benchmark Level 1+2 audit and remediation — Ubuntu/Debian and RHEL/Alma/Rocky. Markdown pass/fail reports. |
| linux-server-onboarding-baseline | Production-ready Linux baseline with hardening, rootkit scanning (rkhunter/chkrootkit), and SMTP reporting. |
| linux-auto-debug | Automated Linux diagnostic toolkit for rapid production troubleshooting. |
| Secure-Windows-Baseline-Framework | PowerShell-based Windows Server hardening aligned to CIS Benchmarks. |
| Repo | Description |
|---|---|
| db-admin-toolkit | SQL Server 2022 · MySQL 8 · PostgreSQL 16 — health checks, user audits, slow query analysis, backup/restore with S3 support. |
| Repo | Description |
|---|---|
| pci-dss-certification-automation | PowerShell automation for PCI DSS 4.0.1 gap analysis, evidence collection, and audit reporting. |
| pci-dss-evidence-assistant | AI-powered PCI DSS v4.0.1 documentation workflow — prompts, templates, and compliance tracker. |
| m365-cis-assessor | Automated M365 security assessment aligned to CIS M365 Foundations Benchmark v6.0.1. |
| email-authentication-audit-toolkit | SPF, DKIM, and DMARC audit toolkit with DNS validation scripts and deliverability troubleshooting. |
| Repo | Description |
|---|---|
| azure-it-admin-baseline | Azure infrastructure and Entra ID identity baseline for enterprise IT environments. |
| m365-intune-device-management-baseline | Intune device compliance policies, security baselines, and endpoint hardening for Windows 11. |
| it-ops-control-center | FastAPI + Prometheus/Grafana unified operations dashboard. |
| Repo | Description |
|---|---|
| case-studies | Real-world IT scenarios: PCI DSS evidence automation, 1-click onboarding/offboarding, SOC visibility with Wazuh + Prometheus. |