TRACY RIVAS (he/him/his)
Seasoned IT & Security Leader
CAREER SUMMARY
Tracy is a highly skilled IT professional with over 17 years of international experience across diverse
industries, including MSP, BPO, health, finance, legal, high tech, manufacturing, power and utilities,
cybersecurity and information security,
gaming surveillance, physical intrusion and detection systems, lifestyle, F&B, retail, and app development.
With a strong background in enterprise infrastructure, information security, cloud computing, ITIL service value
systems, and corporate solution delivery, Tracy excels in translating technical language into common terms,
making complex concepts accessible to both technical and non-technical audiences. As a leader, Tracy directs and
governs company-wide systems, ensuring operational excellence and driving short and long-term business results,
while fostering a culture of innovation, forward-thinking, and efficiency within organizations.
Tracy's interpersonal skills and collaborative approach facilitate effective engagement with customers and
global stakeholders. With experience working in operational environments and alongside multi-disciplinary teams,
Tracy ensures seamless service delivery and a commitment to quality. Demonstrating a proven ability to deliver
improvements, enhance customer and business value through more efficient delivery, and reduce costs, Tracy
displays a dedication to continuous growth and progress. As an asset to any organization, Tracy fosters positive
change and teamwork, confidently leading large-scale transformational IT initiatives.
An ideal choice for companies seeking a highly skilled IT professional with a proven track record of success,
Tracy is eager to contribute and help organizations thrive. Passionate about IT and technological advancements,
Tracy constantly seeks ways to evolve and modernize systems and infrastructure, staying ahead of industry
developments. Tracy's employability is further enhanced by his ability to effectively collaborate with vendors,
envision success, and devise unique and efficient strategies to achieve it. This combination of skills and
experience positions Tracy as a rockstar IT leader, poised to drive success in any organization.
POWER SKILLS
- Strategic Vision, Business Acumen and Communication, Mentoring and Leadership Development, Cross-Functional
Collaboration, Digital Transformation, Stakeholder Management, Risk Management
- Self-Discipline, Self-awareness, Self-regulation, Relationship Building, Active Listening, Managing Up,
Decision
Making, Time Management, Remote Collaboration, Critical Thinking, Conflict Resolution
- Enterprise IT Strategy, Multi-Year Technology Roadmaps, Process Re-engineering, Multi-Cloud Computing
- IT Service Management, IT Operations Management, IT Project Management, Change Management, and ISMS
- Security and Risk Assessment, Vulnerability Assessment and PenTesting, Cyber Defense and Threat Hunting
- Business Continuity and Disaster Recovery, Vendor and Contract Management, Cost/Expense/Budget Reductions
- Adaptability to Change, Resilience, Cognitive Readiness, Emotional Maturity and Intelligence, Humility,
Empathy
TECHNICAL SKILLS and EXPERIENCE
ChatGPT, Google Gemini, Perplexity, Claude AI, GitHub Copilot, Microsoft Copilot, DeepSeek, and other AI tools
Modbus RTU, Modbus TCP/IP, MQTT, Internet of Things, and other tower operational technology components
Kali, CentOS, Ubuntu, Nmap, Wireshark, Nikto, Snort, OWASP ZAP, OSINT, Volatility, OpenVAS, Metasploit, Burp
Suite
Azure Active Directory, Microsoft Endpoint Manager (Intune), Salesforce, Vonage Contact Center, Vonage
Business Communications, AdvancedMD, Athena Health, Verint Monet Workforce Manager, SightCall, and Dragon
Medical One
ISO27001, HIPAA, HITRUST, PCI-DSS, SOC2, GDPR, APRA PPG/CPG 234, SANS CSC 20, CCPA, FISMA/FEDRAMP, COBIT,
OWASP Top 10, NIST 800-53,ACSC Strategies to Mitigate Cyber Security Incidents and other IT security
frameworks/standards
Cisco Routing and Switching, WAN, LAN, WLAN management, and enterprise IT infrastructure administration.
Adept in configuring and managing various servers, routers, switches, and firewalls.
Knowledgeable in Windows Server, VMWare, Hyper-V, VirtualBox, and other virtualization platforms
Proficient in managing and troubleshooting different IP-based CCTV megapixel camera brands and video
management software products, and other integrated physical security management software.
Managed different network monitoring and management tools, and other open-source monitoring platforms.
New Relic, LogicMonitor, Device42, ManageEngine Vulnerability Manager Plus, iTop, SolarWinds, QRadar, Nessus
Experienced in using different ITSM and CRM tools and systems i.e., Remedy, ClearQuest, Oracle Workflow,
Siebel, Atlassian Confluence and Atlassian Jira, Kayako, SugarCRM, HubSpot
Other tools includ Trello, Click Up, Asana, Monday.com, and the whole Zoho Suite
Proficient in MS Project, MS Visio, MSOffice Suite, Google Workspace, and other documentation and
productivity tools
CERTIFICATIONS (and training)
- The Linux Foundation DevOps IT Professional Program
- Official (ISC)² Certified Information Systems Security Professional (CISSP) Cert Prep Bootcamp
- Official (ISC)² Certified in Cybersecurity
- MITRE ATT&CK Cyber Threat Intelligence and Digital Forensics Masterclass | Forensic Science 2023
DFMC+™
- Coursera Penetration Testing, Incident Response, and Forensics
- KodeKloud Certificate in DevOps Pre-Requisite Course and Certificate in Learning Linux Basics Course
- TechiesCamp DevOps Engineer RoadMap Course & KodeKloud DevOps Learning Path
- The Definitive Governance, Risk, and Compliance Analyst Master Class
- Practical Ethical Hacking - The Complete Course – The Cyber Mentor - TCM Security
- Career Essentials in Project Management by Microsoft and LinkedIn
- Project Management Professional - PMP Exam Prep Seminar
- AZ-104 Microsoft Azure Administrator Exam Prep
- GuideM Cyber Defense, and Threat Hunting & GuideM Ethical Hacking, Vulnerability Assessment, and
Penetration Testing
- Webroot Business Endpoint Protection Technical Certification
- AZ-900: Microsoft Azure Fundamentals - Certification Number: H494-1454
- Management Strategy Institute - Project Management Essentials Certified - Certification Number: 55510742
- CertiProf Scrum Foundation Professional Certificate (SFPC) - Certification Number: CLVPQPFYPD-SSGSVZJQ
- ICSI | CNSS Certified Network Security Specialist
- Fortinet Network Security Expert 1 and 2
- Cisco Certified Network Professional – Switch | License 1816272880
- Cisco Certified Network Professional – Route | License 560836180
- ITIL® Foundation Certificate in IT Service Management | License 5132320.20308678
- Philippine Civil Service Commission Examination Passer (Professional) – April 25, 2010
PROFESSIONAL MEMBERSHIP
- Cloud Security Alliance, Philippine Society of IT Educators, CompTIA Instructors Network, CompTIA Managed
Services Community
PROFESSIONAL EXPERIENCE
AVP – Head of Cloud, Infrastructure, and Cybersecurity | Frontier Towers Associates Philippines
06/2024 – Present | Hybrid (4x RTO)
As the Head of the Cloud, Infrastructure, and Cybersecurity department at the Philippines' largest independent tower
leasing company, I oversee over 5,000 towers and spearhead developing and implementing IT infrastructure and operational
strategies to boost business capabilities and services across various regional offices nationwide. I ensure the delivery
of IT infrastructure and operations that support essential business functions, focusing on high availability,
performance, and cost-effective capacity management, all while prioritizing security. Working closely with senior
leadership, I craft the IT roadmap to align with the company's strategic goals and collaborate with the CIO and key
decision-makers to identify and implement economical IT solutions encompassing infrastructure, software, hardware,
networks, and security. I promote a cooperative IT culture by collecting insights and feedback from different
departments to improve IT services. Moreover, I provide strategic direction and oversight for IT systems' design,
development, and operation, including technical architecture, infrastructure engineering, and IT service support, while
offering sound technical guidance in critical situations. I supervise the development and support of desktop services to
ensure an excellent customer experience, alongside developing business case justifications and ROI-driven analyses for
IT infrastructure investment and initiatives. I emphasize building strong relationships with stakeholders and internal
and external partners to foster effective communication, collaboration, and strategic decision-making. I deliver
high-quality IT service and support by allocating the right tools and teams while managing and inspiring a
high-performing IT team that values innovation and continuous improvement. I also develop, review, and ensure the
effectiveness and efficiency of IT processes and policies, overseeing the design, implementation, and maintenance of
secure, scalable IT infrastructure nationwide. Lastly, I lead the creation and execution of a robust data security
strategy to guarantee compliance with all relevant regulations.
Achievements:
- New Offices Fit-out project - HQ in Alveo Park Triangle Tower and a Tower Operations Center in UP
TechnoHub
- Network Infra Buildout for the new offices -- 1GB redundant circuits, Cato SASE, Sophos firewalls, and
Rujie switches
stack
- Network Infra Upgrade of the warehouses and branch offices in Bulacan, Cebu, and Davao
- PCCW IoT Connect Edge SIM, CloudConnect, and Milesight router deployment to 5000 towers
- PCCW CloudRouter, GGP, AWS, and Azure cloud peering project
- Tenable Vulnerability Management Deployment with the infra-ops and cybersecurity teams
- JumpCloud Mobile Device Management deployment with the infra-ops and cybersecurity teams
- Jira IT Service Management improvement – streamlined ticketing dashboard and Kanban boards for daily
standups
- IT Asset Lifecycle Management improvement – refresh laptops older than three years of service
- Ongoing company website revamp project with the Commercial, Legal, and DevSecOps team
- External Penetration Testing and remediation of critical web and mobile applications with the DevSecOps
team
- Mobile Diesel Generator and Battery GPS Monitoring Project to address Diesel and Battery Theft Issues
- ERPNext migration from Digital Ocean to GCP & MS Dynamics365 Business Central storage migration to Azure
Blob
- Computerized Maintenance and Management Platform migration from AIO to PLC platform – point of contact for
tower
telecoms components hardware integration and network infrastructure configuration
IT Entrepreneur | 13th Octet and TUF-IT
12/2016 – Present | Fully Remote (freelance/side gig/weekend work only)
- One-man-band Managed IT Service Provider helping the small office-home office, and residential clients in
the San Jose City area and nearby cities and regions (13th Octet) and computer parts and
peripherals shop owner (TUF-IT)
- High-level technology consultant for other MSPs (local and overseas)
- Built the MSP managed services agreement, business canvas model, offering matrix, and MSP tool stack
for
a new MSP.
- (Contractor) IT Infrastructure and Information Security Architect and Cybersecurity Risk Assessment
program developer and project manager for cyber insurance compliance to align with industry best
practices
and regulatory requirements for ArisAlex, a Lafayette, Louisiana-based MSP
- Microsoft Partner Network, Cloud Solutions Provider, Pax8 Cloud Market Place, and Fortinet Partner
Portal setup.
- ConnectWise Manage, Automate, Control, and ITBoost implementation, and also set up Atera and SyncroMSP
for other MSPs.
- ConnectWise SIEM, ConnectWise Identify, Huntress, SentinelOne, Liongard, Auvik, and Todyl SASE
implementation.
- Okta to Duo MFA migration, LastPass to Keeper migration, JAMF to Intune migration, and Mimecast Email
Filter implementation.
- DISC (Disaster Recovery, Infrastructure, Security, Consolidation) project rollout.
- Chief Cloud Engineer & DevSecOps SME for mobile and web apps hosted in Azure.
IT Infrastructure Manager | IPSTAR Australia via Satellite Office
05/2023 – 03/2024 | Fully Remote
As the IT Infrastructure Manager at IPSTAR Australia, I have led the transformation and strategic oversight
of the
company's systems and network infrastructure lifecycle management. My comprehensive approach involves
meticulously
integrating and maintaining IT systems, ensuring seamless operation, and enhancing the organization's system
reliability, performance, and security. I have significantly improved the infrastructure's robustness and
efficiency by
implementing rigorous documentation and adhering to best practices in change management, patching, hardening,
and
upgrades. My role extends beyond technical oversight. I have cultivated a culture of excellence and
collaboration by
leading a team of skilled systems and network engineers, ensuring the seamless execution of operational tasks
and
strategic projects.
My expertise in server administration, including managing security permissions and analyzing event logs, has
been
pivotal in ensuring the interoperability of system architecture components. This, coupled with leading the
installation
and configuration of critical hardware and software, has substantially enhanced the organization's IT
infrastructure
capabilities. I have played a crucial role in troubleshooting and providing technical support. I worked
closely with
Level 2 and Level 3 service desks to identify root causes and deliver effective solutions, guaranteeing high
availability and performance of IT services. Furthermore, my strategic planning in reviewing systems,
networks, and
storage performance has led to optimized capacity planning and infrastructure modernization, crucially
supporting the
organization's growth by proactively anticipating and addressing future infrastructure needs.
Achievements:
- Led the Integration of Device42 and Jira Service Management: Spearheaded the successful integration
of Device42 with
Jira Service Management, significantly enhancing our IT service management capabilities. This strategic
initiative
provided our team with comprehensive insights into our IT infrastructure directly within our service
management
workflows. By leveraging the combined power of Device42's detailed asset management and Jira Service
Management's robust
service desk functionalities, I enabled the organization to achieve a more efficient, accurate, and
streamlined incident
and change management process.
- Optimized IT Asset Utilization: The integration improved our asset discovery processes, allowing us
to accurately
identify and catalog more devices. This enhanced visibility into our IT environment led to strategically
decommissioning
and deleting unused virtual machines, effectively recouping over 10TB of storage space. This achievement
optimized our
resource utilization, significantly reduced overhead costs, and improved our IT infrastructure's performance
and
reliability.
- Dramatically Reduced Vulnerabilities: Within a few months, I successfully reduced the vulnerability
count in
ManageEngine Vulnerability Manager Plus from 9,000 to 300. This achievement resulted from implementing a
rigorous and
strategic vulnerability management program that prioritized critical issues and streamlined patching. My
efforts
significantly enhanced the security posture of our IT infrastructure, mitigating potential threats and
vulnerabilities.
- Pioneered security team formation: I established the Security Operations Center and DevSecOps teams
to enhance the
organization's security framework. This initiative was crucial for incorporating security best practices
into our
development processes and operational oversight, ensuring that we deliver solutions securely to our clients.
By
promoting a culture of security awareness and collaboration between development and operations teams, I
cultivated a
robust, proactive security environment that safeguards client solutions against emerging threats.
Service Desk Manager | Techromatic Inc through Tahche Outsourcing Services
09/2020 – 04/2023 | Fully Remote
As a Technical Service Desk Manager for a New York-based MSP, I managed critical projects in a variety of
industries,
including healthcare, finance, legal, and real estate. Azure cloud migration, email migrations, server
installations,
and desktop management are all areas of expertise. I also led a technical team responsible for meeting SLAs
and
deadlines while providing an excellent customer experience. I also oversee technical support delivery while
maintaining
high service levels and serving as an escalation point for engineers.
In addition, I have served as an ISO 27001 co-implementer, a member of the Change Advisory Board,
a Change Management lead, and a Security and Risk Assessment Point-of-Contact. A Salesforce
Implementation and Administration team member, Vonage Business and Vonage Contact Center implementation lead,
and Verint Monet Workforce Operations Management System implementation lead. I also have strong knowledge and
experience with on-prem AD, Azure Active Directory, Microsoft Endpoint Manager (Intune), Microsoft Defender,
Microsoft 365, and other Microsoft technologies.
Notable achievements include:
- Developing reporting and dashboards to monitor KPIs and OKRs through trend analysis and improvement
initiatives.
- Reducing ticket backlog by 90% due to enhanced visibility of backlog and overdue tickets on Autotask PSA
and
Datto RMM dashboards.
- Reducing tech time in meetings by 90% through increased transparency and visibility on Autotask PSA and
Datto RMM dashboards.
- Improving tech utilization percentage to ~85% from ~50% by implementing workflow rules and automation in
the
system.
IT Operations Manager | imfree Inc, BGC, Taguig
08/2019 - 11/2020
As an IT Operations Manager for an Australian app development company, I focused on process streamlining and
innovation. I re-engineered IT processes, enhancing ITOM and ITSM workflows and increasing productivity.
Established IT governance and information security policies, guidelines, and procedures, and implemented a
technology and security roadmap to address advanced persistent threats.
Negotiated with vendors to accelerate service delivery and reduce costs, achieving the following measurable
results:
- Upgraded Internet bandwidth, lowering monthly cost from 20 Mbps at PHP62,000/month to 50 Mbps at
PHP55,000/month.
- Secured a redundancy line contract with reduced cost from 20 Mbps at PHP38,000/month to 30 Mbps at
PHP37,000/month.
- Obtained a significant discount on cable tracing and structured cabling, reducing the cost from PHP198,349
to PHP105,893.
- Upgraded network equipment to Enterprise-grade Cisco Meraki appliances at a reduced cost of PHP504,999
from
PHP715,500.
By canceling unused subscriptions and cleaning up inactive accounts, I achieved software cost savings,
including:
- Savings of US $4.95/month on Lucid Chart, US $29/month on LOOKBACK STARTER, US $79/month on Runscope, US
$100/month on PostmanPro, and €10/month on SonarCloud.
- Lowered the number of users on G Suite from 102 to 78, reducing the subscription amount from US $1,050.60
to
US $795.60/month.
In addition to cost-saving measures, I implemented technical improvements such as deploying a
Directory-as-a-Service system (JumpCloud) for MacOS device management and an IT Service Desk Ticket Management
System (Itarian Comodo). Furthermore, I also managed back-end setup for loyalty programs and partner promos,
as
well as administering AWS, Google Play Console, Google Cloud Platform, Firebase, Analytics, and various
DevSecOps tools i.e., Atlassian Jira, Confluence, BitBucket, Typeform, Jenkins, ELK stack
IT and Facilities Manager | Staff Domain, Ortigas
11/2018 – 7/2019
As an IT and Facilities Manager for an Australian BPO, I served as the point of contact for major IT and
facilities projects. These projects include new office fit-outs, data center buildouts, internet circuit
provisioning, structured cabling, rack mounting, and CCTV and DACS installation and configuration. I also set
up
and configured 100+ desktop PCs and NEC IP phones for the new office after the site handover.
Aside from these projects, I installed and managed a variety of IT tools and systems, including Datto RMM,
Autotask PSA, IT Glue documentation, and Auvik network monitoring. My expertise extends to Windows domain,
Office365, Teams, and Windows RDP management and administration.
Among other responsibilities are:
- Creating, developing, and implementing organizational policies, procedures, and best practices guides
- Ensuring the security of data, network access, disaster recovery, and backup systems in adherence to
organizational policy
- Conducting audits to identify problem areas and quickly coordinating strategic solutions with the
executive
leadership team
- Ensuring that safety and security protocols are followed, as well as conducting business continuity and
disaster recovery plans as needed
- Supervising equipment, supplies, and building maintenance to ensure compliance with health, safety, and
legal requirements, and ensuring the facility meets mandatory occupational health and safety standards.
Collaborating with various contractors to complete punch lists in response to deficiency audits performed by
external quality auditors.
IT Digital Transformation Leader and Network Admin | Vitarich, Marilao, Bulacan
4/2017 – 11/2017
As the contracted IT Digital Transformation Leader, I have successfully reduced the total IT infrastructure
and
ERP system upgrade project cost from 36 million to 32 million pesos. I oversee the company's IT infrastructure
to ensure security and optimum performance, review IT procurements for software and hardware, form trust with
IT
vendors and ISPs, and lead the execution of security hardening in compliance with Philippine laws, such as the
Data Privacy Act of 2012, Cybercrime Prevention Act of 2012, and The Philippines E-Commerce Law.
My notable achievements include:
- Reducing total IT infrastructure and ERP system upgrade project cost by 4 million pesos
- Successfully completing various IT projects, such as:
- New network equipment setup (Cisco 3850, 2960, Nexus 9k switches, and Fortinet FG200 and FG50 series
firewalls) to replace aged network equipment, new internet connectivity for sites without links, WAN
bandwidth upgrade, and structured cabling project nationwide.
- ERP system upgrade from Oracle R11i to Oracle R12
- Commissioning of New Active Directory Server as an upgrade from Windows NT Server
- Migration to Office365 from Lotus Notes using Binary Tree migration tool.
- Endpoint Security/Anti-virus deployment on all desktops, laptops, and other mobile devices
- DRAAS (Disaster Recovery as a Service) and BAAS (Backup as a Service) Business Continuity Management
project
- CCTV installation projects nationwide in compliance with the local Philippine National Police
ordinance
In addition to these accomplishments, I manage other IT staff within the organization and its sister
companies,
review CAPEX and OPEX for the IT team for the current and upcoming fiscal years, and report weekly status
reports and project updates to MAN-COM and EX-COM.
Cybersecurity Solutions Engineer | iboss Asia, Clark
11/2015 –11/2016
-
Technical pre- and post-sales subject matter expert for iboss Secure Web Gateway platform (advanced
threat
protection, granular app management, SSL management), and Threat Console platform (behavioral sandboxing
and
IPS, network anomaly detection, and incident response center)
Sr. Network Engineer | Accenture Philippines 1/2012 – 11/2015
-
Senior Network and Security Engineer for IS Telecom Italia Project and IT Infrastructure Expert - Data
Networking Technology Program
-
Senior Network Operations Engineer for Singapore's Ministry of Health Holdings' National Electronic
Health
Record Project
-
Network Implementation Engineer, Project Point-of-Contact, and Project Team Leader for several clients of
Verizon Enterprise Global Solutions Engineering and Design g., Bridgestone, ABN-AMRO, Marsh and McLennan,
Puma, Intercontinental Hotels Group, Johnson&Johnson, Johnson Controls International, Delphi
SPOC Helpdesk | TELUS International Philippines, Cubao 11/2010 –
12/2012
-
Single point of contact IT help desk for internal and outsourced TELUS employees
Technical Support Professional | Sykes Asia, Gilmore 8/2007 – 11/2010
-
Network Operations Center Tier 1.5 Engineer (AT&T Managed Network Services under the Managed Router
Service and Enhanced Virtual Private Network Service)
IT Instructor | The Lewis College, Sorsogon
6/2005 – 4/2006
-
IT Instructor for the College of Bachelor of Science in Information Technology and other students in the
Tertiary and Secondary levels
EDUCATION
- Bachelor’s Degree, Information Technology The Lewis College, Sorsogon City (a
LASSO/De La Salle Supervised School)
- Cisco Certified Network Associate Mapua Institute of Technology, Intramuros, Manila
Campus
CONTACT ME

Seasoned IT & Security Leader
CAREER SUMMARY
Tracy is a highly skilled IT professional with over 17 years of international experience across diverse industries, including MSP, BPO, health, finance, legal, high tech, manufacturing, power and utilities, cybersecurity and information security, gaming surveillance, physical intrusion and detection systems, lifestyle, F&B, retail, and app development. With a strong background in enterprise infrastructure, information security, cloud computing, ITIL service value systems, and corporate solution delivery, Tracy excels in translating technical language into common terms, making complex concepts accessible to both technical and non-technical audiences. As a leader, Tracy directs and governs company-wide systems, ensuring operational excellence and driving short and long-term business results, while fostering a culture of innovation, forward-thinking, and efficiency within organizations.
Tracy's interpersonal skills and collaborative approach facilitate effective engagement with customers and global stakeholders. With experience working in operational environments and alongside multi-disciplinary teams, Tracy ensures seamless service delivery and a commitment to quality. Demonstrating a proven ability to deliver improvements, enhance customer and business value through more efficient delivery, and reduce costs, Tracy displays a dedication to continuous growth and progress. As an asset to any organization, Tracy fosters positive change and teamwork, confidently leading large-scale transformational IT initiatives.
An ideal choice for companies seeking a highly skilled IT professional with a proven track record of success, Tracy is eager to contribute and help organizations thrive. Passionate about IT and technological advancements, Tracy constantly seeks ways to evolve and modernize systems and infrastructure, staying ahead of industry developments. Tracy's employability is further enhanced by his ability to effectively collaborate with vendors, envision success, and devise unique and efficient strategies to achieve it. This combination of skills and experience positions Tracy as a rockstar IT leader, poised to drive success in any organization.
POWER SKILLS
- Strategic Vision, Business Acumen and Communication, Mentoring and Leadership Development, Cross-Functional Collaboration, Digital Transformation, Stakeholder Management, Risk Management
- Self-Discipline, Self-awareness, Self-regulation, Relationship Building, Active Listening, Managing Up, Decision Making, Time Management, Remote Collaboration, Critical Thinking, Conflict Resolution
- Enterprise IT Strategy, Multi-Year Technology Roadmaps, Process Re-engineering, Multi-Cloud Computing
- IT Service Management, IT Operations Management, IT Project Management, Change Management, and ISMS
- Security and Risk Assessment, Vulnerability Assessment and PenTesting, Cyber Defense and Threat Hunting
- Business Continuity and Disaster Recovery, Vendor and Contract Management, Cost/Expense/Budget Reductions
- Adaptability to Change, Resilience, Cognitive Readiness, Emotional Maturity and Intelligence, Humility, Empathy
TECHNICAL SKILLS and EXPERIENCE
CERTIFICATIONS (and training)
- The Linux Foundation DevOps IT Professional Program
- Official (ISC)² Certified Information Systems Security Professional (CISSP) Cert Prep Bootcamp
- Official (ISC)² Certified in Cybersecurity
- MITRE ATT&CK Cyber Threat Intelligence and Digital Forensics Masterclass | Forensic Science 2023 DFMC+™
- Coursera Penetration Testing, Incident Response, and Forensics
- KodeKloud Certificate in DevOps Pre-Requisite Course and Certificate in Learning Linux Basics Course
- TechiesCamp DevOps Engineer RoadMap Course & KodeKloud DevOps Learning Path
- The Definitive Governance, Risk, and Compliance Analyst Master Class
- Practical Ethical Hacking - The Complete Course – The Cyber Mentor - TCM Security
- Career Essentials in Project Management by Microsoft and LinkedIn
- Project Management Professional - PMP Exam Prep Seminar
- AZ-104 Microsoft Azure Administrator Exam Prep
- GuideM Cyber Defense, and Threat Hunting & GuideM Ethical Hacking, Vulnerability Assessment, and Penetration Testing
- Webroot Business Endpoint Protection Technical Certification
- AZ-900: Microsoft Azure Fundamentals - Certification Number: H494-1454
- Management Strategy Institute - Project Management Essentials Certified - Certification Number: 55510742
- CertiProf Scrum Foundation Professional Certificate (SFPC) - Certification Number: CLVPQPFYPD-SSGSVZJQ
- ICSI | CNSS Certified Network Security Specialist
- Fortinet Network Security Expert 1 and 2
- Cisco Certified Network Professional – Switch | License 1816272880
- Cisco Certified Network Professional – Route | License 560836180
- ITIL® Foundation Certificate in IT Service Management | License 5132320.20308678
- Philippine Civil Service Commission Examination Passer (Professional) – April 25, 2010
PROFESSIONAL MEMBERSHIP
- Cloud Security Alliance, Philippine Society of IT Educators, CompTIA Instructors Network, CompTIA Managed Services Community
PROFESSIONAL EXPERIENCE
AVP – Head of Cloud, Infrastructure, and Cybersecurity | Frontier Towers Associates Philippines 06/2024 – Present | Hybrid (4x RTO)
As the Head of the Cloud, Infrastructure, and Cybersecurity department at the Philippines' largest independent tower leasing company, I oversee over 5,000 towers and spearhead developing and implementing IT infrastructure and operational strategies to boost business capabilities and services across various regional offices nationwide. I ensure the delivery of IT infrastructure and operations that support essential business functions, focusing on high availability, performance, and cost-effective capacity management, all while prioritizing security. Working closely with senior leadership, I craft the IT roadmap to align with the company's strategic goals and collaborate with the CIO and key decision-makers to identify and implement economical IT solutions encompassing infrastructure, software, hardware, networks, and security. I promote a cooperative IT culture by collecting insights and feedback from different departments to improve IT services. Moreover, I provide strategic direction and oversight for IT systems' design, development, and operation, including technical architecture, infrastructure engineering, and IT service support, while offering sound technical guidance in critical situations. I supervise the development and support of desktop services to ensure an excellent customer experience, alongside developing business case justifications and ROI-driven analyses for IT infrastructure investment and initiatives. I emphasize building strong relationships with stakeholders and internal and external partners to foster effective communication, collaboration, and strategic decision-making. I deliver high-quality IT service and support by allocating the right tools and teams while managing and inspiring a high-performing IT team that values innovation and continuous improvement. I also develop, review, and ensure the effectiveness and efficiency of IT processes and policies, overseeing the design, implementation, and maintenance of secure, scalable IT infrastructure nationwide. Lastly, I lead the creation and execution of a robust data security strategy to guarantee compliance with all relevant regulations.
Achievements:
- New Offices Fit-out project - HQ in Alveo Park Triangle Tower and a Tower Operations Center in UP TechnoHub
- Network Infra Buildout for the new offices -- 1GB redundant circuits, Cato SASE, Sophos firewalls, and Rujie switches stack
- Network Infra Upgrade of the warehouses and branch offices in Bulacan, Cebu, and Davao
- PCCW IoT Connect Edge SIM, CloudConnect, and Milesight router deployment to 5000 towers
- PCCW CloudRouter, GGP, AWS, and Azure cloud peering project
- Tenable Vulnerability Management Deployment with the infra-ops and cybersecurity teams
- JumpCloud Mobile Device Management deployment with the infra-ops and cybersecurity teams
- Jira IT Service Management improvement – streamlined ticketing dashboard and Kanban boards for daily standups
- IT Asset Lifecycle Management improvement – refresh laptops older than three years of service
- Ongoing company website revamp project with the Commercial, Legal, and DevSecOps team
- External Penetration Testing and remediation of critical web and mobile applications with the DevSecOps team
- Mobile Diesel Generator and Battery GPS Monitoring Project to address Diesel and Battery Theft Issues
- ERPNext migration from Digital Ocean to GCP & MS Dynamics365 Business Central storage migration to Azure Blob
- Computerized Maintenance and Management Platform migration from AIO to PLC platform – point of contact for tower telecoms components hardware integration and network infrastructure configuration
IT Entrepreneur | 13th Octet and TUF-IT 12/2016 – Present | Fully Remote (freelance/side gig/weekend work only)
- One-man-band Managed IT Service Provider helping the small office-home office, and residential clients in the San Jose City area and nearby cities and regions (13th Octet) and computer parts and peripherals shop owner (TUF-IT)
- High-level technology consultant for other MSPs (local and overseas)
- Built the MSP managed services agreement, business canvas model, offering matrix, and MSP tool stack for a new MSP.
- (Contractor) IT Infrastructure and Information Security Architect and Cybersecurity Risk Assessment program developer and project manager for cyber insurance compliance to align with industry best practices and regulatory requirements for ArisAlex, a Lafayette, Louisiana-based MSP
- Microsoft Partner Network, Cloud Solutions Provider, Pax8 Cloud Market Place, and Fortinet Partner Portal setup.
- ConnectWise Manage, Automate, Control, and ITBoost implementation, and also set up Atera and SyncroMSP for other MSPs.
- ConnectWise SIEM, ConnectWise Identify, Huntress, SentinelOne, Liongard, Auvik, and Todyl SASE implementation.
- Okta to Duo MFA migration, LastPass to Keeper migration, JAMF to Intune migration, and Mimecast Email Filter implementation.
- DISC (Disaster Recovery, Infrastructure, Security, Consolidation) project rollout.
- Chief Cloud Engineer & DevSecOps SME for mobile and web apps hosted in Azure.
IT Infrastructure Manager | IPSTAR Australia via Satellite Office 05/2023 – 03/2024 | Fully Remote
As the IT Infrastructure Manager at IPSTAR Australia, I have led the transformation and strategic oversight of the company's systems and network infrastructure lifecycle management. My comprehensive approach involves meticulously integrating and maintaining IT systems, ensuring seamless operation, and enhancing the organization's system reliability, performance, and security. I have significantly improved the infrastructure's robustness and efficiency by implementing rigorous documentation and adhering to best practices in change management, patching, hardening, and upgrades. My role extends beyond technical oversight. I have cultivated a culture of excellence and collaboration by leading a team of skilled systems and network engineers, ensuring the seamless execution of operational tasks and strategic projects.
My expertise in server administration, including managing security permissions and analyzing event logs, has been pivotal in ensuring the interoperability of system architecture components. This, coupled with leading the installation and configuration of critical hardware and software, has substantially enhanced the organization's IT infrastructure capabilities. I have played a crucial role in troubleshooting and providing technical support. I worked closely with Level 2 and Level 3 service desks to identify root causes and deliver effective solutions, guaranteeing high availability and performance of IT services. Furthermore, my strategic planning in reviewing systems, networks, and storage performance has led to optimized capacity planning and infrastructure modernization, crucially supporting the organization's growth by proactively anticipating and addressing future infrastructure needs.
Achievements:
- Led the Integration of Device42 and Jira Service Management: Spearheaded the successful integration of Device42 with Jira Service Management, significantly enhancing our IT service management capabilities. This strategic initiative provided our team with comprehensive insights into our IT infrastructure directly within our service management workflows. By leveraging the combined power of Device42's detailed asset management and Jira Service Management's robust service desk functionalities, I enabled the organization to achieve a more efficient, accurate, and streamlined incident and change management process.
- Optimized IT Asset Utilization: The integration improved our asset discovery processes, allowing us to accurately identify and catalog more devices. This enhanced visibility into our IT environment led to strategically decommissioning and deleting unused virtual machines, effectively recouping over 10TB of storage space. This achievement optimized our resource utilization, significantly reduced overhead costs, and improved our IT infrastructure's performance and reliability.
- Dramatically Reduced Vulnerabilities: Within a few months, I successfully reduced the vulnerability count in ManageEngine Vulnerability Manager Plus from 9,000 to 300. This achievement resulted from implementing a rigorous and strategic vulnerability management program that prioritized critical issues and streamlined patching. My efforts significantly enhanced the security posture of our IT infrastructure, mitigating potential threats and vulnerabilities.
- Pioneered security team formation: I established the Security Operations Center and DevSecOps teams to enhance the organization's security framework. This initiative was crucial for incorporating security best practices into our development processes and operational oversight, ensuring that we deliver solutions securely to our clients. By promoting a culture of security awareness and collaboration between development and operations teams, I cultivated a robust, proactive security environment that safeguards client solutions against emerging threats.
Service Desk Manager | Techromatic Inc through Tahche Outsourcing Services 09/2020 – 04/2023 | Fully Remote
As a Technical Service Desk Manager for a New York-based MSP, I managed critical projects in a variety of industries, including healthcare, finance, legal, and real estate. Azure cloud migration, email migrations, server installations, and desktop management are all areas of expertise. I also led a technical team responsible for meeting SLAs and deadlines while providing an excellent customer experience. I also oversee technical support delivery while maintaining high service levels and serving as an escalation point for engineers.
In addition, I have served as an ISO 27001 co-implementer, a member of the Change Advisory Board, a Change Management lead, and a Security and Risk Assessment Point-of-Contact. A Salesforce Implementation and Administration team member, Vonage Business and Vonage Contact Center implementation lead, and Verint Monet Workforce Operations Management System implementation lead. I also have strong knowledge and experience with on-prem AD, Azure Active Directory, Microsoft Endpoint Manager (Intune), Microsoft Defender, Microsoft 365, and other Microsoft technologies.
Notable achievements include:
- Developing reporting and dashboards to monitor KPIs and OKRs through trend analysis and improvement initiatives.
- Reducing ticket backlog by 90% due to enhanced visibility of backlog and overdue tickets on Autotask PSA and Datto RMM dashboards.
- Reducing tech time in meetings by 90% through increased transparency and visibility on Autotask PSA and Datto RMM dashboards.
- Improving tech utilization percentage to ~85% from ~50% by implementing workflow rules and automation in the system.
IT Operations Manager | imfree Inc, BGC, Taguig 08/2019 - 11/2020
As an IT Operations Manager for an Australian app development company, I focused on process streamlining and innovation. I re-engineered IT processes, enhancing ITOM and ITSM workflows and increasing productivity. Established IT governance and information security policies, guidelines, and procedures, and implemented a technology and security roadmap to address advanced persistent threats.
Negotiated with vendors to accelerate service delivery and reduce costs, achieving the following measurable results:
- Upgraded Internet bandwidth, lowering monthly cost from 20 Mbps at PHP62,000/month to 50 Mbps at PHP55,000/month.
- Secured a redundancy line contract with reduced cost from 20 Mbps at PHP38,000/month to 30 Mbps at PHP37,000/month.
- Obtained a significant discount on cable tracing and structured cabling, reducing the cost from PHP198,349 to PHP105,893.
- Upgraded network equipment to Enterprise-grade Cisco Meraki appliances at a reduced cost of PHP504,999 from PHP715,500.
By canceling unused subscriptions and cleaning up inactive accounts, I achieved software cost savings, including:
- Savings of US $4.95/month on Lucid Chart, US $29/month on LOOKBACK STARTER, US $79/month on Runscope, US $100/month on PostmanPro, and €10/month on SonarCloud.
- Lowered the number of users on G Suite from 102 to 78, reducing the subscription amount from US $1,050.60 to US $795.60/month.
In addition to cost-saving measures, I implemented technical improvements such as deploying a Directory-as-a-Service system (JumpCloud) for MacOS device management and an IT Service Desk Ticket Management System (Itarian Comodo). Furthermore, I also managed back-end setup for loyalty programs and partner promos, as well as administering AWS, Google Play Console, Google Cloud Platform, Firebase, Analytics, and various DevSecOps tools i.e., Atlassian Jira, Confluence, BitBucket, Typeform, Jenkins, ELK stack
IT and Facilities Manager | Staff Domain, Ortigas 11/2018 – 7/2019
As an IT and Facilities Manager for an Australian BPO, I served as the point of contact for major IT and facilities projects. These projects include new office fit-outs, data center buildouts, internet circuit provisioning, structured cabling, rack mounting, and CCTV and DACS installation and configuration. I also set up and configured 100+ desktop PCs and NEC IP phones for the new office after the site handover.
Aside from these projects, I installed and managed a variety of IT tools and systems, including Datto RMM, Autotask PSA, IT Glue documentation, and Auvik network monitoring. My expertise extends to Windows domain, Office365, Teams, and Windows RDP management and administration.
Among other responsibilities are:
- Creating, developing, and implementing organizational policies, procedures, and best practices guides
- Ensuring the security of data, network access, disaster recovery, and backup systems in adherence to organizational policy
- Conducting audits to identify problem areas and quickly coordinating strategic solutions with the executive leadership team
- Ensuring that safety and security protocols are followed, as well as conducting business continuity and disaster recovery plans as needed
- Supervising equipment, supplies, and building maintenance to ensure compliance with health, safety, and legal requirements, and ensuring the facility meets mandatory occupational health and safety standards.
Collaborating with various contractors to complete punch lists in response to deficiency audits performed by external quality auditors.
IT Digital Transformation Leader and Network Admin | Vitarich, Marilao, Bulacan 4/2017 – 11/2017
As the contracted IT Digital Transformation Leader, I have successfully reduced the total IT infrastructure and ERP system upgrade project cost from 36 million to 32 million pesos. I oversee the company's IT infrastructure to ensure security and optimum performance, review IT procurements for software and hardware, form trust with IT vendors and ISPs, and lead the execution of security hardening in compliance with Philippine laws, such as the Data Privacy Act of 2012, Cybercrime Prevention Act of 2012, and The Philippines E-Commerce Law.
My notable achievements include:
- Reducing total IT infrastructure and ERP system upgrade project cost by 4 million pesos
- Successfully completing various IT projects, such as:
- New network equipment setup (Cisco 3850, 2960, Nexus 9k switches, and Fortinet FG200 and FG50 series firewalls) to replace aged network equipment, new internet connectivity for sites without links, WAN bandwidth upgrade, and structured cabling project nationwide.
- ERP system upgrade from Oracle R11i to Oracle R12
- Commissioning of New Active Directory Server as an upgrade from Windows NT Server
- Migration to Office365 from Lotus Notes using Binary Tree migration tool.
- Endpoint Security/Anti-virus deployment on all desktops, laptops, and other mobile devices
- DRAAS (Disaster Recovery as a Service) and BAAS (Backup as a Service) Business Continuity Management project
- CCTV installation projects nationwide in compliance with the local Philippine National Police ordinance
In addition to these accomplishments, I manage other IT staff within the organization and its sister companies, review CAPEX and OPEX for the IT team for the current and upcoming fiscal years, and report weekly status reports and project updates to MAN-COM and EX-COM.
Cybersecurity Solutions Engineer | iboss Asia, Clark 11/2015 –11/2016
-
Technical pre- and post-sales subject matter expert for iboss Secure Web Gateway platform (advanced threat protection, granular app management, SSL management), and Threat Console platform (behavioral sandboxing and IPS, network anomaly detection, and incident response center)
Sr. Network Engineer | Accenture Philippines 1/2012 – 11/2015
-
Senior Network and Security Engineer for IS Telecom Italia Project and IT Infrastructure Expert - Data Networking Technology Program
-
Senior Network Operations Engineer for Singapore's Ministry of Health Holdings' National Electronic Health Record Project
-
Network Implementation Engineer, Project Point-of-Contact, and Project Team Leader for several clients of Verizon Enterprise Global Solutions Engineering and Design g., Bridgestone, ABN-AMRO, Marsh and McLennan, Puma, Intercontinental Hotels Group, Johnson&Johnson, Johnson Controls International, Delphi
SPOC Helpdesk | TELUS International Philippines, Cubao 11/2010 – 12/2012
-
Single point of contact IT help desk for internal and outsourced TELUS employees
Technical Support Professional | Sykes Asia, Gilmore 8/2007 – 11/2010
-
Network Operations Center Tier 1.5 Engineer (AT&T Managed Network Services under the Managed Router Service and Enhanced Virtual Private Network Service)
IT Instructor | The Lewis College, Sorsogon 6/2005 – 4/2006
-
IT Instructor for the College of Bachelor of Science in Information Technology and other students in the Tertiary and Secondary levels
- Bachelor’s Degree, Information Technology The Lewis College, Sorsogon City (a LASSO/De La Salle Supervised School)
- Cisco Certified Network Associate Mapua Institute of Technology, Intramuros, Manila Campus