Javier Santiago Florez

As IT Operations Engineer, I lead remote IT operations across Colombia, Peru, and Mexico — designing and managing scalable infrastructure, automation, and security practices in a multi-country, remote-first environment. I’m passionate about building IT solutions that empower people, simplify processes, and enable secure remote work at scale. 💡Key Responsibilities & Achievements: - Led the full deployment of GLPI (ITSM) in Azure — built from scratch, multi-entity setup, LDAP integration, API automation, and ITIL-based workflows. - Designed and implemented Microsoft Intune & Autopilot for Windows, MacOS & Mobile — enabling MDM, compliance policies, software deployment, and zero-touch provisioning. - Deployed & manage Windows 365 Cloud PC infrastructure for secure and flexible remote access across teams. - Built centralized WiFi infrastructure with UniFi Controller, allowing remote management of wireless networks across all company offices. - Developed AI-powered GPTs & Google GEMs to automate daily IT tasks, internal support, documentation generation, and operational processes. - Automated repetitive IT operations using Python, PowerShell, and Bash. - Created and maintained internal IT documentation covering onboarding/offboarding, DRP, security policies, provisioning standards, infrastructure diagrams, and best practices. - Implemented security controls using Microsoft Security Center & Defender for Endpoint, including device compliance, vulnerability management, and proactive monitoring. 🔐 ISO/IEC 27001 Certification Actively supported the company’s successful ISO/IEC 27001 certification, contributing to IT operational controls, access management, asset traceability, device compliance, documentation, and audit readiness. ⚙️ Focused on remote-first IT leadership, operational efficiency, automation, and delivering secure & scalable solutions across regions.

- Designed and delivered automation scripts and workflows to reduce manual operational tasks across IT environments. - Developed Python, PowerShell, and Bash scripts for system administration, data processing, reporting, and process optimization. Created technical documentation and architecture guides to support system scalability, maintainability, and operational continuity. - Conducted technical audits and configuration reviews focused on security, performance, and compliance best practices. - Built process automation prototypes leveraging APIs, integrations, and low-code tooling to improve operational efficiency. - Delivered technical training and enablement sessions on automation, system administration, and IT best practices. - Executed closed-scope technical projects with clearly defined deliverables, timelines, and outcomes.

- Managed Identity Management platform, centralizing IT administration. - Crafted IAM rules to automate access based on roles and departments. - Audited distribution lists, refining structure with department head insights. - Acted as liaison for software acquisitions and vendor transitions. - Deployed hybrid AD and configured a new MDM, setting Conditional Access by device integrity, OS, and IP. - Partook in the security task force, addressing breaches with immediate action and preventative strategies. - Addressed Level 2-3 user and client support issues. - Led the antivirus rollout across the company’s infrastructure to enhance asset security. - Directed interdepartmental reviews of new software to bolster secure, structured infrastructure. - Prepared for compliance oversight by reviewing and adjusting access permissions. - Established document tagging for categorization by sensitivity and confidentiality. - Authored scripts (PS1, bat, exe, vbs, sh, bash, py) for system-wide deployment via MDM and GPO. - Implemented WSUS to ensure up-to-date Windows devices. - Set up VMs in VPS as DC, DNS, AD, NPAS servers, augmenting internal infrastructure. - Produced security practice videos, educating on phishing, smishing, and social engineering. - Slack to Microsoft Teams migration, including user training. Achievements: - Migrated IAM from OKTA to Microsoft Entra, integrating AD Forest fully. - Initiated connection agents, harmonizing API, SAML, SSO, OAuth platform sync. - Created dynamic groups, custom fields for app synchronization. - Transitioned email hosting from cPanel to Microsoft, scripting domain authentication and inbox migration. - Implemented autopilot and Intune, linking Apple Business Manager for app management. - Devised device configuration scripts for admin accounts, security policies, VPNs. - Deployed WiFi Radius with Unifi and Fortinet, configuring a radius server, network policies, and a guest portal.

• Field support for any escalated software or hardware related matters. Serving as a link between all the different areas of the IT team. • Inventory management and in charge of migrating the current asset management and ticket system to a newer system. Mapping all the processes, categories and SLAs within the current system in order to plan the migration and improve all the processes and traceability for the new tool to implement. • Direct responsible for assisting new client implementations. Which includes but is not limited to: assisting to client meetings, new systems testing, checking that the image to be deployed complies with the company’s InfoSec standards, following through with all the different departments, imaging test pcs, etc. • Massive new images deployment via MDT servers for new clients or current clients. Assist and plan preventive maintenance of data centers, access control systems, video surveillance systems, PCs. • Vendor management and direct relation in order to negotiate the acquisition of new equipment, maintenance, follow up on non-executed or in course contracts, create new vendor agreements. • Serve as site IT leader with direct contact with the corporate office in order to keep the site’s standard aligned with the corporation’s standards. • In charge of onboarding of new executives which include assigning laptops, cell phones and all the required devices for their role. • Microsoft Active Directory management. • DHCP management. • Remote support to end users both for work from home and onsite. Assisting with basic troubleshooting to massive issues which include team calls in order to coordinate with all the IT areas a fast solution. • New employees onboarding and providing guidance to make their new role as easy as possible. • In charge of submitting Purchase Requests and following through with procurement in order to get the most cost effective solution to the requisition.

The STS’ main responsibility is to maintain, upgrade and manage our software, hardware and networks. Resourcefulness is a necessary skill in this role. The STS also serves as the primary Windows Systems Administrator (Microsoft); therefore is responsible for installing, managing, and upgrading Windows-based systems and servers within the company. Responsible for managing data security, configuring user access, and maintaining the stability of the system. Responsible for documenting, archiving and sharing all details relevant to each process they have direct contact with, in order to facilitate collaboration and continuity. Key Duties & Responsibilities • Serve as primary system administrator for all Microsoft services • Managing all tasks related to the Org-wide migration from Google to the Microsoft environment • Structure and manage user access making sure data is secure • Doing analytical comparisons of the operational effectiveness, suitability, and lifecycle cost of technology alternatives • Help develop the corporate Helpdesk platform aiming at streamlining Microsoftrelated support • As part of the Scrum Team, the TS must attend all ceremonies • Develop training materials and provide training and support for all Microsoft users • Leveraging project management tools to document operational processes and best practices regarding each platform’s administration • Align with potential and existing customers on specific integration needs • Provide tier II & III tech support for Microsoft users and all other associated technology.

• Call calling in order to introduce the company services to the possible clients. • Follow up to each client from business capture to final payment. TMS usage in order to load the information of the client, carriers and loads made. • Set up all logistics for inland trucking and intermodal services from the searching of the truck to the quotation of the customs of import and export services. • Follow up on a team of 20 freight brokers in order to help them achieve their goals and get their call calling process to a closure. • Assist special clients on looking for their specific transportation requirements and give the extra mile to have them satisfied on the whole service. • Do email follow up on a daily basis in order to continue to generate business to the company and profit out of it. • Assist to meetings on site with clients being this local or international meetings.

• Administrator of Active Directory, GPO, Domain controller and update any of them whenever requested • Network administrator. Includes Cisco Switch programming, Vlans creation, Access list setup, Trunk creation, Voice Vlans, Secure ports, etc. • Firewall administrator. All the information security setup in the company was made by me starting from the Meraki MX84 programming, link setup and Policies implementation. Whitelisting and website analysis in order to block/unblock whatever was needed. • Software Updates deployment via GPO. • VM configuration via VMWare server, configuration and installation. • Structural cabling assisted whenever required. • Purchase advisor on any matter related to IT or Facilities. Managed providers and public services expenses. • Project planning and implementation. Built a new site from cero. • PC programming, erase, OS installation (Windows, Linux). • Windows Registry edition in order to correct any possible error presented. • Mac tech support. • Penetration tests performed on our own network to ensure complete security. • Assisted clients on any Tech requirements. • Access control configuration and installation. • Personnel management. Mostly providers on whatever matter the company required.

• Maintenance coordination handling providers and certain maintenance activities when needed. • Request, review and presentation of quotes according to need. • Planning and decision process optimization. • Public services reports, follow up and planning on costs reduction. • Reports presentation of purchases made and / or pending to be made. • Procurement of suppliers in order to meet the indicated needs. • Mobile phone support, management, app support and enterprise plan management. • SharePoint designer administrator and developer. • Team Management, giving up feedback on a daily basis to a group of people. • Project planation. • Administrative support, bills management, reporting, several meeting taken within the week. • Information and technologies security member, providing guidance to every user on what kind of behaviors are not admitted within the company, taking care of several security risks reported myself or any member of my team.

• Set up and configured hardware and software on company equipment • Restored data, operating systems, files, documents and drivers. • Resolve computer hardware and software, printing, installation, word processing, email and operating systems issues. • Install software including Windows 7, 8, 8.1 and 10, Linux, Ubuntu, Microsoft Office Packages, Adobe reader, Java, all basic Software required by a computer, CMS, Nice IEX, Nomus, etc.