Sr. Infrastructure Architect - Manulife Data Services Inc. - Full-time Remote
(2021-01)
SME / Level 3 POC for Active Directory and Entra ID across Asia; member of the Global CyberSecurity Team.
- Service owner for Active Directory, domain controllers, DNS, GPO, Entra ID, MFA, ADFS, Quest RMAD (Recovery Manager for AD) and Quest Change Auditor.
- Plan, design, install, configure and maintain AD infrastructure; lead domain controller migrations, sizing, optimization and schema extensions/upgrades.
- Develop and deploy Windows Server hardening policies based on Qualys recommendations; present production changes in CAB and follow ITIL change management processes (CR creation for UAT and production).
- Conduct Active Directory troubleshooting, RCA and incident reporting; author and maintain technical documentation and project proposals to improve processes and operations.
- Collaborate with Wintel, Network, Application teams and vendors; manage daily requests and incidents via ServiceNow and participate in disaster recovery activities.
IT Security Administrator - Citco International Support Services Philippines Inc. ROHQ
(2017-08 - 2020-12)
SME and Level 3 support as a member of the Citco IT Security Global Team; service owner for Active Directory, Domain Controllers, RMAD (Forest Recovery) and Quest Spotlight/Active Administrator.
- Planned, designed, installed and maintained Active Directory environments; led migrations, schema upgrades, DNS and Group Policy management.
- Developed and enforced server and endpoint hardening policies based on CIS benchmarks for Windows Server, Windows 10, MS Office and browsers.
- Prepared project proposals, technical documentation and ITIL-based change orders for UAT and production deployments.
- Led AD troubleshooting, root-cause analysis and domain controller sizing/optimization; collaborated with cross-functional teams and vendors on projects.
- Administered and provided shift support for security platforms including IBM QRadar, McAfee ePO, CrowdStrike, Palo Alto, Symantec Elastica, CA Identity Manager, Centrify, PRTG and others.
Wintel and Active Directory Lead - Essilor Shared Services Philippines Inc.
(2016-12 - 2017-06)
Led Wintel and Active Directory services for the AMERA region (Asia, Middle East, Russia and Africa), providing architecture, project delivery and 24/7 operations support for local IT teams and business units.
- Member of the Global Active Directory Design Team; drove a domain consolidation initiative and Windows Server 2016 upgrades as part of a single-domain strategy across AMERA.
- Managed lifecycle and optimization for 500+ servers (physical and virtual), executing consolidation and replacement plans to improve availability and reduce technical debt.
- Planned and executed regional support projects including NPS and GPO network profile rollout, infrastructure and security assessments for newly acquired entities.
- Maintained technical documentation, presented project proposals to stakeholders and enforced IT/security policies to meet compliance and audit requirements (ISMS, ADRAP).
Team Lead / Windows Platform Architect - Zuellig Pharma Asia Pacific Ltd. Phils., ROHQ
(2013-03 - 2016-11)
Technical lead for the Windows Platform team, overseeing daily operations, SLA-driven incident management and Level 3 support across APAC.
- Planned and executed the Active Directory upgrade from Windows Server 2003 to 2012 across 12 countries, improving security and supportability.
- Led cloud migrations to AWS and Microsoft Azure and deployed Office 365 with directory synchronization for CRM Online; implemented ADFS and Zscaler for secure access and web filtering.
- Managed server sizing, optimization and lifecycle activities; coordinated disaster recovery drills and continuity planning for critical systems.
- Provided technical consultation to business units and partners, managed vendors and contributed to OPEX/CAPEX planning and procurement.
