Configuration Manager System Engineer

Pedro Gerardo Escalona Casanova

IT System Engineer

FL 407-***-**** *************@*******.*** www.briescomsys.com.ve www.linkedin.com/in/pedroescalonacasanova Professional Summary

Highly experienced IT professional with 25+ years in systems administration and endpoint management, possessing a strong focus on Microsoft Endpoint Configuration Manager (MECM/SCCM). Proven expertise in troubleshooting and diagnosing issues within MECM, including vulnerability remediation, patch management, and software deployment. Proficient in managing Windows environments and experienced in routine endpoint provisioning. Additional knowledge of PowerShell and Active Directory. Adept at problem-solving and delivering effective technical solutions, with a strong aptitude for learning new technologies. Experience

System Administrator Vulnerabilities - EVERTEC Inc., Puerto Rico, USA. – 04/2024 – Present

- Over 25 years of IT experience with a strong focus on Microsoft Endpoint Configuration Manager

(MECM/SCCM), managing patch deployments, software distribution, and compliance enforcement.

- Leveraged 85% of available tools, including Microsoft Endpoint Configuration Manager (MECM), Microsoft INTUNE with MDM, Patch My PC, and custom scripting (PowerShell/Batch), to automate patch management and vulnerability assessments.

- Skilled in identifying and resolving MECM-related issues, including vulnerability remediation, patch management failures, SCCM agent failures and software deployment errors, ensuring high system uptime.

- Led remediation team efforts for over 2,500 Azure-based and Desktop devices, utilizing MECM/SCCM, Microsoft Intune, Tenable, Nessus, CMDB, and custom PowerShell scripting to automate security patching and reduce risks.

- Masterfully diagnosed and resolved critical and complex issues within the MECM/SCCM environment

(WSUS and SQL Database) impacting patch deployments, software distribution, and compliance, achieving a track record of minimal downtime.

- Utilized advanced MECM/SCCM troubleshooting techniques and log analysis to resolve endpoint configuration issues, guaranteeing successful software and operating system deployments and ensuring consistent endpoint functionality across the environment.

- Proficient in Windows environment administration, managing endpoint security, and deploying enterprise- wide solutions through MECM/SCCM and Intune.

- Hands-on experience with Azure cloud migration, firewall configurations, network segmentation (VLANs, STP), and hybrid IT environments for optimized security and performance.

- Successfully led IT operations, strategic planning, and implementation of cybersecurity solutions, ensuring compliance and efficiency across various enterprise-level projects.

- Achieved a 95% remediation rate for client devices, significantly reducing the organization's attack surface. Technical Director & Founder – Bries Comsys C.A., Valencia, Venezuela. – 09/1999 – 12/2024

- Led IT operations, including strategic planning, project execution, and team supervision, to enhance network infrastructure, optimize server administration, and implement robust cybersecurity measures.

- Oversaw strategic planning, project execution, and team supervision for 85+ projects over 25 years.

- Deployed Symantec Messaging Gateways on Windows Server Hyper-V, implementing high availability with MX priority and enhancing security with TLS encryption and traffic analysis, resulting in an 85% reduction in spam and improved bandwidth.

- Supervised a complex messaging infrastructure spanning 7 data centers (Miami, Maracaibo, Maracay, and Caracas) using Microsoft Exchange Server.

- Migrated 300 users to Outlook, ensuring seamless communication and data synchronization across geographically dispersed locations.

- Executed data protection using Nakivo Backup with NAS and agents, incorporating a Robotic Tape Library for long-term data archiving and disaster recovery of 5 TB.

- Migrated 200+ endpoints to Symantec Antivirus with cloud administration, enhancing endpoint security with USB port control and improved threat detection.

- Implemented and managed cybersecurity solutions based on SonicWall firewall, SLLVPN, and Email Security Safeguard, achieving 100% threat prevention with content filtering, protecting against ransomware, and improving user productivity.

- Configured 12 virtual servers on Windows Hyper-V, implementing backup and disaster recovery using Nakivo and migrating virtual machines to the cloud for enhanced security and faster recovery.

- Configured and deployed network infrastructure including 1 Cisco router and 5 core switches, implementing VLANs and Spanning Tree Protocol (STP) for network segmentation, enhanced security, and optimized performance.

- Analyzed and identified vulnerabilities using Vicarius software on 200+ machines (printers, PCs, routers, IoT devices) across three subnetworks.

- Deployed Exchange Server and Windows Server with SSL certificates to 100% of the salesforce (60 individuals), improving communication and security for remote teams.

- Led Azure cloud migration for 3 critical servers from Server 2012 to 2019 VM, ensuring zero downtime and enhancing security with faster recovery.

Education

- Universidad Simón Bolívar 09/01/1989 – 05/01/1995 - B.A. Electronic Engineer Certifications

- Microsoft Certified Systems Engineer (MCSE)

- Microsoft Certified Trainer (MCT)

- Cisco Certified Network Associate (CCNA)

- Security Certified Network Specialist (SCNS)

- Security Certified Specialist (SCS)

- QNAP Certified Technical

- Azure Fundamentals

- Nakivo Technical Solution Professional

- AWS Certified Cloud Practitioner

Technical Skills

- Cloud Security: Azure Administration (Azure AD, Azure Sentinel), AWS Administration (AWS IAM, AWS Security Hub), Cloud Migration, Virtualization (Hyper-V), O365 Security, Email Cloud Security, Cloud Edge Secure Access

- Network Security: TCP/IP, VLANs, STP, VPN, Routing (Cisco), Firewalls (SonicWall), Network Segmentation

- Security: Vulnerability Management (Tenable, Nessus), Threat Assessment, Security Incident Response, Patch Management (Microsoft Endpoint Configuration Manager MECM, Patch My PC), Antivirus (Symantec Cloud SES Advanced (EDR)), Firewall Administration, Ransomware Mitigation, Encryption (TLS), Wireshark, NIST CSF, CIS Critical Controls, ISO 27001, CIS Benchmarks

- Scripting: PowerShell, Batch

- Networking: TCP/IP, DNS, DHCP

- Server Administration: Windows Server, Exchange Server, SQL Server, Active Directory

- Operating Systems: Windows Server, Windows 10/11, Linux, MacOS

- Databases: SQL Server, Database Administration

- Microsoft 365, Google Workspace and Entra ID

- Microsoft Sentinel (SIEM and SOAR)

- Symantec Cloud SES Advanced (EDR)

- Microsoft INTUNE

- Backup & Recovery: Backup Exec, Nakivo, Tape Libraries, Disaster Recovery Planning Soft Skills

- Team Leadership

- Project Management

- Strategic Planning

- Communication (Written & Verbal)

- Problem-Solving

- Critical Thinking

- Technical Support

- Collaboration

Contact this candidate