Solutions Architect Cloud Engineer

*

William Shafo

Washington DC, USA *************@*****.*** +1-202-***-**** LinkedIn

Azure Administrator AWS Solutions Architect Cybersecurity Certified Professional Summary

Versatile cloud professional with 12+ years of experience delivering secure, high-performance IT and cloud infrastructure across enterprise, non-profit, and public-sector environments. Specialized in Azure architecture, threat & vulnerability mitigation, cloud-native security controls, and infrastructure automation. Adept at leading cross-functional teams to reduce cyber risk, enforce compliance frameworks (e.g., CIS Controls), and deploy scalable cloud solutions. Known for synthesizing technical data into actionable security strategy. Certifications

Microsoft Certified: Azure Administrator Associate (2025)

Microsoft Certified: Azure Solutions Architect Expert (2025)

AWS Certified Solutions Architect – Associate (2025)

AWS Certified Cloud Practitioner (2024)

ISC2 Certified in Cybersecurity (2024)

Google Cybersecurity Certificate (2023)

MCSE: Productivity MCSA: Cloud Platform MCSA: Office 365 MCSA: Windows Server 2012

Cisco Certified Network Professional (CCNP) Cisco Certified Network Associate (CCNA) Key Projects

Azure Cloud Migration for Payroll System - Deployed Azure VMSS, NSGs, and Azure Backup to host web-based app, improving system uptime to 99.99% and reducing data recovery time by 80%.

Enterprise Device Compliance Automation - Rolled out Intune compliance profiles and Windows update rings across 2,000+ endpoints; audit success rate improved by 92%.

CIS Controls Implementation - Led adoption of CIS v7.1 in 9 countries, reducing attack surface and improving incident response maturity.

Cisco Meraki Cloud Network Rollout - Designed and deployed SD-WAN across 128 offices; integrated site-to-site VPN and network segmentation, enhancing security and reducing latency by 45%.

Education

BSc in Computer Science – Addis Ababa University, Ethiopia 2007 Core Competencies

Azure IaaS/PaaS Security & Compliance (CIS, NIST) Windows/Linux Infrastructure Entra ID PowerShell Automation Intune MDM Microsoft Defender

& Sentinel Cisco Meraki API Integration Azure Monitor & Backup Cloud Migrations 2

Professional Experience

Regional ICT Advisor – Connectivity and Infrastructure SOS-Kinderdorf International – East and Southern Africa Region (Remote) Addis Ababa, Ethiopia Jun 2019 – Feb 2025

Led hybrid cloud transformation across 27 countries, managing Azure IaaS, VMSS, NSGs, Azure Firewall, and Azure Monitor—powering LOB applications used by 2,000+ users.

Executed migration of 2,000+ endpoints to Entra ID and Intune MDM; deployed Windows compliance baselines and CIS-aligned policies.

Secured regional infrastructure using Microsoft Defender, Sentinel, conditional access, and Intune policies aligned with NIST 800-53 and CIS Controls v7.1.

Managed Cisco Meraki SD-WAN across 128 remote offices, integrating secure VPN, VLANs, and cloud-managed policies.

Developed dashboards in Log Analytics to track threat indicators, uptime, and capacity metrics—supporting real-time response. Regional ICT Service Delivery Coordinator

SOS-Kinderdorf International Ethiopia Nov 2017 – May 2019

Orchestrated migration from on-prem AD to Microsoft Entra ID for 9 countries, enabling policy-based control via Intune.

Built server and application infrastructure (DNS, DHCP, GPOs) with enforced encryption, patch automation, and role-based access control.

Provided Tier 1–2 escalation for incidents, resolving 90% within SLA; produced technical guidance and policy recommendations for field offices Technical Consultant (Cloud and Messaging)

Techno Brain Limited Addis Ababa, Ethiopia Nov 2014 – Oct 2017

Delivered 15+ Microsoft Exchange & Office 365 migrations, including hybrid co-existence and DAG high-availability for enterprise clients.

Drafted API integration blueprints and PowerShell-based management scripts to support advanced administration.

Advised on cloud governance, security configurations, and ITIL-aligned service delivery. ICT Officer / Network Administrator / Server Engineer Various Roles (Marie Stopes, ERCA, DARO, Admas University) 2011 – 2014

Administered AD, DNS, DHCP, and Dell SonicWall firewall solutions for 100+ users.

Designed DR plans and managed Kaspersky endpoint protection deployment.

Spearheaded backup strategy using CA ARCserve with versioning and restore testing.

Deployed Hyper-V clusters with NetApp SnapMirror for DR, AD DS, and file servers.

Configured and optimized iSCSI-based SANs and integrated secure GPO-based environments. Technical Tools & Platforms

Cloud: Azure (IaaS, VMSS, Azure Firewall, Backup, AD Connect), AWS (EC2, RDS), GCP (Foundational) Security & Monitoring: Microsoft Defender, Sentinel, Log Analytics, CIS Controls OS & Infra: Windows Server, Linux (Ubuntu/CentOS), Hyper-V, DNS, DHCP Scripting: PowerShell, Bash Networking: Cisco Meraki, SonicWall, Fortinet, Palo Alto, VLANs, VPNs MDM/MAM: Microsoft Intune, Configuration Profiles, Conditional Access, LOB App Deployment Messaging: Exchange Server 2010–2016, Microsoft 365, DAG, Mail Flow Rules

Contact this candidate