CARLOS ALBERTO BOLAÑOS LÓPEZ
Systems Engineer IT Project Manager Cybersecurity Management Leader Cloud Security DevSecOps Bogotá D.C., Colombia +57-316-***-**** *******@*****.*** LinkedIn: Carlos Alberto Bolaños López U.S. Visa Holder. PROFESSIONAL SUMMARY
Systems Engineer with more than 12 years of experience leading cybersecurity, IT infrastructure, and digital transformation projects across the financial services, telecommunications, aviation, and government sectors. Extensive experience managing cybersecurity initiatives in hybrid and cloud environments (Microsoft Azure, AWS, and Google Cloud Platform), coordinating cross-functional teams including Software Development, Enterprise Architecture, Infrastructure, Cloud Operations, Security Operations Center (SOC), Risk Management, and Information Security. Strong background in Vulnerability Management, Infrastructure Hardening, Identity and Access Management (IAM), Active Directory, SailPoint, Kubernetes, Terraform, and Azure DevOps. Successfully led cloud migration initiatives, security control enhancements, and infrastructure modernization projects using Agile methodologies.
Results-oriented leader with proven experience managing multidisciplinary teams, driving cybersecurity improvements, and delivering strategic technology initiatives.
TECHNICAL SKILLS
Cybersecurity
Cybersecurity Management, Vulnerability Management, Infrastructure Hardening, Identity & Access Management
(IAM), SailPoint Identity Security, Active Directory, Microsoft Entra ID (Azure Active Directory) Cloud Security, Red Team & Purple Team Exercises, ISO 27001, Risk Management, Business Continuity Cloud Platforms
Microsoft Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP) DevOps & Infrastructure
Azure DevOps, Kubernetes, Terraform, Terragrunt, Windows Server, Linux. VMware. PowerShell, Scrum, Agile Methodologies, Jira, Confluence, Microsoft Power BI PROFESSIONAL EXPERIENCE
HITSS – Claro
Digital Technical Lead August 2023 – Present
Lead technical coordination between Architecture, Software Development, and Infrastructure teams for the implementation of digital solutions.
Key Responsibilities
- Lead technical initiatives for digital transformation projects.
- Manage technical user stories in Azure DevOps.
- Coordinate with Enterprise Architecture teams.
- Design application integrations with Oracle platforms.
- Oversee software development vendors.
- Coordinate testing, deployments, and production releases.
- Manage technical changes and project follow-up.
Tata Consultancy Services (TCS) – Davivienda
Cybersecurity Project Manager May 2022 – August 2023 Led strategic cybersecurity initiatives across Colombia and Central America. Responsibilities
- Managed enterprise cybersecurity projects.
- Coordinated Development, Cloud, Infrastructure, Architecture, SOC, Risk Management, and Audit teams.
- Managed cloud security projects on Azure, AWS, and GCP.
- Oversaw vulnerability management and remediation plans.
- Coordinated Red Team and Purple Team exercises.
- Managed project schedules, budgets, KPIs, and executive reporting. Key Achievements
- Successfully delivered strategic cybersecurity projects.
- Led cloud migration initiatives to Azure, AWS, and GCP.
- Implemented SailPoint Identity Governance platform.
- Resolved critical security vulnerabilities.
- Implemented security monitoring, reducing security gaps by 80%.
- Managed a software factory consisting of 25 professionals. Tata Consultancy Services (TCS) – Avianca
Microsoft Cybersecurity Tower Lead May 2021 – May 2022 Led four technology towers responsible for Identity Management, Microsoft Infrastructure, and Cloud Security. Responsibilities
- Managed Active Directory and Microsoft Entra ID (Azure AD).
- Performed Windows and Linux server hardening.
- Administered Kubernetes environments.
- Managed Terraform and Terragrunt infrastructure.
- Supported Azure, AWS, and GCP cloud platforms.
- Implemented SailPoint Identity Governance.
- Managed projects using Azure DevOps, Jira, and Confluence. Key Achievements
- Integrated 215 enterprise applications into SailPoint.
- Led migration to Microsoft Entra ID (Azure Active Directory).
- Hardened enterprise Active Directory environments.
- Increased operational efficiency by 35%.
- Managed teams of up to 20 professionals.
AXA Colpatria
IT Infrastructure Security Coordinator June 2019 – July 2020 Responsibilities
- Coordinated IT security projects.
- Implemented infrastructure hardening.
- Managed vulnerability assessments.
- Administered Windows and Linux security.
- Coordinated technical security testing.
- Managed security KPIs and risk indicators.
Key Achievements
- Reduced security incidents by 50%.
- Improved security controls for critical infrastructure.
- Strengthened enterprise cybersecurity processes. COMWARE
Storage & Backup Specialist April 2018 – January 2019 Responsibilities
- Managed Dell EMC, NetApp, and Veeam platforms.
- Administered enterprise backup solutions.
- Coordinated Infrastructure and Database teams.
- Managed storage platform security.
Key Achievements
- Migrated backup infrastructure to the cloud.
- Increased storage capacity by 30%.
- Reduced disaster recovery times by 50%.
Todelar
IT Director. November 2016 – October 2017
Responsibilities
- Led the IT department.
- Managed enterprise infrastructure.
- Administered Windows and Linux servers.
- Managed Active Directory and Microsoft 365.
- Coordinated technology projects.
- Managed technology vendors.
Key Achievements
- Led structured cabling renovation.
- Reduced operational costs.
- Modernized enterprise IT infrastructure.
COS Informática Colombia
IT Project Director. January 2011 – July 2015
Managed enterprise infrastructure projects for clients in the energy and telecommunications sectors. Key Achievements
- Established company operations in Colombia.
- Managed IBM, HP, Dell, and Oracle infrastructure.
- Reduced spare parts costs by 60%.
- Achieved 100% SLA compliance.
- Managed teams of up to 15 professionals.
- Administered Mainframe platforms and mission-critical infrastructure. EDUCATION
Bachelor's Degree in Systems Engineering
University of Tolima. – 2015.
PROFESSIONAL CERTIFICATIONS
- IoT Services Integration Specialization (In Progress)
- Cloud Security Technician
- Cybersecurity Technician
- Ethical Hacking
- ISO 27001 Lead Auditor
- ISO 27001:2022
- AWS Cloud Practitioner – Infrastructure & Networking
- Scrum Fundamentals
- Agile Project Management
- Project Management Diploma
- Artificial Intelligence Fundamentals
- Business Continuity Planning
TECHNOLOGIES
Cloud: Microsoft Azure, AWS, Google Cloud Platform Infrastructure: Windows Server, Linux, VMware, Kubernetes, Active Directory, Microsoft Entra ID Automation: Azure DevOps, Terraform, Terragrunt, PowerShell Security: SailPoint, IAM, Infrastructure Hardening, Vulnerability Management, ISO 27001, SOC, IDS/IPS, Firewalls.
Management Tools: Jira, Confluence, Microsoft Power BI. LANGUAGES
Spanish: Native
English: Basic proficiency (technical reading and documentation comprehension).