SYSTEM STATUS: ONLINE / OPEN TO WORK
HCMC --:--:--
NYC --:--:--
LONDON --:--:--
SYDNEY --:--:--

Hello, I'm Alex.

IT Infrastructure and Security Specialist.
CompTIA Trifecta (A+, Network+, Security+) Certified professional transitioning from education back to enterprise IT. I combine strong technical troubleshooting with elite communication skills to resolve complex escalations. Actively seeking MSP Support, Junior SysAdmin, & Cloud Infrastructure opportunities.

./INCIDENT_RESPONSE

Zero-Interaction Threat Analysis (Live MSP Compromise)

THREAT NEUTRALIZED

Detected and responsibly disclosed a live clipboard-hijacking payload (ClearFake vector) on a US-based MSP's production website. Analyzed User-Agent evasion tactics and provided immediate remediation steps, resulting in successful threat neutralization within 24 hours.

> Threat Hunting > Incident Response > OSINT > Malware Analysis
[ READ GITHUB REPORT ↗ ]

./HOME_LABS_&_PROJECTS

Enterprise Infrastructure Lab

Architected a corporate network simulation on a Type-1 Hypervisor (Proxmox) with pfSense VLAN segmentation. Administered Windows Server 2022 (AD DS, GPOs, OOB Management). Executed Tenable Nessus vulnerability scans, hardened infrastructure, and simulated enterprise IT workflows by tracking incident remediations and L2 escalations via Jira Service Management.

> Proxmox VE > pfSense & VLANs > Active Directory > GPO Management > OOB Management

Lingo Leap (Production Site)

VISIT SITE ↗

AI-assisted "vibecoded" production platform built with Astro. Acted as Lead Architect performing extensive debugging and security hardening: enforced strict HTTP Security Headers (HSTS, X-Frame-Options), configured TLS 1.2+ minimums, and implemented Bot Mitigation via Cloudflare Edge Network. Achieved SecurityHeaders Grade A and 100/100 Pagespeed score.

> Web Development > DevSecOps > Cloudflare Edge > Security Hardening > DNS Management

Personal Portfolio (This Website)

Serverless deployment using Astro & Tailwind. Configured custom domain DNS records via Cloudflare, set up SSL/TLS encryption, and integrated a CI/CD pipeline via GitHub Actions for automated edge deployment.

> Cloudflare Pages > Astro > CI/CD

Cybersecurity Forensics (MVT)

Utilized the Mobile Verification Toolkit (MVT) via Linux CLI to analyze Android backup images. Scanned for Indicators of Compromise (IOCs) related to spyware threats (Pegasus/Predator) to verify device integrity.

> Linux CLI > Digital Forensics > IOC Scanning

./Technical_Skills

>> Systems_&_Security

Windows Server 2022 Linux (Ubuntu/Kali CLI) Active Directory (GPO) Microsoft Entra ID Hybrid Identity Sync pfSense Firewall VLANs (802.1Q) Malware Remediation IAM / Access Control DNS/DHCP Management Disaster Recovery VPN & Remote Access Vulnerability Patching SIEM

>> Tools_&_Cloud

Proxmox VE (Type-1 Hypervisor) VirtualBox / VMware TP-Link Managed Switches Tailscale (OOB) MVT (Mobile Forensics) Wireshark (Packet Analysis) Git / GitHub Astro / Tailwind Jira / Ticketing Systems Office 365 Admin Nmap Cloudflare Edge Tenable Nessus Splunk

./Certificates

CompTIA A+

CERTIFIED
A+ Badge

Hardware, OS Troubleshooting, Basic Networking, Mobile Devices & IT Support.

CompTIA Network+

CERTIFIED
Net+ Badge

TCP/IP, DNS/DHCP, Subnetting, VLANs, Routing protocols & Network troubleshooting.

CompTIA Security+

CERTIFIED
Sec+ Badge

Threat Analysis, Risk Management, Cryptography, Incident Response & Security Architecture.

Microsoft MS-900

CERTIFIED
MS-900 Badge

Microsoft 365 Ecosystem, Cloud Concepts, Entra ID Authentication & Endpoint Management.

Microsoft AZ-900

CERTIFIED
AZ-900 Badge

Azure Architecture, Virtual Machines, Cloud Networking & IaaS/PaaS Core Concepts.

Microsoft MD-102

IN PROGRESS
MD-102 Badge

Endpoint Administrator: Windows Client, Intune, Autopilot & Microsoft 365 Device Management.