Agustin H Borrajo

AGUSTIN HERNAN BORRAJO Azure Infrastructure Administrator | System Architect | DevSecOps Engineer | Middleware Specialist CONTACT INFORMATION- - Buenos Aires, Argentina LinkedIn GitHub IT Tech Blog PROFESSIONAL SUMMARY Experienced Azure Infrastructure Administrator with 20+ years in IT infrastructure, cloud architecture, and cybersecurity. Proven expertise in Azure administration, DevSecOps practices, middleware solutions, and vulnerability assessment testing. Strong background in designing and implementing enterprise-scale cloud solutions, security frameworks, and automation systems. Skilled in reducing costs, improving performance, and leading technical teams through complex business infrastructure projects. CORE COMPETENCIES Azure Services: Microsoft Entra ID, RBAC, PIM, Azure Web Apps, Azure Front Door, Azure SQL DB, Azure Defender, Azure Sentinel Cloud Technologies: Hybrid Cloud Integration, Infrastructure as Code (IaC), Bicep, ARM, CI/CD/CD, GitHub Actions, Azure DevOps Security: SAML, OpenID (OIDC), OAuth2, Web Tokens, PKI, Cryptography, Web Application Firewall (WAF), SIEM, SOAR, DevSecOps Cybersec Testing: Threat Modeling, Vulnerability Assessment Testing (VAT), SAST, DAST, Rapid7, Qualys, Burp Suite, Kali Linux Programming and Scripting: PowerShell, Azure PowerShell, VBScript, Perl, UX Shell Scripting, JavaScript, Python, VS Code Tools and Platforms: Wireshark, Postman, Fiddler, F5 BIG-IQ Load Balancer & Reverse Proxy, SharePoint, Cloudflare, AppDynamics Compliance: OWASP Top 10, ISO 27001, NIST CSF, SOC 2, FedRAMP, FIPS 140, PCI DSS, SOX, HIPAA, GDPR, MITRE ATT&CK, OIMS PROFESSIONAL EXPERIENCE SYSTEM ARCHITECT AND AZURE SUBSCRIPTION OWNER ExxonMobil Business Support Center Argentina S.R.L. | Dec 2022 – Dec 2024 • Improved Azure Web Apps performance by 70% through optimization of elastic pool dynamics and resource allocation strategies • Achieved cost savings of $200,000 annually by rescaling and right-sizing Azure infrastructure resources with no service disruption • Designed and implemented a SQL database accessibility solution on a custom Azure VM, doubling data load and extract speeds • Managed TLS certificate lifecycle for critical on-premises F5 BIG-IQ load balancers supporting statutory corporate applications • Increased application accessibility by 400% through architectural redesign of on-premises licensing server infrastructure • Led proof of concept initiative removing 100% gateway proxy dependencies, resulting in 45% latency reduction • Led and implemented 12 successful Azure Front Door migrations, integrating hybrid SSO authentication for 10,000+ users • Mentored a team of 10 IT Operations Engineers on Azure architecture best practices and modern troubleshooting methodologies CYBERSECURITY CHAMPION AND AZURE ADMINISTRATOR ExxonMobil Business Support Center Argentina S.R.L. | Apr 2020 – Dec 2022 • Redesigned Web Application Firewall rules, resulting in a 99% reduction in false positives while maintaining security posture • Led and executed Azure ADAL to MSAL authentication migration of Azure Cognitive Services applications with zero downtime • Achieved 100% remediation of critical cybersecurity findings across the Corporate IT portfolio of 170+ business applications • Conducted 200+ cybersecurity assessments facilitating VAT testing advice on SSLYZE, Postman and custom PowerShell scripts • Coordinated and executed 150+ mandatory white-box vulnerability assessment tests for strategic and high-risk applications • Implemented security monitoring dashboards tracking 500+ security metrics across enterprise applications and SaaS platforms MIDDLEWARE WEB HOSTING AND AUTHENTICATION ENGINEER ExxonMobil Business Support Center Argentina S.R.L. | Jan 2015 – Apr 2020 • Architected and deployed a customized application authentication monitoring system serving 15,000+ enterprise users • Strengthened authentication schemas implementing OWASP Top 10 security standards across 50+ on-premises applications • Integrated on-premises SharePoint with external B2B partners using Ping Access and Ping Federate WS-Fed and SAML protocols • Developed a PowerShell automation framework reducing deployment time by 85% for critical system configuration updates • Created a centralized knowledge repository increasing team efficiency by 30% and visibly reducing onboarding time ENTERPRISE MONITORING AND AUTOMATION ENGINEER ExxonMobil Business Support Center Argentina S.R.L. | Apr 2008 – Jan 2015 • Maintained event correlation logic for 5 enterprise monitoring systems serving 20,000+ active users, reducing 50% false positives • Developed a Perl-based monitoring engine for 500 refinery servers and 80 Oracle database instances globally distributed • Created user experience scripts for granular cyber threat detection across management servers expediting on-call MTTR by 80% • Modernized Unix server monitoring developing a JavaScript & HTML5 web interface supporting 200+ network nodes • Reduced incident response time by 40% through the implementation of intelligent automation and alert correlation scripts T1 INTERNET DEDICATED ACCESS AND MIDDLEWARE ENGINEER CubeCorp Argentina S.A. for Verizon and MCI | Oct 2004 – Jan 2008 • Administered business DNS zones and executed 50+ IP service migrations of special handling customers with zero downtime • Integrated external BGP routers with corporate Frame Relay cascades supporting 2,500+ connections increasing QoS by 35% • Restructured Verizon metropolitan carrier lines improving network reliability by 75% and reaching availability of 99.99% • Standardized IT audit assessments for Lucent 5E and Nortel DMS-500 Class 5 switches reducing by 50% the auditors' workload FAST ACCESS DSL AND HOME NETWORKING PLUS TELCO REPRESENTATIVE Teletech Argentina S.A. for BellSouth and MCI Americas | Aug 2003 – Jul 2004 • Processed 500+ DSL service registrations and validated end user contracts achieving 99% customer satisfaction rating • Provided technical support for 100+ IFITL and Home Networking DSL line pre-validations with 95% first-call resolution rate • Delivered 85% cost savings for MCI Premium end users by streamlining PSTN voice line feature migrations for LEC & LDC services EDUCATION BACHELOR OF SCIENCE IN ELECTRONIC ENGINEERING National Technology University, Argentina | March 2000 Graduate File Number: 93987-4 Thesis: iAPX80C52 Data Exchange Terminal - SYN/ACK Protocol Implementation on Assembler and Borland Turbo C CERTIFICATIONS • Microsoft Certified: Azure Administrator Associate (AZ-104) - Cred ID 27ECE37A0D9B1157 • Microsoft Certified: Azure Security Engineer Associate (AZ-500) - Cred ID 3C748E7DD5459BA8 • Microsoft Certified: Azure Fundamentals (AZ-900) - Cred ID 734E48E3BCECB4E4 LANGUAGES • English: Native Speaker • Spanish: Native Speaker • French: Basic Proficiency • Finnish: Elementary Proficiency ADDITIONAL INFORMATION • Availability: Immediate for remote employment. Open to international relocation. • Work Authorization: Full work rights in Argentina. Argentine national. • Time Zone Flexibility: Comfortable working across multiple time zones, including EST, PST, and CET. • Technical Setup: Own PC environment setup with Oracle Virtual Box, Kali Linux, Wireshark, Azure Subscription, VS Code.