Skip to main content
Andrés Ahumada

Andrés Ahumada

Infrastructure Cloud Automation Cybersecurity Artificial Intelligence - AIOps

Systems & Infrastructure Administrator focused on cybersecurity, automation, and hybrid architectures.

Greater Montreal Area French, Spanish, English

Skills

Infrastructure & Virtualization

  • Operating Systems: Administration, evolution, and integration of Linux (Enterprise) and Windows Server environments (Active Directory, DNS, DHCP).
  • Virtualization: Management of open-source and enterprise hypervisors (KVM/libvirt, VMware ESXi/vSphere).
  • Containers & Orchestration: Deployment and administration of workloads using Docker and Podman (Quadlet).
  • Data Center & Hardware: Server provisioning, GPU host management, workstations, racking, and cabling.

Cloud & Edge

  • Cloud Infrastructure (IaaS): Architectures on AWS and Google Cloud (Instances, security groups, SSH/Relay bastions).
  • Edge Networks & Zero Trust: Implementation of web protection and secure access with Cloudflare (Access, DNS, Turnstile, Workers, Pages).
  • Cloud Identity (In training): Administration paths in Azure (AZ-104), Microsoft 365, and Entra ID (SC-300, MD-102).

Automation, IaC & CI/CD

  • Infrastructure as Code (IaC): Provisioning, configuration management, and standardization with Ansible, Vagrant, and Packer.
  • CI/CD Pipelines: Continuous integration and delivery workflows in GitLab.
  • Scripting & Runbooks: Automation development with Bash and PowerShell to reduce manual dependencies.

Networking & Perimeter Security

  • Switching & Routing: Management of corporate L2/L3 switches, VLAN design, trunk/access ports, and routing protocols.
  • Perimeter Security: Firewall administration, VPN configuration, traffic filtering, interfaces, and network diagnostics.
  • Wireless Infrastructure: Deployment and monitoring of high-density enterprise Wi-Fi networks.
  • Secure Remote Access: Implementation of high-performance remote access protocols (VDI, PCoIP) for critical workstations.

Storage & Business Continuity

  • Network Storage: Distributed mounts (NFS) and management of enterprise storage clusters (Scale-out NAS/SAN).
  • Backup & Disaster Recovery: Backup strategies, restoration, archiving, and continuity validation testing with Veeam.
  • Version Control: Administration of code and binary repositories using Git and Perforce/Helix Core.

Observability & Monitoring

  • Metrics & Alerts: Performance and reliability monitoring with Prometheus and Grafana (SNMP, blackbox, and custom exporters).
  • Centralized Log Management: Event collection, analysis, and correlation with Graylog and Splunk.

Cybersecurity & Identity

  • Operational Security: Patch management, vulnerability remediation (CVE), and systematic infrastructure hardening.
  • Identity & Access: Implementation of MFA, Zero Trust principles, and Privileged Access Management (PAM).
  • Defensive Operations: Advanced practices in defense, incident response, and threat analysis (Blue/Purple Team environments).
  • Industry Training: Compliance methodologies (ISO/GDPR/PCI-DSS) and CEH v13 certification (in progress).

Education & Certifications

Cybersecurity Program — Vanier College

2025 – 2026

Practical training in defense and secure system operations. (Cyber Defense, Intrusion Testing, Vulnerability Management, Incident Management, Threat & Risk Analysis, GDPR/ISO/PCI-DSS/HIPAA Compliance, Preventive Surveillance)

Certified Ethical Hacker (CEH v13)

in progress

Practical preparation oriented towards offensive and defensive techniques.

Microsoft — Azure and Identity

currently studying

Cloud administration and identity and device management paths. (AZ-104, SC-300, MD-102)