Yusniel Ruiz · Miami, FL · English & Spanish

Senior Network & Systems Engineer.

I run infrastructure. I build the tooling behind it.

Fifteen years across enterprise networking, Microsoft cloud and identity, virtualization, and the automation that keeps all of it maintainable.

View Work Download Resume
Microsoft 365 & Entra ID Network design & segmentation Identity security & incident response Automation · n8n, PowerShell, Python Self-hosted & virtualization Backup & recovery

01 / About

What I actually do.

I am the senior escalation point across a managed client base, responsible for infrastructure standards, identity and security decisions, and complex migrations. I also build the internal software and automation that makes those environments practical to run with a small team.

15+
years in infrastructure
50+
client environments
500+
endpoints managed
8
platforms built

02 / Skills

What I work with.

Microsoft & Identity

Microsoft 365Entra IDIntuneConditional AccessExchange OnlineMicrosoft GraphAutopilotActive DirectoryAzure

Networking & Security

Network DesignVLANsVPN/IPsecFirewallsUniFiSophosDNS/DHCPNATLAN/WANNetwork SegmentationWi-Fi Design & Site SurveysEDR

Infrastructure & Resilience

ProxmoxHyper-VWindows ServerLinuxVirtualizationSynology/NASBackup & RecoveryMonitoringPatch Management

Automation & APIs

PowerShellPythonREST APIsn8nWorkflow AutomationWebhooksMicrosoft Graph APIAutotask APIGit

Containers & Self-Hosted

DockerDocker ComposeVPSSelf-hosted servicesOllamaLocal inference

Communications

Zoom PhoneZoom Contact CenterVoIP/SIPNumber PortingIVR & Call Routing

Leadership & Strategy

Technology EvaluationVendor & Platform EvaluationTechnical LeadershipInfrastructure StrategyClient ConsultingTier 2/3 Escalation

Development

Node.jsTypeScriptPHP/LaravelReactPostgreSQLMySQLWordPress

03 / Experience

Fifteen-plus years, four chapters.

  1. 2024 — now

    Lead Engineer

    Empower IT Group · Miami, FL

    Managed service provider covering multi-site business environments, several of them regulated.

    • Final escalation point across the managed estate. The problems that stop elsewhere land here.
    • Own platform selection across the managed estate: structured vendor evaluation, pilots, and the licensing and cloud spend that follows from those choices.
    • Accountable for Microsoft 365 and Entra identity posture, network and firewall architecture, virtualization, and backup and recovery design.
    • Lead incident response for identity attacks, and turn each one into a control change rather than a cleanup.
    • Deliver voice and email platform migrations in staged cutovers that keep business-hours disruption out of the picture.
    • Microsoft 365
    • Entra ID
    • Intune
    • UniFi
    • Azure
    • Proxmox
    • Zoom Phone
    • Autotask
    • n8n
    • PowerShell
  2. 2021 — 24

    Manager · Technology & Operations

    D&D Global Service LLC · Miami, FL

    50+ person operation running on manual, paper-based workflows.

    • Built and launched the company's internal sales and booking platform, replacing the manual process end to end.
    • Owned the technology stack and vendor relationships for the whole operation — selection, negotiation, and support.
    • That platform became the blueprint for the logistics system I rebuilt from scratch afterwards — same domain, second generation, everything learned from running the first one in production.
    • Laravel
    • PHP
    • MySQL
    • Vendor management
  3. 2016 — 21

    CEO & Founder

    Cumacell Technologies · Cienfuegos, Cuba

    Technology services company I founded and ran for five years.

    • Designed and managed servers, networks, and cybersecurity for 10+ business clients — the full stack, with no one else to escalate to.
    • Built a SaaS service-management platform and took it to production with paying clients on it.
    • Hired and led a six-person technical team, and owned every client relationship from first conversation to renewal.
    • Linux
    • Windows Server
    • Active Directory
    • Firewalls & VPN
    • SaaS development
  4. 2010 — 16

    Systems & Network Engineer

    Cuban Institute of Radio and Television · Cienfuegos, Cuba

    National broadcaster — multi-site infrastructure where an outage takes transmission off the air.

    • Designed, implemented, and administered servers, Active Directory, and LAN/WAN networks across sites.
    • Ran the VPN, firewall, and critical-infrastructure layer for broadcast operations that could not go down.
    • Windows Server
    • Active Directory
    • LAN/WAN
    • VPN
    • Firewalls

Education

B.S. Telecommunications & Electronics Engineering

Universidad Central "Marta Abreu" de Las Villas · Cuba · 2010

Graduated with Honors

Certifications

  • CompTIA Network+
  • CompTIA A+
  • Microsoft 365 Fundamentals (MS-900)

Vendor training

Zoom Sophos Kaseya

04 / Work

Systems that stayed up.

Owned

Infrastructure decisions, security response, and network builds I was accountable for.

IDENTITY & SECURITY

Identity Security & Incident Response

Session-token attacks bypass MFA. I handle detection and containment when one lands, then turn the root cause into Conditional Access policy so the same path closes for every tenant.

Session-layer containment, followed by tenant-wide access hardening

  • Entra ID
  • Conditional Access
  • Identity Protection
  • Intune
  • Defender for Office 365
  • Microsoft Graph

Read case study

PLATFORM STRATEGY

Fleet-Wide Firewall Consolidation

I ran the vendor evaluation, made the platform call for the whole managed estate, and executed the migrations and hardware refresh behind it.

One platform and one policy template across 20+ environments

  • UniFi
  • Sophos
  • Site-to-site VPN
  • VLAN segmentation
  • Vendor evaluation

Read case study

NETWORK DESIGN

Campus Wireless & VLAN Segmentation

300+ user campus running flat. I designed the wireless coverage from an RF survey and the segmented VLAN architecture underneath it, then staged the cutover so the campus stayed online.

Staged cutover with no campus-wide outage

  • Ubiquiti UniFi
  • 802.1Q VLANs
  • RF site survey
  • QoS
  • Inter-VLAN routing

Read case study

CLOUD DEPLOYMENT & COST

Multi-Tenant Admin Platform on Azure

Deployed an open-source multi-tenant Microsoft administration platform into our Azure subscription, then converted it from Windows to Linux and cut its monthly run cost by about two thirds.

Monthly run cost down from roughly $60 to about $20

  • Microsoft Azure
  • Linux
  • Windows Server
  • Entra app registrations
  • Cost optimization

Read case study

Built

Software and automation I wrote to operate those environments.

CALL OPS & TICKETING

OrbIT

Ingests Zoom Phone AI call summaries, puts a human review step in front of ticket creation, then drives the automation that opens the Autotask ticket and logs the time.

Ticket documentation reduced to one review action

  • Node.js
  • TypeScript
  • Prisma
  • PostgreSQL

Read case study Live demo login required

MULTI-TENANT SAAS

Managed Device Monitoring Platform

Multi-tenant console and browser extension for a 300+ device managed Chromebook fleet. Activity reporting, category-based blocking, alerting, and location checks in one place.

Fleet visibility native reporting does not provide

  • Next.js
  • React
  • Prisma
  • PostgreSQL

Read case study Live demo login required

AUTOMATION & INTEGRATIONS

n8n Automation Ecosystem

Thirty self-hosted workflows covering sign-in monitoring, alert routing, license reporting, and ticket automation. The platform reports 259 production executions with zero failures and 14 hours saved.

14h saved, 259 executions, 0 failures — platform-reported

  • n8n
  • Microsoft Graph
  • Autotask REST
  • Zoom API

Read case study

API INTEGRATION & BOTS

Chat Operations Bot

A Zoom Team Chat bot backed by internal APIs. Staff query operational stats from chat, and suspicious sign-ins get validated and posted to the owning channel automatically.

Security alerts enriched before a human reads them

  • Zoom Team Chat API
  • Zoom OAuth
  • Webhooks
  • n8n

Read case study

MONITORING TRIAGE

Monitoring Triage Console

Built on the Autotask API to clear the monitoring queue in one pass. The whole alert backlog on one screen, each item closed in a single action.

Recurring alerts resolved without spawning duplicate tickets

  • PHP
  • Autotask REST
  • Autotask SOAP
  • MySQL

Read case study

APPLICATION DEVELOPMENT

Logistics Operations Platform

Second generation of an operations platform I first built in a previous role. Package intake, shipment consolidation, client records, and printable manifests for a courier business.

8,638 packages and 43,199 parcels processed

  • Laravel 11
  • Filament 3
  • PHP 8.2
  • MySQL

Read case study Live demo login required

INFRASTRUCTURE & VIRTUALIZATION

Self-Hosted Infrastructure & Local AI

On-premises Proxmox platform carrying the automation stack, internal applications, databases, and GPU-backed local inference, with management, production, and backup traffic on separate segments.

Management, production, and backup planes kept separate

  • Proxmox VE
  • Linux
  • Docker
  • VLAN segmentation

Read case study

05 / Contact

Let's talk about what you're running.

[email protected]
Miami Springs, FL
LinkedIn ↗

Basic technical metadata is used only for spam and security protection. See Privacy.