tedscloudlab

Ted Maldonado

Cloud / Infrastructure Engineer

10+ years across legal, biotech, education, and MSP environments — Entra ID, Microsoft 365, and PowerShell automation, now building toward Azure infrastructure engineering.

scroll ↓
// core skills

Azure

VMs, Virtual Networks, Subnets, NSGs, Blob Storage, App Service, Key Vault, Azure Monitor, RBAC

Automation & IaC

Bicep, PowerShell, Logic Apps, Microsoft Graph API, workflow automation

Identity & Security

Entra ID, PIM, Conditional Access, MFA, SSO, identity lifecycle management

Microsoft 365

Exchange Online, Intune, Teams, SharePoint, OneDrive, Purview

Infrastructure

Windows Server, Active Directory, Group Policy, DNS, DHCP, Hyper-V, VMware, TCP/IP

Tools

Veeam, iManage, Jamf, Dynamics, UniFlow, Zoom Rooms

// cloud engineering projects

VM Fleet Commander

repo ↗
Azure Infrastructure & IaC (Bicep)
  • Modular Azure infrastructure with Bicep, separating networking and compute into reusable, parameterized modules for repeatable multi-environment provisioning
  • Deployed a production-style environment — VNet, subnets, NSGs, and VMs — end-to-end into a live Azure resource group
  • Configured a scoped service principal for CI-style deployment, working around tenant-level MFA restrictions on interactive logins

ShareSafely

repo ↗
Secure Azure File Upload Platform
  • Secure file-upload application on Azure App Service and Blob Storage for compliance-sensitive use cases
  • RBAC, encryption at rest, and time-limited SAS URLs following least-privilege principles

Onboard Automator

repo ↗
Azure Identity & Provisioning Automation
  • Automated employee onboarding/offboarding using Entra ID, PowerShell, Logic Apps, and Microsoft Graph API
  • Automated account lifecycle, licensing, and access provisioning — applying RBAC and Conditional Access for identity governance

NetMaze Explorer

repo ↗
Azure Virtual Networking — in progress
  • Exploring Azure virtual networking design — VNets, subnets, peering, and routing scenarios

NetMaze Explorer

repo ↗
Azure Virtual Networking
  • Exploring Azure virtual networking design — VNets, peering, routing, and network security patterns
// experience

Senior Service Desk Technician (Tier 3)

May 2026 – Present
Symbotic, Wilmington, MA
  • Tier 3 escalation point for complex Windows, macOS, iOS, and Linux issues in an enterprise environment
  • Administer Entra ID capabilities including PIM, Conditional Access, RBAC, and user lifecycle management
  • Develop PowerShell automation to reduce repetitive administrative and provisioning workflows
  • Lead knowledge-base and SOP development to standardize troubleshooting and operations

Systems Engineer — Contract

Jul 2025 – Sep 2025
Newmark Group, Boston, MA
  • Administered Exchange Online, Intune, Teams, and Microsoft 365 services
  • Developed PowerShell automation for infrastructure troubleshooting and administrative workflows
  • Managed onboarding, access configuration, equipment provisioning, and software deployment

Systems Administrator

Aug 2023 – Dec 2024
Prince Lobel Tye, LLP, Boston, MA
  • Administered Entra ID, Exchange Online, Teams, OneDrive, Intune, and the broader Microsoft 365 environment
  • Designed and deployed Intune MDM to centralize endpoint management and security configuration
  • Migrated on-premises Active Directory distribution lists to Microsoft 365 Groups
  • Conducted Microsoft 365 eDiscovery and Purview investigations, producing audit trails for legal matters
  • Investigated suspicious sign-in activity and coordinated account containment and security response

IT Technician — Contract

Jun 2021 – Nov 2022
Watson Marlow Fluid Technology Group, Wilmington, MA
  • Administered Active Directory accounts and Group Policy; supported Azure and VMware infrastructure
  • Used Intune and PowerShell for device management and secure configuration
+ earlier roles (2015 – 2023)
  • Desktop Support — Contract, Trader Joe's, Boston, MA (Dec 2022 – Apr 2023)
  • Remote Support Engineer — Contract, Apex Computers MSP, Medford, MA (Dec 2020 – Jan 2021)
  • Desktop Support Engineer, Auxzillium MSP, Medford, MA (Jan 2019 – Dec 2020)
  • Technical Support Specialist — Contract, Commonwealth of Massachusetts, Boston, MA (Jul 2018 – Dec 2018)
  • Technical Support Specialist, Lee County School District, Fort Myers, FL (Feb 2015 – Apr 2018)
// certifications & education
  • B.S. Cloud Computing — Western Governors Universityin progress
  • Microsoft Certified: Azure Administrator Associate (AZ-104)exam Sep 2026
  • CompTIA A+held
  • Microsoft Learn: Entra ID, Blob Storage, Key Vault, Azure Administrationcompleted