Cloud Resume Challenge

Fabian Nuno

DevOps Engineer  ·  Azure Certified  ·  AZ-400  ·  AZ-204  ·  AZ-104

Live visitor count

Summary

Azure Administrator moving into DevOps engineering with production CI/CD experience in both Azure DevOps and GitHub Actions. Built and operates pipelines with automated linting, approval gates, secrets management, and rollback validation. AZ-400 (DevOps Engineer Expert), AZ-204, and AZ-104 certified.

Experience

Azure Administrator

Total Site Solutions

Round Rock, TX Sep 2023 – Present
  • Designed and operate a 5-stage Azure DevOps pipeline — PSScriptAnalyzer lint on every PR (errors block merge), deploy stage gated behind manual approval, running on a self-hosted agent on the domain controller.
  • Diagnosed a recurring post-merge failure where Git CRLF conversion corrupted Unicode characters and broke production deploys — root-caused four distinct corruption patterns and built an automated detection-and-repair script, eliminating the recurring outage.
  • Enforced branch protection on main requiring PR review, linked work items, and passing builds; every deploy creates timestamped backups with post-deploy verification, enabling validated rollbacks via git revert or direct restore.
  • Implemented service principal auth for Microsoft Graph and certificate-based auth for Exchange Online; all secrets stored as machine-level environment variables and Azure DevOps secret variables — never hardcoded — with documented rotation schedules.
  • Investigated a 2x month-over-month Log Analytics cost spike using KQL — identified non-interactive sign-in logs as the ingestion driver (27 GB vs 13 GB baseline) and recommended migrating alert rules to native Log Analytics, projecting ~60% cost reduction.
  • Built and deployed a production PowerShell automation platform for the full employee lifecycle (onboarding, lookup, offboarding) — reduced a 30–60 minute manual process to under 5 minutes for 200+ users.
  • Administers hybrid AD + Entra ID for 200+ users — Conditional Access, MFA, identity lifecycle; raised Microsoft Secure Score from the low 40s to 71.65% through targeted hardening. Manages Intune and Defender for Endpoint across 200+ Windows 11 endpoints.

IT Technician II

Total Site Solutions

Round Rock, TX Sep 2022 – Sep 2023
  • Resolved escalated AD, GPO, and access issues with root-cause fixes; managed 200+ Windows endpoints using PowerShell automation for patching and cleanup.
  • Documented repeatable procedures that improved team troubleshooting speed and reduced repeat tickets.

Help Desk Technician

Sun Auto Tire & Service

United States Mar 2021 – Sep 2022
  • Delivered same-day resolution on OS, application, and network issues for 100+ users.
  • Authored documentation that improved first-call resolution rates across the support team.

Help Desk Technician

Apex Systems / Whole Foods

Austin, TX Oct 2020 – Mar 2021
  • Maintained SLA compliance across 500+ store locations while processing 40–60 tickets daily.
  • Created troubleshooting guides that reduced escalations and improved team resolution speed.

Help Desk Technician

Capgemini

Austin, TX Oct 2019 – Oct 2020
  • Resolved ServiceNow tickets for Outlook, authentication, and AD issues — completed 100+ weekly AD tasks.
  • Expanded the internal knowledge base, reducing repeat escalations.

Projects

IT Onboarding & Offboarding Automation

Total Site Solutions (production)  ·  github.com/fnuno1/Onboarding-Offboarding-Automation

  • Reduced employee onboarding from 30–60 minutes to under 5 minutes for 200+ users via end-to-end PowerShell automation with Azure DevOps CI/CD — lint validation, branch policies, approval gates, and backup-and-verify deploys.
  • Published sanitized public repo with full pipeline definition, runbook, PR template, and five annotated PowerShell tools demonstrating secrets handling, service principal auth, and audit monitoring patterns.

Cloud Resume Challenge

fabianresume.dev

  • Azure Static Web Apps + Azure Functions (Python) + Cosmos DB — live visitor counter backed by serverless API, custom domain with SSL, and full CI/CD pipeline via Azure DevOps with multi-stage validation and manual approval gates.
  • Migrated from GitHub Actions to Azure DevOps for full pipeline control — Validate stage runs on every PR, Deploy stage requires manual approval, all secrets managed through variable groups.

Skills

CI/CD & DevOps
Azure DevOps GitHub Actions PSScriptAnalyzer Branch Policies Approval Gates Self-hosted Agents Rollback Validation
Secrets & Auth
Service Principals Certificate Auth Microsoft Graph API Exchange Online Auth Secret Rotation
Observability
Log Analytics KQL Microsoft Sentinel Alert Rules Audit Logging Cost Optimization
Scripting
PowerShell Python Bash Windows Forms Task Automation
IaC
Terraform ARM Templates ACR ACI AKS
Cloud & Identity
Entra ID Conditional Access MFA Hybrid AD RBAC Intune Defender for Endpoint Azure Static Web Apps Azure Functions Cosmos DB
OS & Networking
Windows Server AD DS GPO DNS DHCP TCP/IP Linux
Documentation
Runbooks SOPs Architecture Docs PR Templates Troubleshooting Guides

Education

Bachelor of Science, Cloud Computing

Western Governors University  ·  Salt Lake City, Utah

2026

Certifications