DEFENSIVE CYBERSECURITY • IAM • HOMELAB ENGINEERING
Luis Baldera | Security Portfolio & Labs
Cybersecurity professional & systems engineer documenting practical cloud security architectures, Zero Trust architecture, enterprise identity management (Entra ID), and hands-on detection engineering.
NETWORK DEFENSE
8 min read
Deploying a virtualized pfSense firewall gateway on Proxmox VE. Creating air-gapped Linux bridges (vmbr1), routing Active Directory traffic through custom DHCP pools, and locking down WAN management.
pfSense
Proxmox VE
Air-gapped Network
Active Directory
HOMELAB SECURITY & PKI
7 min read
Configuring Caddy to manage internal PKI and certificates for local applications like CasaOS. Covers port conflict diagnostics (reclaiming 443 from legacy Nginx) and deploying root CA trust stores across Windows and Linux.
Caddy
TLS/HTTPS
Reverse Proxy
Internal PKI
M365 & Entra ID Security Hardening
Defensive security and data protection project focused on the Microsoft ecosystem (Entra ID, SharePoint, Teams, and Intune). Developed frameworks for Security Posture Assessment, IAM policy design, endpoint/Intune hardening, and incident readiness.
Entra ID
M365 Data Protection
Intune Hardening
Conditional Access
Security Posture
Enterprise Virtualization & Active Directory Lab
Multi-tier Proxmox home lab replicating enterprise IT environments, including a Windows Server domain controller managing Active Directory, DNS, and DHCP, joined Windows 10/11 workstations, and Group Policy configuration for identity and endpoint scenarios.
Proxmox VE
Windows Server DC
Active Directory
Group Policy (GPO)
Sysmon & Endpoint Log Analysis
Configured intermediate Sysmon profiles on lab endpoints to capture deep process creation, network connection, and privilege escalation telemetry. Practice proactive log parsing and anomaly detection against simulated suspicious techniques.
Sysmon
Windows Event Logs
Threat Detection
Telemetry
Obsidian Security Vault & Labs
Technical knowledge vault documenting enterprise PKI, Entra ID, network isolation, and Sysmon telemetry. Explore live write-ups including pfSense + Proxmox and Caddy TLS Reverse Proxy.
pfSense
Caddy TLS
Proxmox VE
Obsidian
I am an IT professional with 8+ years of enterprise support and identity/access administration experience, specializing in data security operations, Microsoft Defender XDR, Active Directory, Entra ID, and least-privilege governance across Microsoft 365.
Mission: Building verifiable security defenses through hands-on virtualization labs, endpoint telemetry inspection, robust identity boundaries, and transparent technical documentation.
PRIMARY SPECIALIZATION
Data Security, IAM & Microsoft 365 Security
EXPERIENCE DEPTH
8+ Years Enterprise IT & Identity Support
LANGUAGES
English (Fluent) • Spanish (Native)
Microsoft Defender XDR
Security Alert Triage & Escalation
Sysmon Log Analysis
Incident Response Coordination
Endpoint & Policy Hardening (Intune, GPO)
DLP / Data Security Posture (Purview)
Microsoft Entra ID (Azure AD)
Active Directory (AD DS)
Conditional Access
Multi-Factor Authentication (MFA)
Least-Privilege Enforcement
Access, Permissions & Exposure Review
SharePoint Security & Permissions
OneDrive Access Governance
Exchange Online Protection
Microsoft Teams Security
Windows Server Administration
Proxmox Virtualization
PowerShell Scripting & Automation
ServiceNow ITSM & Dashboards
Jira Service Management
Zendesk SLA Management
Audit Documentation & SOPs
Cross-Functional Collaboration
Certified in Cybersecurity (CC)
ISC2 • Verified September 2026
Official foundational credential from (ISC)² validating critical foundational cybersecurity concepts across access controls, network security, security operations, and incident response governance.
Verify Credential
Azure Fundamentals
Microsoft • Verified September 2026
Demonstrates foundational knowledge of cloud services and how those services are provided with Microsoft Azure.
Verify Credential
Security, Compliance, and Identity Fundamentals
Microsoft • Verified September 2026
Demonstrates foundational knowledge of security, compliance, and identity concepts on Microsoft platforms including Entra ID, Microsoft Purview DLP, Microsoft Defender, and Azure governance.
Verify Credential
International Academic Qualifications
World Education Services (WES) • Verified May 2023
Verified evaluation of international academic credentials, confirming equivalent standards for international professional and academic qualifications.
Verify Credential
Curriculum Vitae & Experience Record
Explore my complete chronological career history, including enterprise support engineering at Abt Global, experience as a Security Analyst Level 1 consultant, academic degree details, and active certifications.
RECENT ROLE
IT Support Engineer
Abt Global (2019 – Present)
EDUCATION
B.S. Informatics Engineering
UAH (Caracas) • Evaluated by WES
CERTIFICATIONS
ISC2 CC (Certified)
Microsoft SC-900 (Certified)