Secure, modern IT for growing companies.

I'm Andy Gibran López Nambo, a Modern Workplace, Cloud & Security engineer. I replace manual setups with managed, protected and automated systems, from the endpoint to the cloud.

View projects Contact
Managed environment Protected
  • Microsoft Entra ID Identity & MFA
    Enforced
  • Microsoft Intune Device management
    Managed
  • Windows Autopilot Device provisioning
    Zero-touch
  • CrowdStrike Falcon Endpoint protection
    Active
  • Microsoft Purview Data classification
    Labeled

Time to deploy new PCs

Before~2 days per PC
After10 PCs in 1 hour

Real result from a manufacturing company fleet, 2025.

Tools I work with every day

  • Microsoft 365
  • Intune
  • Entra ID
  • CrowdStrike
  • Purview
  • PowerShell
  • Python
  • n8n

What I take care of.

Five areas that keep a growing company's technology secure, manageable and documented.

  • Endpoint management

    Every device enrolled, configured and compliant from day one.

    Zero-touch provisioning with Windows Autopilot and Intune, central control through Entra ID, and automated patching.

    • Intune
    • Autopilot
    • Entra ID
    • Action1

  • Identity & access

    Sign-in you can trust.

    Identity hardening and MFA across the organization, so access follows the person and not the machine.

    • Entra ID
    • MFA

  • Security & compliance

    Next-gen protection instead of legacy antivirus.

    EDR migration to CrowdStrike Falcon, data labeling with Microsoft Purview, and hardening of IoT devices, web apps and servers.

    • CrowdStrike Falcon
    • Purview
    • Hardening

  • Cloud collaboration

    One secure ecosystem for mail and files.

    Corporate email consolidated in two phases, from Telmex to Google Workspace and then to Microsoft 365, with OneDrive and SharePoint.

    • Microsoft 365
    • Outlook
    • OneDrive
    • SharePoint

  • Automation & documentation

    Repeatable by design, and written down.

    Deployments, patching and business processes automated, with runbooks and onboarding kept as Markdown in GitHub.

    • PowerShell
    • Python
    • n8n
    • GitHub

The Transformation

I find weaknesses in infrastructure and the way teams work — and turn them into modern, secure, automated systems. Here's the trail.

  • Zero-touch deployment
  • Identity & MFA hardening
  • Next-gen EDR
  • Cloud-first collaboration
  • Documentation culture
2018 — 2025 Foundations

From the classroom to the field

  • 2018–2024 · B.Sc. Computer Systems Engineering · ITM (Specialty: Information Security)
  • 2022 · Project Analyst · TotalPlay — VBA automation for fiber-optic rollout
  • 2023 · 1st place · internal CTF / OWASP challenge (with KPMG)
  • 2023–2024 · Network & Cybersecurity Specialist — AWS controls, ACLs, hardening
  • 2025 · Cisco — Intro to Cybersecurity (Mar) · Ethical Hacker (Jun)
AUG 2025 The Transformation begins

What I walked into

A manufacturing company running almost entirely on manual processes.

  • Machines configured by hand
  • Traditional Active Directory, no central device management
  • Manual backups · licenses tracked in spreadsheets
  • No standardization · limited mailboxes
  • Legacy website · zero technical documentation
2025 Modern Workplace & Endpoints

Zero-touch the entire fleet

Centralized and standardized the whole device fleet, then layered modern management on top: Entra ID, Intune and Windows Autopilot.

BeforeManual setup, no control
AfterManaged, compliant, automated

~2 days per PC → 10 PCs ready in 1 hour

  • Entra ID
  • Intune
  • Autopilot
  • Action1
  • PowerShell
2025 Cloud-First Collaboration

Email, reborn — twice

Consolidated corporate mail in two strategic phases: stabilize first, then standardize on a single secure ecosystem.

PathTelmex → Google Workspace
NowMicrosoft 365
  • Microsoft 365
  • Outlook
  • OneDrive
  • SharePoint
2025–26 Security & Compliance

Raising the security bar

  • Migrated to a next-gen EDR (CrowdStrike Falcon) from legacy AV
  • Microsoft Purview — data labeling & classification
  • IoT hardening — remediated vulnerable cameras via firmware
  • Web hardening — fixed SQL injection & more; server hardening
  • CrowdStrike Falcon
  • Purview
  • Hardening
2026 Web & DevOps

A corporate site that never sleeps

BeforeHTML/CSS/JS on Telmex hosting
AfterAstro + Vercel CI/CD + Cloudflare

Lower cost, higher availability, better performance & SEO.

  • Astro
  • Tailwind
  • GSAP
  • GitHub
  • Vercel
  • Cloudflare
2026 Automation & Documentation

Make it repeatable. Write it down.

  • PowerShell — deployments, patching, configuration
  • Python — repetitive tasks & data processing
  • n8n — business-process automation & integrations
  • Docs in GitHub — runbooks & onboarding as Markdown
  • PowerShell
  • Python
  • n8n
  • GitHub
Today Where I'm at

Modern Workplace, Cloud & Security Engineer

I modernize infrastructure and the way teams work — with security by design, from the endpoint to the cloud.

View projects Explore the Vault

Work that shipped.

Four projects from one manufacturing company, each from problem to result.

Zero-touch device fleet

Problem
Machines were configured by hand, taking about two days per PC with no central device management.
Solution
Standardized the whole fleet and layered Entra ID, Intune and Windows Autopilot on top.
Result

10 PCs ready in 1 hour

  • Entra ID
  • Intune
  • Autopilot
  • PowerShell

Endpoint protection upgrade

Problem
Legacy antivirus, vulnerable IoT cameras, a web app with SQL injection and no data classification.
Solution
Migrated to CrowdStrike Falcon, labeled data with Purview, patched firmware and hardened the web servers.
Result

Next-gen EDR in place and vulnerabilities closed

  • CrowdStrike Falcon
  • Purview
  • Hardening

Email consolidation

Problem
Corporate mail ran on Telmex with limited mailboxes and no standard across the company.
Solution
Moved mail in two phases: Telmex to Google Workspace to stabilize, then to Microsoft 365 to standardize.
Result

One secure ecosystem for mail and files

  • Microsoft 365
  • Outlook
  • OneDrive
  • SharePoint

Corporate website

Problem
A legacy HTML/CSS/JS site on Telmex hosting.
Solution
Rebuilt it with Astro, Tailwind and GSAP, with CI/CD from GitHub and Cloudflare in front.
Result

Lower cost, higher availability, better SEO

  • Astro
  • Tailwind
  • GitHub
  • Cloudflare

Let's secure and modernize your IT.

Tell me about your environment and I'll reply with where I'd start. Available for remote engagements with U.S. teams.

Email me LinkedIn GitHub