CONTACT

ERWIN GERMINA
Microsoft Security Consultant • Manila, Philippines
• +63 9988440239
• egermina@[Link]
WORK EXPERIENCE

SKILLS
Inspira Tech Phils., Taguig City, Philippines
Global Cyber Security Provider (MSP & MSSP) Hard Skills:
• Vulnerability Assessment
Microsoft Security Consultant 04/2021 – Present
• Patch Management
• AD Security Assessment
● Assess and identify mobility and security gaps to streamline • Incident Response and
operations and improve overall system performance. Management
● Demonstrate and deploy effective solutions to enhance employee IT Service Management
mobility and security. • M365 Security and Compliance
● Strategically plan, design, and execute Intune deployment across • Identity and Access
various platforms. Management
● Develop and implement BitLocker to fortify data security measures • Security Information and
on Windows endpoints and servers. Event Management (SIEM)
● Conduct thorough customer estate audits to analyze landscapes,
identify gaps, and provide actionable recommendations and Techniques:
improvement roadmaps. • CIS, NIST, ISO27001, ITIL
• MITRE & ATT&CK
● Develop SOPs for deployment, delivery, and best practices to
• Data Loss Prevention (DLP)
ensure consistent and efficient processes.
Tools and Software:
● Oversee and successfully deliver projects within the ASEAN region,
• CyberArk, PAM, EPM
ensuring timely and effective execution.
• Qualys
● Collaborate closely with the global team to leverage collective
• IBM BigFix
expertise, drive innovation, and improve efficiency.
● Serve as an escalation point for the Delivery and Managed Services • Cortex XDR

team to ensure seamless operations and issue resolution. • CrowdStrike

• Proofpoint
NRI Australia & New Zealand, Taguig City, Philippines • Mimecast
IT Services & Consulting (MSP & MSSP) • Ivanti Security
• Splunk
Security Engineer 02/2023 – 04/2023
• MDE, MDI, MDCA, MDO, Intune
• PKI, VMware, JumpCloud
● Liaise with external vendors to ensure timely resolution of • AD, ENTRA ID, Entra Connect
hardware and software issues.
● Investigate vulnerability scan status and findings and consult
with cross-functional teams to develop remediation plans. EDUCATION
● Generate security reports and present findings to senior
executives. Angelicum College
● Develop and maintain relationships with internal and external Bachelor of Science in
stakeholders. Information Technology
Quezon city, Philippines
● Maintain current documentation as per contractual obligations.
2002 - 2006
● Participate in ongoing continuous improvement activities and
update operational procedures documentation. OTHER
● Monitor and action security-related incidents and requests in
ServiceNow. • VMware Certified Professional
● Investigate and remediate security Incident using security tools • Microsoft Certified Professional
such as Email Gateway Tool (e.g., Proofpoint), CyberArk PAM and • Microsoft Certified Solution
EPM tools, and Cortex XDR. Associate
• ITIL
● Monitor and respond to security incidents using ITIL processes
• Proofpoint Insider Threat
such as Incident, Problem, Change, Capacity, and Availability. Specialist
• Linux Certified Administrator
• JumpCloud Certified Core
Union Digital Bank, Pasig City, Philippines
A leading Digital Bank (Fintech)
Identity and Access Management Lead 09/2022 – 01/2023

● Subject matter expert (SME) for Office 365 security policy and
Compliance implementation, Proofpoint email security deployment,
MDM using JumpCloud, Microsoft Defender/Security Compliance,
and CrowdStrike Endpoint threat management.
● Maintains vendor partner relationships and performs stakeholder
management.
● Leads delivery teams in implementing and operating WIAM
technologies.
● Works closely with the Identity Team to design and deploy
monitoring and control systems based on WIAM policy and
instructions.
● Manages day-to-day project efforts and assists and leads offshore
team members in all aspects of IAM analysis, requirements
definition, development, operation, and evaluation.
● Skills: IT Service Management, Proofpoint, CrowdStrike, M365,
JumpCloud, Splunk, Slack, Atlassian, CIS, NIST, Saviynt, 1Kosmos,
Intune, PowerShell

Thomson Reuters, Taguig City, Philippines

World’s leading News & Information-based tools provider (Conglomerate)
Sr. Engineer Identity and Access Management 09/2022 – 01/2023
● Collaborate with IAM teams to administer and integrate new
Directory Services capabilities.
● Execute day-to-day application maintenance, monitoring,
processing, and user support for multiple Directories.
● Investigate the root cause of identified problems and recommend
solutions.
● Develop and implement solutions for defects and collaborate with
the IAM engineering team on solutions when appropriate.
● Support engineering initiatives related to domain consolidation and
migration programs.
● Manage server vulnerability mitigation and patch management.
● Work on Incident, Problem, and Change Management disciplines.
● Act as a technical expert on directory services initiatives,
emphasizing Virtual Directory Services.
● Manage Identity technologies and protocols such as SAML, LDAP,
Kerberos, Radiant Logic, Active Directory, and MFA.
● Manage Patching, Vulnerability, and hardening of the server.
● Perform console operations, verify system availability, and conduct
monthly checks of assets against CMDB.
● Handle and respond to daily Operating System alerts.
● Skills: AD, PowerShell, Splunk, PingID, Ping Fed, SAML, LDAP, MFA,
IT Service Management (Service Now. IBM BigFix, Datadog, Radiant
Logic, CIS, NIST)
TP ICAP PLC, Taguig City, Philippines
world’s largest inter-dealer broker, the world’s largest energy & commodities broker, and the world’s leading provider of OTC
pricing data.
Wintel Messaging Engineer 04/2015 – 11/2021
● Oversee the daily Operations and escalation team of the Service Desk and Wintel Operations focusing high priority
tickets/incidents P1, P2 (Service now)
● Responsible for the commission new and Decommission EOL Windows Servers (AD, DNS, DHCP)
● Maintain the enterprise Active Directory (Multi-Domain) and Exchange environment.
● Expert level experience in incident management and the ability to perform root cause analysis.
● Provide advanced level expertise on IT issues relating to the Microsoft Windows Server AD & Exchange servers, and
Exchange Online (O365 Administration, and AD Migration)
● Facilitate knowledge sharing by creating and maintaining detailed and comprehensive documentations.
● Skills: IT Service Management, AD, Splunk, Mimecast, Clear Swift, Okta, AAD, Exchange Server, ServiceNow, Ivanti
Security, M365, VMWare, NetNames, Citrix, BES, AWS, Azure, Quest AD Manager, Qualys, CIS.

Dallah trans Arabia, Jeddah, Saudi Arabia

Leading companies in the Middle East in advanced technology and turnkey intelligent solutions in Saudi Arabia.
Systems Engineer 06/2013 – 11/2015
● Responsible for Active Directory user account management and
Administration.
● Responsible for Administering Microsoft TMG Servers.
● Administered Exchange Server Mailbox creation and Email related tasks.
● participated in the Implementation of ISO 27001. Information technology Security techniques Information security
management systems
● Projects (Lync 2013 Deployment and Migration, System Center
Operations Manager 2012).
● Implemented a company-wide Microsoft Lync, a unified
communications platform.
● Skills: IT Service Management, AD, Lync, SCOM, SCCM, AAD, Exchange
Server, TMG Server, ManageEngine, M365, VMWare.

Computer Science Corp, (now DXC) Makati City, Philippines

Multinational information technology services and consulting company
Systems Administrator 06/2012 – 11/2013
● SME for the Active Directory Compliance and Oversight Process Owner
of the Company’s Active Directory and work closely with counterpart
Global IT Support in the US (Houston and San Ramon California
Region).
● Manage and maintain Windows 2003 and Windows 2008 operating.
● Act as Queue Manager for Remedy IT Service Management.
Assigned incidents, tasks, and tickets to the Team.
● Perform various other proactive support tasks required to Support
the windows infrastructure.
● Be familiar with all aspects of troubleshooting and take part in the
● Team’s on-call rotation, in which support personnel are expected to
be available on a periodic 24x7 basis.
● Assist in, and work with, internal and external auditors.
● Support metrics reporting processes.
● Proactively look for opportunities to improve efficiency.
● Review and create / and approve the process, current or new
approach as part of SME for (Compliance and Oversight – Active
Directory).
DBP -Data Center Inc, Makati City, Philippines
DCI provides its expertise in Information Technology to Development Bank of the Philippines.
IT Specialist 03/2008 – 02/2012
● Managed IT Service Desk for companywide technical and non-
technical issues and escalation and support.
● Install, configure, and administer Windows Server 2008R2, 2003,
2000 for production, development, and testing environments.
● Manage and maintain Virtualization Environment VMWare ESX
Server
● Supporting Terminal Services, SQL, IIS. JBoss or Apache / Tomcat
for client-server bank applications Maintain and monitor system
performance, test, and troubleshoot hardware and software
problems Reviewing system logs for unusual or unauthorized
access using Centralized RSA envision, a security information and
event management (SIEM)
● Designed, planned, and implemented Group Policy, delegation
strategies, and OU structure. Skills: AD, Lync, RSA SIEM, CA Arc
Backup, AS400, Sun Solaris, Misys Equation, VMware, IBM, Dell, HP
servers.

eTelecare Global Solutions, (now Concentrix) Quezon city, Philippines

Global Leader in Digital Customer Experience
Technical Support Engineer 08/2006 – 02/2008
● Lead and supported IT Service Desk Team for companywide technical
and non-technical issues and escalation and support.
● Install new software releases, system upgrades, evaluate and install
patches and resolve software related problems.
● Installing and configuring computer hardware operating systems
and applications using Altiris Deployment Solution and Microsoft
RIS installation Service
● Providing Citrix Applications support
● Supporting staff/Users through a series of actions, either face to
face or over the telephone Respond to requests for technical
assistance in person, via phone, electronically Supporting the roll-
out of new applications.
● Answering technical queries, receive tickets from Helpdesk
automated ticketing System or transferred calls from Service Desk
Analysts
● Participated in project planning, deployment logistics, and client
profiling/needs analyst. Responsible for imaging and deploying IBM
T42, Dell Latitude Laptops, and IBM M52 Desktops using Microsoft
RIS and Altiris Deployment Solutions.
● It provided deployment end-user support for Windows XP, MS
Office 2003, and other desktop software. He assisted in developing
plans, strategies, and solutions for designing a new stable and
secure desktop and migrating users and services from the current
infrastructure into the new design.
● Assisted in documenting management processes.
● Skills: AD, Altiris, Citrix, Windows 7, MS Office, IBM T42, Dell
Latitude, MS RIS