Ian Magparangalan

About Ian Magparangalan

Throughout my 20+ year career, I’ve worked in various roles and environments, learning about all different types of technologies and where processes were not standardized, or where network restrictions posed challenges. No matter what was asked of me, even when I had no prior experience, I always took on the challenge and excelled. I believe this has been one of my greatest strengths.I have a passion for IaC and my ability to create scripts in Bash and PowerShell has been instrumental in collaborating with different teams. I’m able to understand specific requirements and foresee potential issues when installing applications or agents, depending on the operating system. Winning the Raising the Bar - Honorable Mention award two times in a year at S&P is a testament to that.More recently, I\'ve embraced AI tools — Claude, ChatGPT, and Grok — as genuine engineering partners in my day-to-day work. I use them to accelerate infrastructure automation, generate configurations, harden security postures, and work through complex problems faster. Very few engineers are fully leveraging AI at this level yet, and I think it\'s becoming one of the most important skills in our field.

Experience

1. IT and Security Operations Manager

   Apc Postal Logistics

   Mar 2025 — Present

   When I joined APC Postal Logistics, I was brought in at a pivotal moment — the company was growing and ready to invest seriously in building out its IT infrastructure and security foundation. It was the kind of opportunity I thrive in: a chance to architect things the right way from the start, with real ownership and impact.Within 4 months I had built the company\'s entire security program from the ground up — drafting all SOPs and policies, implementing Vanta for compliance monitoring, and remediating infrastructure gaps across MS 365, Azure, AWS, and on-premises environments. We achieved SOC 2 Type I certification and I\'m currently driving us toward Type II.Beyond compliance, I\'ve been responsible for everything across the stack — endpoint security (Intune, Defender for Endpoint, AutoPatch, BitLocker), identity management (Entra ID SSO, 1Password SCIM integration), email security hardening (DMARC, DKIM, SPF), firewall and network management (SonicWall, Cisco Meraki), TLS certificate management, and DNS administration across Cloudflare and Entra Domain Services. I reduced vulnerability exposure from CVEs to under and am actively conducting Zero Trust and RBAC audits across our cloud environments to enforce least-privilege access.One thing I\'m particularly proud of is how I\'ve leveraged AI tools — Claude, ChatGPT, and Grok — as daily engineering partners. Whether it\'s generating Intune configuration policies, analyzing phishing headers, troubleshooting infrastructure issues, or accelerating compliance work, AI has allowed me to operate at a level well beyond what a single engineer would typically deliver.

Education

• Rutgers University–Newark

  Bachelor of Arts, Information Systems

• New Jersey Institute of Technology

  Bachelor of Arts, Computer Information Systems

• PC AGE Career Institute

  Diploma, Internetworking Engineering

Skills

• Network Administration
• Virtualization
• Print Management
• Vpn
• Group Policy
• Linux
• Team Leadership
• System Monitoring
• Data Center
• Lync
• Microsoft Office
• Dell Poweredge Servers
• System Deployment
• Servers
• Linux System Administration
• Kbox
• Dns
• Symantec Endpoint Protection
• Databases
• Video Conferencing
• Virtual Private Network (Vpn)
• Customer Service
• Vmware
• Sharepoint
• Active Directory
• Windows Server
• Puppet
• Dell Kace
• Dhcp
• Firewalls
• Lifesize Video Conferencing
• Data Center Operations
• Kickstart
• Iis
• File Servers
• Domain Name System (Dns)
• Tcp/Ip
• Hp Proliant
• Windows 7
• Desktop Support Management