Omar MacHado

About Omar MacHado

As a seasoned IAM and Infrastructure Engineer with two decades of expertise in system engineering, security risk, compliance, and infrastructure management, I have been at the forefront of technological advancements in the healthcare sector, particularly with Baptist Health. My career journey began with hands-on roles managing Windows Server infrastructures, and I have since progressed into leadership positions, ensuring that our organization\'s critical systems and applications operate efficiently, securely, and seamlessly.Core Competencies-Active Directory Management: Expertise in upgrading, managing, and securing AD infrastructures, ensuring efficiency and security at all times-Security and Compliance: Proven track record in addressing vulnerabilities and implementing robust security measures to maintain system integrity-Infrastructure Management: Extensive experience in overseeing Windows server health, capacity planning, and application upgrades, ensuring optimal performance and high availability-Cloud and Identity Management: Proficient in integrating systems and SaaS solutions with Entra ID, playing a key role in Baptist Health\'s digital transformation journey.Beyond my technical skills, I excel in bridging the gap between technical teams, management, and vendors, ensuring seamless communication and project delivery. I am driven by the challenge of optimizing systems and integrating new technologies, always with a sharp focus on security and organizational needs.Let\'s connect and explore how we can further drive digital transformation together.

Experience

1. Iam Engineer - Lead Infosec Team

   Baptist Health

   Sep 2022 — Present · Miami, FL, US

   Hybrid Identity Management-Azure AD Connect: Oversee the configuration and management to ensure seamless and reliable synchronization between on-premises AD and AAD-Azure AD Password Protection: Design and implement robust password policies within AAD to enforce strong authentication standards-Azure AD Pass-Through Authentication: Manage and maintain PTA servers to provide secure, seamless authentication for cloud resources-Privileged Identity Management: Manage PIM to control, monitor, and audit privileged access, strengthening security around sensitive resources and reducing the attack surface-Role-Based Access Control: Design and implement an RBAC model for Azure cloud resources, ensuring access levels align with user roles and business needs-Application Integration: Led enterprise-wide projects to integrate applications with AAD using protocols like SAML, SCIM, OAuth, and OIDC, enabling secure SSO.Active Directory Management-Infrastructure Support: Manage and support a multi-site, multi-forest AD environment spanning three forests and four domains-Forest Consolidation: Actively consolidating two production AD forests, migrating over user accounts into a single AD forest-Forest Restoration: Lead the design and execution of AD backup, recovery, and disaster recovery strategies.Security Management-Conditional Access Policies: Develop and manage policies to enforce security protocols like MFA, restricting access based on user identity, location, device compliance, and risk levels-Anomaly Management: Address identity-based anomalies across the enterprise identified by CrowdStrike Falcon Identity Protection and Microsoft Defender for Identity-Least Privilege: Actively redesigning AD and AAD role-based access and delegation models for internal teams, ensuring the principle of least privilege-Issue Resolution: Troubleshoot and resolve authentication issues and hybrid identity challenges escalated by Level 1/2 support teams.

Education

• Florida Business & Computer

  Vocational Certificate, Computer Installation and Repair Technology/Technician

  1993 — 1994