I keep hybrid infrastructure running, then automate what's left.

Systems administrator in Metro Manila with 5+ years in enterprise IT. I run AWS, Azure, GCP and on-prem Hyper-V for 8,000+ users, and I build n8n workflows that take repetitive work off people's plates.

Get in touch See my homelab
Datacenter (acl-clusters) / node acl
    Select anything in the tree to see what it does.

    Where I've worked

    1. Mar 2026 – now

      IT Systems Administrator

      Acquire Intelligence (RingCentral), Ortigas Center
      • Run a hybrid multi-cloud estate for 8,000+ users: AWS, Azure and GCP tenants, two Okta tenants, Active Directory, about 80 AWS servers and 100 on-prem Hyper-V servers.
      • Wrote Terraform modules for AWS IAM, EC2, RDS and WorkSpaces to automate provisioning and deprovisioning.
      • Built an AWS resource-optimization dashboard showing inventory, utilization and cost across tenants.
      • Set up AI application deployment in Okta with SCIM provisioning and push groups.
      • Led tenant-wide security hardening, and take the L3 escalations that L1 and L2 can't resolve.
    2. Jan 2025 – Mar 2026

      IT Service Delivery Engineer

      Transcom Worldwide Philippines, Ortigas East
      • Managed Zscaler (ZIA) policies and whitelisted campaign-specific domains so remote agents had full access.
      • Kept on-prem network and systems hardware healthy with the engineering teams to protect site uptime.
      • Hit a 99.54% SLA on 600+ high-complexity ServiceNow tickets and won the "Most Productive IT" award.
    3. Mar 2024 – Dec 2024

      Service Desk Analyst

      CGI Philippines, Ortigas Center
      • Resolved complex ServiceNow incidents above SLA targets and managed VMs and user access in Proxmox.
      • Wrote knowledge articles that cut recurring L1 tickets by 15%.
    4. Mar 2021 – Jan 2024

      Coding Technician

      Canon Business Process Services, Ortigas Center
      • Administered on-prem identity and access with RBAC for security and compliance.
      • Automated user onboarding and offboarding with PowerShell, and handled remote software deployment.

    Automation with n8n

    n8n is the tool I reach for most, both at work and in my homelab. These are the workflows I've built.

    Ticket automation

    Repetitive tickets in FreshService are handled by workflows that call the FreshService and Active Directory APIs, so common requests are resolved without hands-on work.

    Server and downtime alerting

    Workflows catch server downtime and critical alarms and send real-time alerts, so serious problems reach the right people quickly.

    An AI agent for my mailbox

    An agentic workflow reads my mailbox for emails about specific service updates, records them in a Google Sheet, and sends a webhook message. It also flags vendor support replies and incidents.

    Email, then AI agent, then Google Sheet, then webhook

    At home

    My homelab n8n server sends alerts to Telegram and is where I learn and test new workflows before using them at work.

    The homelab

    The panel at the top of this page is my real Proxmox VE cluster. Traffic comes in from my ISP through a MikroTik firewall, DNS goes through AdGuard, and Nginx reverse-proxies everything except Proxmox, and Cloudflare provides public DNS so services like n8n can be reached safely from outside. Uptime Kuma and n8n watch the critical services. Tailscale groups let my relatives reach only Jellyfin and n8n, while I can reach it all. My main PC runs Terraform to build the infrastructure as code.

    ISP MikroTik hEX RB750Gr3Firewall + VLANs (main) Main PCTerraform (IaC) provisions Proxmox VE · node acl AdGuardDNS NginxReverse proxy TailscaleVPN · group ACLs everything except Proxmox JellyfinMedia · family access Uptime KumaCritical service checks n8nAlerts · family access FamilyJellyfin, n8n only MeFull access TelegramAlerts to my phone JenkinsCI/CD · pending GitLabCI/CD · pending NextcloudPersonal cloud · pending DockerUpdate pending MinikubeKubernetes · planned Running Pending Planned Critical: watched by Uptime Kuma and n8n CloudflarePublic DNSpublic access

    Proxmox is also where I started managing VMs and user access professionally, back at CGI.

    Skills

    Identity and systems
    Okta, Active Directory, Proofpoint, Azure, GCP, AWS, Linux
    Virtualization
    Proxmox VE, Hyper-V, VMware, VirtualBox, AWS EC2, Google Compute
    Networking
    DNS, DHCP, VLAN, firewalls, Zscaler, Mikrotik
    Automation
    n8n, Terraform, Ansible, PowerShell, Bash, Python
    Certifications
    Microsoft AZ-900 Azure Fundamentals, Google IT Support Specialization, Akamai Networking Fundamentals
    Education
    Diploma in Information Technology, Polytechnic University of the Philippines, 2017–2020

    Say hello

    I'm looking for my next challenge supporting, optimizing and automating on-premise and hybrid infrastructure. Email is the fastest way to reach me.

    cjosh.macas@gmail.com