Alex Gomez
Cloud & Security Engineer
AWS · IAM & Endpoint Telemetry · Applied AI/ML
About Me
I'm a cloud-leaning engineer with 3+ years building production IAM, endpoint telemetry, and secure automation across multi-site infrastructure. Currently IT Engineer II at Propelus, where I drive SOC 2 evidence collection, operate SentinelOne detection across a 305-endpoint fleet, and run an Okta + RBAC framework spanning ~300 users.
On the side I build full-stack apps in Python/Flask and TypeScript/Next.js on top of Postgres, and I'm finishing an MS in Applied AI & IoT at FIU — focused on the seam between security data, cloud services, and applied ML.
Technical Skills
Cloud & Security
Languages
Data & Backend
AI / ML
DevOps
Security Practice
Featured Projects
Sancti | Next.js + Supabase App
A Next.js + TypeScript web app deployed on Vercel, with a
sibling React Native / Expo mobile client sharing lib, prompt, and type
layers on top of a Supabase Postgres data tier with versioned SQL
migrations. Identity-aware data access is enforced through
Row Level Security (auth.uid() = user_id) with split
service-role vs. authenticated grants. Server-only secrets are kept out of mobile and
browser bundles via strict EXPO_PUBLIC_* separation. A per-IP token-bucket rate
limiter (8/min) shields Gemini-backed API routes, with Sentry + PostHog
observability and a model-fallback path for 429s. Tests run on a mocked Gemini SDK.
IT Support-Ticket Triage Classifier
Built and benchmarked three NLP classifiers — TF-IDF + logistic regression, a 1D CNN, and a BiLSTM — for IT support-ticket routing over ~11,920 English tickets. Owned the full pipeline from data cleaning through model evaluation and documented results in an IEEE-format paper. Same supervised text-classification pattern that powers automated alert and event triage in production security tooling.
MangaMatcher | Full-Stack Web App
Recommendation system that helps users discover manga through an interactive quiz and swipe-based interface. Built a TF-IDF + cosine similarity model from scratch in scikit-learn for personalized recommendations, and integrated the Google Gemini API so users can chat with AI personas of their favorite characters. Full stack: React frontend, Flask REST API, and SQLite for user preferences and inventory. Submitted to ShellHacks 2025.
VoltGrid | EV Data Warehouse
Designed a normalized PostgreSQL database and ETL pipeline in Pandas to ingest 30,000+ real-world charging sessions from Caltech. Tuned geospatial queries with PostGIS and B-tree indexes, cutting execution time ~60% for complex aggregations.
Experience
IT Engineer II
Propelus | Aug 2022 — Present
- SOC 2 evidence collection: Drive evidence collection across IT Security — access reviews, logical access, change management, and encryption posture — ahead of audits and on continuous-monitoring cycles.
- Detection & threat hunting: Operate SentinelOne as the day-to-day detection layer for a 305-endpoint fleet — triage alerts, run threat-hunting queries, isolate compromised hosts, and execute response workflows on real infrastructure.
- Endpoint posture & compliance: Run posture and compliance in Mosyle MDM across ~500 managed devices; authored compliance profiles and automation scripts, enforced full-disk encryption, and produced audit-aligned device-posture reports.
- IAM, ZTNA & access boundaries: Designed an Okta + RBAC framework across ~300 users and 100 groups, with SAML / SCIM integrations to downstream SaaS and least-privilege group-based isolation; configured Appgate SDP entitlements for ZTNA access.
- Secure automation: Built Python and Bash automation for unattended provisioning, configuration enforcement, and bulk identity workflows — cutting manual operational work ~40% across multi-site infrastructure.
- Access governance: Administer Brivo physical access control as a tenant admin — credential lifecycle (PIN, mobile pass, badge), access-group policy, and audit-trail review.
Education
M.S. in Applied AI & IoT
Florida International University
Expected Dec 2026
Coursework: Advanced Deep Learning (NLP text classification), Data Analytics, Power BI / data modeling.
B.S. in Internet of Things
Florida International University
Dec 2024
Certifications
GIAC Cloud Security Essentials (GCLD)
SANS Institute
AWS Certified Cloud Practitioner
Amazon Web Services
Azure Fundamentals (AZ-900)
Microsoft
Azure AI Fundamentals (AI-900)
Microsoft
Azure Data Fundamentals (DP-900)
Microsoft