Balawal Raja

Senior IT Systems Engineer. I automate onboarding, identity and device management so IT teams stop doing it by hand.

Planned the move from OneLogin to Okta. Managed 400+ devices. Built 13 automation and cloud projects.

Okta, Jira, Google Workspace, HiBob, Slack, macOS, AWS

Open to IT Engineer, Systems Engineer and IT Support Engineer roles.

Based in London. Available for remote and hybrid work.

View Projects Download CV LinkedIn

Balawal Raja - Senior IT Systems Engineer

Platforms I work with every day

The identity, device, network and workflow tools behind the automation on this site

13+

Cloud Projects

400+

Devices Managed

4

Certifications

15+

Automation Scripts

About

I’m a Senior IT Systems Engineer with a strong hands-on background in IT engineering, technical operations, and DevOps-adjacent work — an automation-first mindset applied to enterprise-scale systems in a high-growth environment.

In my current role I work across identity (Okta; SAML, SCIM, OIDC), MDM fleets (Jamf), office networking (Meraki), compliance (SOC 2 / ISO 27001), and AWS automation with Lambda, API Gateway, and related services. Outside of work I keep building with Terraform, AWS, GCP, and a Proxmox-based homelab.

My focus is on using automation and infrastructure knowledge to reduce manual work, improve reliability, and build secure, scalable systems — with a friendly, end-user-focused approach. I started in technical support (McAfee, then 2nd/3rd line IT support), so I’m comfortable with end users, escalations and day-to-day IT operations.

What I Work With

Cloud, automation, and operations tooling I use in production and in the lab

Cloud & Infrastructure

  • AWS: Lambda, API Gateway, EC2, S3, Step Functions, SNS, SES
  • Cross-account access via STS role assumption
  • Terraform — VPC, EC2, IAM, and networking modules
  • AWS SAM / CloudFormation for serverless deployments
  • Proxmox homelab for infrastructure experimentation

Automation & Systems

  • Python & Bash — automating compliance checks, device config, and IT security tasks
  • MDM fleets — Jamf Pro (primary); familiar with Kandji / Fleet-class tooling
  • Jira-driven workflow automation (webhooks → Lambda)
  • Multi-system orchestration: HiBob, Duo, Google Workspace, M365, Snipe-IT

Security & Operations

  • Identity & access: SAML, SCIM, OIDC — Okta, Google Workspace, Duo
  • Office networking — Cisco Meraki / Ubiquiti, including office buildouts
  • SOC 2 / ISO 27001 & Cyber Essentials Plus alignment
  • Jamf Pro & Jamf Protect — CIS Level 1 compliance
  • IAM least privilege, SSM secrets, HMAC webhook validation

Homelab & Self-Hosted Infrastructure

I maintain a self-hosted lab environment using Proxmox to experiment with infrastructure, networking, automation, and cloud-adjacent workflows in a controlled setting.

This environment helps me test deployment patterns, understand infrastructure operations, and build confidence with systems outside of my day-to-day role.

View homelab overview

Contact

Use the form below for roles, collaborations, or technical discussions. I typically respond within a few business days.

Projects Portfolio

Explore AWS, Terraform, automation, and infrastructure projects

Homelab

Self-hosted Proxmox environment for networking, automation, and cloud-adjacent workflows

Professional Experience

My journey in Systems Engineering and IT Infrastructure

Senior IT Systems Engineer

Currently Working

ZAVA Online Doctor

Aug 2026 – Present

Lead IT engineering and technical operations in a high-growth healthcare environment, with an automation-first mindset across enterprise-scale systems — identity, endpoints, networking, compliance, and cloud-backed workflows. Friendly, end-user-focused approach alongside technical delivery.

Security & Compliance
  • Own and maintain controls aligned with SOC 2, ISO 27001, and Cyber Essentials Plus
  • Drive security posture and compliance automation across the IT estate
MDM & Endpoint Strategy
  • Lead MDM strategy for the device fleet — primarily Jamf, with familiarity across the broader landscape (e.g. Kandji, Fleet)
  • Set standards for provisioning, configuration, and compliance enforcement at scale
Automation & Platform Engineering
  • Design and expand webhook-driven AWS automation using API Gateway, Lambda (Python), and SSM Parameter Store
  • Use Python and Bash to automate compliance checks, device configuration, and IT security tasks
  • Focus on reducing operational toil and lowering the cost of repetitive IT work
Identity & Access
  • Strong knowledge of identity protocols — SAML, SCIM, and OIDC
  • Migrated 40+ SAML, SCIM and SSO apps from OneLogin to Okta, collaborating with HR, DevOps and other teams; group-based access, authentication policies and Okta Workflows
  • Own identity integrations across Okta, Google Workspace, and related platforms
Office Networking
  • Oversee office network equipment including Cisco Meraki, including support for office buildouts
Leadership & Collaboration
  • Mentor junior team members and provide technical guidance on complex escalations
  • Partner with engineering teams via Jira on infrastructure and automation priorities
SAML / SCIM / OIDC Okta & Google Workspace Jamf / MDM Strategy AWS Lambda & API Gateway Python & Bash Cisco Meraki SOC 2 & ISO 27001 Mentoring

Systems Engineer

ZAVA Online Doctor

Aug 2023 – Jul 2026

Managed and optimised IT infrastructure in a fast-paced healthcare environment: endpoint and network operations, security and compliance, identity, and automation across Jamf Pro, Jamf Protect, Meraki, and integrated cloud tooling.

Security & Compliance
  • Implemented Jamf Protect to achieve CIS Level 1 compliance on macOS endpoints
  • Supported and aligned controls with ISO 27001, Cyber Essentials Plus, and SOC 2 (US) frameworks
  • Performed patch management, system audits, and contributed to broader cybersecurity compliance initiatives
  • Contributed to disaster recovery and business continuity planning, including documentation and testing
Infrastructure & Endpoint Management
  • Administered Cisco Meraki infrastructure (LAN/WAN, VLANs, WiFi, VPN) ensuring secure and reliable operations
  • Handled endpoint lifecycle management using Jamf, including provisioning, configuration, and compliance enforcement
  • Replaced SentinelOne with Jamf Protect across 400+ endpoints on my own, then introduced CrowdStrike. Jamf Protect now runs in monitoring mode
Automation & Efficiency
  • Designed and implemented automation using webhooks, AWS API Gateway, Lambda (Python), and SSM Parameter Store to eliminate repetitive tasks
  • Reduced manual workload, improving team efficiency and lowering operational costs
  • Developed additional automation using Bash and Python for onboarding, provisioning, and policy enforcement
Identity & Access Management / Tools
  • Managed identity and access systems including Okta, OneLogin, Google Workspace, Office 365, and Duo
  • Maintained secure integrations with Slack and Qualys to support monitoring and vulnerability management
Support & Collaboration
  • Delivered 2nd/3rd line support, handling escalations and complex technical issues
  • Collaborated with engineering teams via Jira to resolve incidents, bugs, and infrastructure issues
Jamf Pro & Jamf Protect CIS & Compliance Meraki Okta & Identity AWS Lambda & API Gateway Python & Bash Jira ISO 27001 & Cyber Essentials

IT Support Engineer (2nd/3rd Line)

ZAVA Online Doctor

May 2021 – Aug 2023

Delivered advanced support across endpoints, networks, and SaaS platforms in a hybrid environment. Managed user lifecycle and access across multiple identity platforms and led a 400+ endpoint upgrade initiative to improve performance and security tooling.

2nd/3rd Line Support Endpoint Upgrades Identity Platforms Patch Management Compliance Support

Technical Engineer (German Speaking)

McAfee

Jan 2021 – Apr 2021

Provided enterprise-level cybersecurity support to EMEA clients, diagnosing and resolving advanced endpoint and security product issues while collaborating with internal teams on complex escalations.

Enterprise Security Support Endpoint Troubleshooting Incident Escalation EMEA Customer Support German Language Support

Trainee Cloud Support Engineer

Amazon Web Services (AWS)

Nov 2019 – Apr 2020

Completed intensive training in AWS services, Linux administration, Bash scripting, and SQL through hands-on labs and deployment scenarios, including collaborative technical presentations.

AWS Services Linux Administration Bash Scripting SQL Cloud Support

Additional Training

Structured cloud and systems training

AWS re/Start Program

Completed the AWS re/Start program with hands-on work across AWS Cloud, Linux administration, MySQL, and Python and Bash scripting, including collaborative technical presentations. I apply that baseline alongside production experience to design, automate, and support cloud-backed workflows.

AWS Cloud Linux Administration MySQL Python Bash Scripting

Certifications

Professional credentials and achievements