Balawal Raja

Senior IT Systems Engineer specialising in IT operations automation — using AWS to build cloud-native workflows that replace manual work across employee lifecycle, identity, and asset management.

I build event-driven automation on AWS — serverless functions triggered by Jira webhooks, Step Functions for multi-step workflows, Terraform for repeatable infrastructure, and API Gateway to tie it all together.

Outside of work I run a two-node Proxmox homelab with 20+ containers — including n8n, Ollama, Authentik, and Grafana — and use it to test and refine patterns before applying them in production.

Looking for a Senior Systems or Cloud Engineer who ships production automations?

I’m open to roles in systems engineering, cloud infrastructure, or IT automation where I can keep building things that reduce manual work and improve operational reliability.

View Projects Download CV LinkedIn

Balawal Raja - Senior IT Systems Engineer

11+

Cloud Projects

250+

Devices Managed

4+

Certifications

15+

Automation Scripts

About

I’m a Senior IT Systems Engineer with a strong hands-on background in IT engineering, technical operations, and DevOps-adjacent work — an automation-first mindset applied to enterprise-scale systems in a high-growth environment.

In my current role I work across identity (SAML, SCIM, OIDC), MDM fleets, office networking, compliance (SOC 2 / ISO 27001), and AWS automation with Lambda, API Gateway, and related services. Outside of work I keep building with Terraform, AWS, GCP, and a Proxmox-based homelab.

My focus is on using automation and infrastructure knowledge to reduce manual work, improve reliability, and build secure, scalable systems — with a friendly, end-user-focused approach.

What I Work With

Cloud, automation, and operations tooling I use in production and in the lab

Cloud & Infrastructure

  • AWS: Lambda, API Gateway, EC2, S3, Step Functions, SNS, SES
  • Cross-account access via STS role assumption
  • Terraform — VPC, EC2, IAM, and networking modules
  • AWS SAM / CloudFormation for serverless deployments
  • Proxmox homelab for infrastructure experimentation

Automation & Systems

  • Python & Bash — automating compliance checks, device config, and IT security tasks
  • MDM fleets — Jamf Pro (primary); familiar with Kandji / Fleet-class tooling
  • Jira-driven workflow automation (webhooks → Lambda)
  • Multi-system orchestration: HiBob, Duo, Google Workspace, M365, Snipe-IT

Security & Operations

  • Identity & access: SAML, SCIM, OIDC — Okta, Google Workspace, Duo
  • Office networking — Cisco Meraki / Ubiquiti, including office buildouts
  • SOC 2 / ISO 27001 & Cyber Essentials Plus alignment
  • Jamf Pro & Jamf Protect — CIS Level 1 compliance
  • IAM least privilege, SSM secrets, HMAC webhook validation

Homelab & Self-Hosted Infrastructure

I maintain a self-hosted lab environment using Proxmox to experiment with infrastructure, networking, automation, and cloud-adjacent workflows in a controlled setting.

This environment helps me test deployment patterns, understand infrastructure operations, and build confidence with systems outside of my day-to-day role.

View homelab overview

Contact

Use the form below for roles, collaborations, or technical discussions. I typically respond within a few business days.

Projects Portfolio

Explore AWS, Terraform, automation, and infrastructure projects

Homelab

Self-hosted Proxmox environment for networking, automation, and cloud-adjacent workflows

Professional Experience

My journey in Systems Engineering and IT Infrastructure

Senior IT Systems Engineer

Currently Working

ZAVA Online Doctor

Lead IT engineering and technical operations in a high-growth healthcare environment, with an automation-first mindset across enterprise-scale systems — identity, endpoints, networking, compliance, and cloud-backed workflows. Friendly, end-user-focused approach alongside technical delivery.

Security & Compliance
  • Own and maintain controls aligned with SOC 2, ISO 27001, and Cyber Essentials Plus
  • Drive security posture and compliance automation across the IT estate
MDM & Endpoint Strategy
  • Lead MDM strategy for the device fleet — primarily Jamf, with familiarity across the broader landscape (e.g. Kandji, Fleet)
  • Set standards for provisioning, configuration, and compliance enforcement at scale
Automation & Platform Engineering
  • Design and expand webhook-driven AWS automation using API Gateway, Lambda (Python), and SSM Parameter Store
  • Use Python and Bash to automate compliance checks, device configuration, and IT security tasks
  • Focus on reducing operational toil and lowering the cost of repetitive IT work
Identity & Access
  • Strong knowledge of identity protocols — SAML, SCIM, and OIDC
  • Own identity integrations across Okta, Google Workspace, and related platforms
Office Networking
  • Oversee office network equipment including Cisco Meraki, including support for office buildouts
Leadership & Collaboration
  • Mentor junior team members and provide technical guidance on complex escalations
  • Partner with engineering teams via Jira on infrastructure and automation priorities
SAML / SCIM / OIDC Okta & Google Workspace Jamf / MDM Strategy AWS Lambda & API Gateway Python & Bash Cisco Meraki SOC 2 & ISO 27001 Mentoring

Systems Engineer

ZAVA Online Doctor

Managed and optimised IT infrastructure in a fast-paced healthcare environment: endpoint and network operations, security and compliance, identity, and automation across Jamf Pro, Jamf Protect, Meraki, and integrated cloud tooling.

Security & Compliance
  • Implemented Jamf Protect to achieve CIS Level 1 compliance on macOS endpoints
  • Supported and aligned controls with ISO 27001, Cyber Essentials Plus, and SOC 2 (US) frameworks
  • Performed patch management, system audits, and contributed to broader cybersecurity compliance initiatives
  • Contributed to disaster recovery and business continuity planning, including documentation and testing
Infrastructure & Endpoint Management
  • Administered Cisco Meraki infrastructure (LAN/WAN, VLANs, WiFi, VPN) ensuring secure and reliable operations
  • Handled endpoint lifecycle management using Jamf, including provisioning, configuration, and compliance enforcement
  • Led upgrade of 250+ endpoints, replacing SentinelOne to improve performance and standardise endpoint security
Automation & Efficiency
  • Designed and implemented automation using webhooks, AWS API Gateway, Lambda (Python), and SSM Parameter Store to eliminate repetitive tasks
  • Reduced manual workload, improving team efficiency and lowering operational costs
  • Developed additional automation using Bash and Python for onboarding, provisioning, and policy enforcement
Identity & Access Management / Tools
  • Managed identity and access systems including Okta, OneLogin, Google Workspace, Office 365, and Duo
  • Maintained secure integrations with Slack and Qualys to support monitoring and vulnerability management
Support & Collaboration
  • Delivered 2nd/3rd line support, handling escalations and complex technical issues
  • Collaborated with engineering teams via Jira to resolve incidents, bugs, and infrastructure issues
Jamf Pro & Jamf Protect CIS & Compliance Meraki Okta & Identity AWS Lambda & API Gateway Python & Bash Jira ISO 27001 & Cyber Essentials

IT Support Engineer (2nd/3rd Line)

ZAVA Online Doctor

Delivered advanced support across endpoints, networks, and SaaS platforms in a hybrid environment. Managed user lifecycle and access across multiple identity platforms and led a 250+ endpoint upgrade initiative to improve performance and security tooling.

2nd/3rd Line Support Endpoint Upgrades Identity Platforms Patch Management Compliance Support

Technical Engineer (German Speaking)

McAfee

Provided enterprise-level cybersecurity support to EMEA clients, diagnosing and resolving advanced endpoint and security product issues while collaborating with internal teams on complex escalations.

Enterprise Security Support Endpoint Troubleshooting Incident Escalation EMEA Customer Support German Language Support

Trainee Cloud Support Engineer

Amazon Web Services (AWS)

Completed intensive training in AWS services, Linux administration, Bash scripting, and SQL through hands-on labs and deployment scenarios, including collaborative technical presentations.

AWS Services Linux Administration Bash Scripting SQL Cloud Support

Additional Training

Structured cloud and systems training

AWS re/Start Program

Completed the AWS re/Start program with hands-on work across AWS Cloud, Linux administration, MySQL, and Python and Bash scripting, including collaborative technical presentations. I apply that baseline alongside production experience to design, automate, and support cloud-backed workflows.

AWS Cloud Linux Administration MySQL Python Bash Scripting

Certifications

Professional credentials and achievements