KRISJIAN SABALA
Oakland
Summary
Results-driven IT Systems Engineer with 9 years of experience optimizing operational efficiency and reinforcing infrastructure security across distributed corporate, healthcare, and retail environments. Achieved enhanced IT governance and sustained industry compliance through automated workflows, streamlined onboarding/offboarding processes, and effective cross-functional collaboration. Focused on delivering value through clear communication, adaptive troubleshooting, and user-centered documentation.
Overview
10
10
years of professional experience
2
2
years of post-secondary education
Work History
IT Systems Engineer
Carbon Health Technologies
Oakland
01.2022 - Current
- Support corporate and clinical environments across multi-site networks, including SD-WAN, Meraki firewalls/APs, switches, and Windows/macOS endpoints.
- Administer identity platforms (Okta, Azure/Entra, Google Workspace) to support authentication, MFA, lifecycle automation, and access governance.
- Drive onboarding/offboarding operations through Azure AD, Okta, and MDM automations, improving provisioning accuracy and reducing manual workload.
- Utilize GAM, Google API services, and MDM scripting (Intune, Jamf, Mosyle, Meraki) to streamline user, device, and group management tasks.
- Assist with API token–based automations and foundational PowerShell/Python scripting for user/device lifecycle tasks, reporting, and configuration workflows.
- Maintain documentation for standards, SOPs, runbooks, network diagrams, and operational processes across IT systems and identity platforms.
- Provide tier-3 escalation for networking, security, access, and SaaS integration issues; support basic Linux tasks within a primarily Windows/macOS environment.
Systems Administrator
Home Consignment Center
Danville
01.2021 - 01.2022
- Managed IT operations for 15 retail locations, supporting POS systems, network infrastructure, wireless access, printers, security systems, and macOS/Windows endpoints.
- Administered Meraki SD-WAN, switches, access points, VLANs, DHCP/DNS, VPN connectivity, and firewall/security rules in a multi-site retail environment.
- Led full technology deployments for new store openings, including network design, Ethernet mapping, workstation/WAP/VoIP placement, and infrastructure setup.
- Maintained VoIP systems (SIP, QoS), vendor-managed POS platforms, and site security solutions to ensure uptime, compliance, and operational continuity.
- Collaborated with PSP, ISP, Telecom, POS, and security vendors, improving incident resolution times and ensuring systems met performance, safety, and budget requirements.
IT Consultant
Silverstreak Technologies
Daly City
01.2017 - 01.2020
- Delivered IT support for SMB clients, covering identity access updates, servers, networking equipment, wireless systems, and Windows/macOS device environments.
- Implemented system upgrades, resolved diverse technical issues, and deployed hardware/software solutions across mixed cloud/on-prem infrastructures.
- Supported network segmentation, endpoint security, device patching, and SaaS administration for clients with varying compliance and operational requirements.
IT Services Specialist Associate
Muir Medical Group IPA
Walnut Creek
01.2016 - 01.2017
- Supported over 120 medical sites with user provisioning, identity access updates, and troubleshooting across Windows/macOS, clinical systems, and SaaS applications.
- Facilitated deployment, configuration, and maintenance of healthcare and business applications, ensuring compliance with HIPAA access controls and audit traceability requirements.
- Delivered escalation support for networking (LAN/WAN, VPN, Wi-Fi), server access, and clinical application connectivity in distributed clinic environments.
- Maintained SLA adherence by prioritizing support tickets based on urgency, documenting resolutions, and coordinating with cross-functional teams for effective incident management.
Education
Bachelor of Science - Information Technology
San Francisco State University
San Francisco, CA 06.2019 - 01.2021
Microsoft
AZ-900 Azure Fundamentals Certification
Skills
- Identity management
- SSO/SAML/OAuth/OIDC/SWA
- SCIM provisioning
- Identity platforms
- Network infrastructure
- Security tools
- Compliance standards
- Cloud Integration
- iOS/macOS/Windows/Linux
- Terminal/ CLI/ GAM/ PowerShell
- Device management
- Remote support tools
- Meraki/ Ubiquiti/ Palo Alto Networks
Core Competencies
iOS/macOS, Windows 10/11, working knowledge of Linux (WSL), SSO/SAML/OAuth/OIDC, Authentication Policies, MFA, SCIM Provisioning, Lifecycle Automation, RBAC, Conditional Access, PoLP, Okta, Azure/Entra ID, OneLogin, AWS IAM, Azure (AD/Entra/ VMs/VNet Firewall & Application/Network Rules), Microsoft 365, Google Workspace (GCP fundamentals), SD-WAN, Meraki/Ubiquiti firewalls/APs/switches, VLANs, Wi-Fi infrastructure, Layer 7 rules, Routing, Traffic shaping, Content filtering, DNS/DHCP, ACL, VPN (Client & Site-to-Site), Network monitoring/troubleshooting, SentinelOne, Symantec Encryption, FileVault, BitLocker, Microsoft Defender, Cloudflare, Drata, SOC2, HIPAA, PCI DSS, ONC, MDM enrollment/configuration profiles, Google API services, API Token Management, GAM, PowerShell, Intune, Jamf, Rippling, Mosyle, Meraki Systems Manager, NinjaOne, TeamViewer RMM, Quick Assist, GoToMyPC, Intune Remote Help
Timeline
IT Systems Engineer
Carbon Health Technologies
01.2022 - Current
Systems Administrator
Home Consignment Center
01.2021 - 01.2022
Bachelor of Science - Information Technology
San Francisco State University
06.2019 - 01.2021
IT Consultant
Silverstreak Technologies
01.2017 - 01.2020
IT Services Specialist Associate
Muir Medical Group IPA
01.2016 - 01.2017
Microsoft
AZ-900 Azure Fundamentals Certification