Hi, I'm
Kevin Maximiliano Palma Romero.

Challenge

Azure client identities (Service Principals) needed to be managed securely and centrally, preventing secrets from being stored in plain text. Additionally, the generated HTML audit files required controlled access without exposing direct storage paths.

Solution

A full-stack internal platform (Astro, Tailwind, Azure Functions) was built to automate Service Principal registration: tenant-id and app-id are persisted in Azure Table Storage, while secrets are stored encrypted in Key Vault. An Azure Function detects HTML file creation in a Storage Account and auto-generates a Web App endpoint with custom authentication, blocking direct HTML access without login.

Impact

Challenge

Auditors needed to mass-analyze resources across multiple Azure tenants without writing KQL manually or relying on persistent access credentials. The manual process was slow, repetitive, and provided no way to export results for downstream analysis.

Solution

An internal auditing tool (Astro, Tailwind, Azure Resource Graph) was built with a visual query interface: users select subscriptions, resource groups, and resource types with dynamic filters — no KQL required. Includes pre-built templates for the most common audit cases (orphan resources, public IPs, unconfigured Private Endpoints) and CSV export for downstream raw-data analysis.

Impact

Challenge

Critical resources (VMs, databases, App Services) needed to be moved between different subscriptions with minimal downtime, in scenarios where Azure's native move was not supported. The production environment could not tolerate extended maintenance windows.

Solution

A migration strategy was executed using database backups, App Service cloning, and IaC-based resource recreation at the destination. Each phase was coordinated with agreed maintenance windows, with cross-RG and cross-subscription dependency validation before every move.

Impact

Challenge

The client needed to audit excessive permissions and enforce security policy compliance across multiple Azure subscriptions. Manual review was slow, error-prone, and unable to scale with the growing environment.

Solution

Advanced PowerShell scripts were developed to generate automated RBAC assignment reports, extract high-privilege roles, and surface access anomalies. Deliverables were structured to directly support the security team's decision-making process.

Impact

Challenge

The client's Azure environment lacked visibility into orphaned resources, suboptimal configurations, and governance gaps accumulated over time. There was no centralized inventory or periodic review process in place.

Solution

A deep analysis was performed using Cloudockit and Azure Resource Graph to inventory all assets, identify ownerless resources, and detect configuration gaps. The outcome was a prioritized corrective action plan delivered with estimated impact per item.

Impact

Challenge

The client struggled to estimate and control spending in their dynamic Azure environment, with no tools to translate technical costs into business-understandable terms. The lack of visibility made it hard to justify investments in Reserved Instances or other optimizations.

Solution

Custom calculators and cost estimation reports were designed comparing PAYG, 1y Reserved Instances, and 3y Reserved Instances scenarios. The deliverables allowed the client to align technical spending with their strategic budget and make investment decisions backed by data.

Impact

Challenge

There was a significant gap between technical teams and business stakeholders when presenting complex architectures or justifying cloud adoption decisions. Purely technical reports failed to generate executive buy-in or shared understanding.

Solution

Detailed documentation and high-impact visual presentations were created using Canva and diagramming tools, aligned with the Cloud Adoption Framework (CAF). The presentations translated technical concepts into business value, facilitating initiative approval and cross-team alignment.

Impact