I replace manual work with systems that run themselves.

I'm Andy Gibran López Nambo, an IT engineer. I moved a millwork company in Arizona from a spreadsheet to a live job system, and cut device setup from two days per PC to three PCs an hour.

See the results Work with me

Download my CV: English Español PDF

Technologies I work with

Microsoft 365

  • Microsoft 365
  • SharePoint
  • OneDrive
  • Outlook

Identity and security

  • Entra ID
  • Intune
  • Purview
  • CrowdStrike Falcon

Automation

  • Power Automate
  • Power Apps
  • n8n
  • Make
  • PowerShell
  • Python

Cloud and business apps

  • Google Workspace
  • Cloudflare
  • Vercel
  • QuickBooks

How I can help.

Three things I do, each with a result behind it.

  • Replace spreadsheets with a system

    Custom apps and automations connected to the tools you already use.

    Web apps, email alerts and integrations with QuickBooks, Microsoft 365 and SharePoint, so work moves without someone copying data by hand.

    At JC Millwork, 303 jobs run in one live system. Estimates go to QuickBooks, and a job updates itself when the client accepts.

  • Set up and manage your devices

    Every computer enrolled, configured and kept up to date.

    Zero-touch setup with Intune and Autopilot, policies that keep company data safe, and patching that runs every day on its own.

    At Harinas Guadalupe, setup went from about 2 days per PC to 3 PCs in an hour, and 110 devices are patched daily.

  • Close security gaps early

    Protection that finds problems before they cost you.

    Next-generation endpoint protection, fixes for known vulnerabilities, and hardening for devices, servers and websites.

    105 devices moved to CrowdStrike Falcon, and a remote-code-execution flaw on IP cameras was closed.

Talk about your project

The Transformation

I find weaknesses in infrastructure and the way teams work — and turn them into modern, secure, automated systems. Here's the trail.

  • Zero-touch deployment
  • Identity & MFA hardening
  • Next-gen EDR
  • Cloud-first collaboration
  • Documentation culture
2018 — 2025 Foundations

From the classroom to the field

  • 2018–2024 · B.Sc. Computer Systems Engineering · ITM (Specialty: Information Security)
  • 2022 · Project Analyst · TotalPlay — VBA automation for fiber-optic rollout
  • 2023 · 1st place · internal CTF / OWASP challenge (with KPMG)
  • 2023–2024 · Network & Cybersecurity Specialist — AWS controls, ACLs, hardening
  • 2025 · Cisco — Intro to Cybersecurity (Mar) · Ethical Hacker (Jun)
AUG 2025 The Transformation begins

What I walked into

A manufacturing company running almost entirely on manual processes.

  • Machines configured by hand
  • Traditional Active Directory, no central device management
  • Manual backups · licenses tracked in spreadsheets
  • No standardization · limited mailboxes
  • Legacy website · zero technical documentation
2025 Modern Workplace & Endpoints

Zero-touch the entire fleet

Centralized and standardized the whole device fleet, then layered modern management on top: Entra ID, Intune and Windows Autopilot.

BeforeManual setup, no control
AfterManaged, compliant, automated

~2 days per PC → 3 PCs ready in 1 hour

  • Entra ID
  • Intune
  • Autopilot
  • Action1
  • PowerShell
2026 Cloud-First Collaboration · JC Millwork

Email moved to Microsoft 365

For JC Millwork, I migrated the company's email from Google Workspace to Microsoft 365.

BeforeGoogle Workspace
AfterMicrosoft 365
  • Google Workspace
  • Microsoft 365
2025–26 Security & Compliance

Raising the security bar

  • Migrated to a next-gen EDR (CrowdStrike Falcon) from legacy AV
  • Microsoft Purview — data labeling & classification
  • IoT hardening — remediated vulnerable cameras via firmware
  • Web hardening — fixed SQL injection & more; server hardening
  • CrowdStrike Falcon
  • Purview
  • Hardening
2026 Web & DevOps

A corporate site that never sleeps

BeforeHTML/CSS/JS on Telmex hosting
AfterAstro + Vercel CI/CD + Cloudflare

Lower cost, higher availability, better performance & SEO.

  • Astro
  • Tailwind
  • GSAP
  • GitHub
  • Vercel
  • Cloudflare
2026 Automation & Documentation

Make it repeatable. Write it down.

  • PowerShell — deployments, patching, configuration
  • Python — repetitive tasks & data processing
  • n8n — business-process automation & integrations
  • Docs in GitHub — runbooks & onboarding as Markdown
  • PowerShell
  • Python
  • n8n
  • GitHub
Today Where I'm at

Modern Workplace, Cloud & Security Engineer

I modernize infrastructure and the way teams work — with security by design, from the endpoint to the cloud.

View projects Explore the Vault

Work that shipped.

What was broken, what I did, and what changed.

Home page of the JC Millwork website: a dark hero with the headline “Precision. Crafted by hand.” and an animated kitchen floor plan.

JC Millwork · Phoenix, AZ

From a spreadsheet to a live job system

Problem
Jobs were tracked in a spreadsheet, and the company website on Wix couldn’t support anything more.
Solution
Rebuilt the website with Astro and built a web app with a live view, email alerts and a QuickBooks connection. An AI-assisted estimator sends estimates to QuickBooks and updates the job tracker, and a job’s status changes by itself when the client accepts.
  • 303 jobs managed in one place
  • 248 jobs linked to a QuickBooks estimate
  • QuickBooks
  • SharePoint
  • Supabase
  • Astro
Visit jcmillworkaz.com

JC Millwork

Labor cost per job

Problem
Nobody could see what each job cost in labor, or check what was paid against hours worked.
Solution
Calculated labor cost per job from QuickBooks and audited hours against payments, with rates tracked by date.
Result

Hours checked against payments, job by job

  • QuickBooks
  • Python

Harinas Guadalupe

Zero-touch device fleet

Problem
Machines were configured by hand, about two days per PC, with no central device management.
Solution
Standardized 110 devices with Entra ID, Intune and Windows Autopilot.
Result

3 PCs ready in 1 hour

  • Intune
  • Autopilot
  • Entra ID

Harinas Guadalupe

Endpoint protection and cameras

Problem
Legacy antivirus, and Hikvision cameras with a remote-code-execution flaw that exposed passwords in plain text.
Solution
Moved to CrowdStrike Falcon and updated the cameras’ firmware.
Result

105 devices on next-gen EDR, camera flaw closed

  • CrowdStrike Falcon
  • Hardening

Harinas Guadalupe

Patching and attendance on autopilot

Problem
Patches, software inventory and employee attendance were handled by hand.
Solution
Automated daily patching and inventory for 110 devices, and sent attendance hours to payroll every pay period.
Result

Patching and attendance run on their own

  • Action1
  • PowerShell
  • n8n

Let's secure and modernize your IT.

Tell me about your environment and I'll reply with where I'd start. Available for remote engagements with U.S. teams.

Email me LinkedIn GitHub

Download my CV: English Español