# Rene Ramirez System Administrator at Mattson Technology — Fremont, CA. By day I'm a System Administrator at Mattson Technology in Fremont — automating the boring stuff (increasingly with AI in the loop), locking down endpoints across 5 countries, and keeping the team from drowning in repetitive tickets. Got here by way of five years in IT: starting on the wire in Vegas, running my own consulting company through hundreds of network upgrades, then climbing into the corporate sysadmin chair. ## By the numbers - **5+** years in IT — Field tech → consultant → sysadmin - **95%** less provisioning time — Cut new-laptop setup from 5 hours to 15 minutes via Windows Autopilot + Intune - **50+** sites refreshed — Network rebuilds across Grocery Outlet, Marin Housing, JP Morgan Chase, retail clients - **15h** saved per week — PowerShell + Graph API automation eliminated manual account-sync work ## Experience ### System Administrator — Mattson Technology Fremont, CA · Jan 2025 – Present - **Zero-touch deploys.** Built the system that sets up a brand-new Windows laptop with all its apps, settings, and policies automatically when someone logs in for the first time — cut provisioning from 5 hours to 15 minutes. - Windows Autopilot + Intune, department-specific configs pushed at first sign-in. - **Remote-access security overhaul.** Found a company-wide remote-support tool where anyone on a free account could ride shared credentials and slip past single-user access — ripped it out and replaced it with a self-hosted system where every person gets their own logged, per-device access tied to their company login. - Decommissioned org-wide TeamViewer; self-hosted, AI-assisted Apache Guacamole with AD-integrated per-user access and full session logging. - **On-prem virtualization platform.** Stood up an on-site server platform that lets engineering teams spin up their own tools — self-service capabilities they never had before — while keeping each environment walled off in its own network segment. - On-premise Proxmox VE built with Terraform + Ansible + AI-assisted automation, strict network segmentation. - **Endpoint security, 5 countries.** Designed 50+ security policies in Intune that lock down work laptops and stop company data from leaking, applied across our offices in Taiwan, Japan, Korea, Mexico, and India. - Replaced legacy Group Policy with modern Intune DLP rules. - **PowerShell + AI automation.** Wrote scripts that keep user accounts in sync between the cloud and on-premise login systems automatically — about 15 hours a week saved — and built an AI-assisted onboarding/offboarding flow that took new-hire and departure processing from 2 hours down to under 5 minutes, with zero errors since launch. - Microsoft Graph API + hybrid Entra ID ↔ on-prem AD; onboarding automation built with Claude, Cursor, and GPT. - **Drive encryption + internal tooling.** Got 85%+ of company laptops encrypted (so a lost laptop isn't a security incident), and stood up a self-hosted wiki for the IT team — central spot for runbooks, status, and project tracking. - BitLocker / LAPS rollout; replaced licensed wiki SaaS with self-hosted Wiki.js. ### Desktop Support Technician — Mattson Technology Fremont, CA · Nov 2024 – Jan 2025 - **Promoted to SysAdmin in 8 months.** Kept 10–15 minute resolution times on 100+ tickets a month, and ran a 100-device hardware refresh — earned the promotion to System Administrator before the new year. ### Lead IT Technician (founder) — Ramdel IT Services SF Bay Area · Jan 2022 – Jan 2025 - **50+ Grocery Outlet stores.** Led network upgrades across 50+ Grocery Outlet locations — worked alongside corporate engineering to fine-tune Wi-Fi placement until connectivity complaints basically stopped. - Cisco / Juniper APs, retroactive cable plant work. - **Enterprise network gear.** Deployed serious networking hardware for clients that can't be down — including JP Morgan Chase. Cisco Catalyst 9000s, Fortinet firewalls, Juniper, SonicWall. - **Built a team.** Hired and trained junior techs to scale project delivery while still personally handling Tier 1/2 support for key accounts like Marin Housing Authority. ### IT Field Technician — AMG Tech Support Las Vegas, NV · Mar 2020 – Mar 2022 - **Hands-on the wire.** Pulled Cat5e/6 cable, installed demarc points (the wall jack where ISP service meets the building), and managed point-of-sale systems and enterprise hardware across 50+ retail and project sites. ## Stack - **Cloud & identity:** Intune, Entra ID, Microsoft Graph API, Active Directory, Windows Autopilot, Conditional Access - **Network:** Cisco Catalyst 9000, Fortinet, Juniper, Ubiquiti, SonicWall - **Automation & IaC:** PowerShell, Terraform, Ansible, Bash, Docker Compose - **AI-assisted:** Claude, Cursor, GPT - **Self-hosted:** Proxmox VE, TrueNAS, Docker, Cloudflare, Twingate - **Security:** BitLocker, LAPS, DLP, VLAN segmentation, Zero-trust access, Apache Guacamole ## Certifications - CompTIA A+ (May 2023) - Google IT Support Professional (Feb 2021) ## Enterprise-grade home data center Proxmox hypervisor running Ubuntu and Windows VMs, 10 GbE backbone with TrueNAS+ZFS storage, micro-segmented VLAN architecture on Unifi to keep IoT / cameras / servers off each other's networks. Twingate VPN for zero-trust admin access, Cloudflare reverse proxies fronting 6+ self-hosted production web apps (this site included) with verified SSL, automated offsite replication to Backblaze. I ship features here with AI-assisted development, and it doubles as an R&D sandbox — I prototype open-source tools and promote vetted ones into Mattson production. That's how Wiki.js replaced a licensed wiki SaaS. This site runs on it. ## Selected work ### El Ruben's Tamales Hosting · dev · maintenance · 2023 — ongoing · Family business. Custom WordPress on a Dockerized stack I run from a closet in the Bay Area. ### Depth of Field Studio Hosting · dev · deploy · 2026 — ongoing · Photography learning studio. Static site on a self-hosted container, git-deployed behind Cloudflare. ### Chip Stack Design · dev · deploy · 2026 — ongoing · Poker companion app for the table. Self-hosted container, git-deployed behind Cloudflare. ### Lion's Den Customs Design · dev · hosting · 2026 — ongoing · Harley-Davidson service shop in San Bruno. Temporary holding page on a self-hosted container while the full site is built. ## Profiles - [Twitch](https://www.twitch.tv/psychosaucequatch) — psychosaucequatch - [SoundCloud](https://soundcloud.com/psychosaucequatch) — psychosaucequatch - [Spotify](https://open.spotify.com/artist/0l1iVFMMyljzebyWCPLgHV) — Psychosassquatch - [Apple Music](https://music.apple.com/us/artist/psychosasquatch/1651102774) — Psychosasquatch - [YouTube](https://www.youtube.com/@psychosassquatch) — @psychosassquatch - [Instagram](https://www.instagram.com/_madm3x/) — _madm3x - [Facebook](https://www.facebook.com/psychosassquatch) — psychosassquatch - [Instagram (music)](https://www.instagram.com/psychosassquatch) — psychosassquatch - [GitHub](https://github.com/rene415) — rene415 - [El Ruben’s Tamales](https://elrubenstamales.com) — family business ## Contact - Email: rene@reneramirez.me - Location: Fremont, CA, US --- Canonical URL: https://reneramirez.dev More for agents: https://reneramirez.dev/llms.txt · https://reneramirez.dev/sitemap.xml