About Me

Hi, I'm Marlon — Director of Information Systems & Infrastructure at the Annenberg School for Communication at the University of Pennsylvania. With over 25 years of experience in IT, I specialize in designing and delivering enterprise-grade infrastructure solutions both on-premise and in the cloud.

As a Solutions Architect and Systems Engineer, I lead cloud transformation initiatives, next-generation platform modernization, and infrastructure architecture for the School — bridging technical execution with strategic vision to ensure systems are secure, scalable, and built for the future.

Work Experience
Director of Information Systems & Infrastructure
Annenberg School for Communication · University of Pennsylvania
January 2019 — Present

Lead a team of IT professionals developing and maintaining secured infrastructure on-prem and in the cloud. Drive next-generation platform adoption and DevOps practices. Liaison for ISC on all infrastructure and systems initiatives.

Senior Systems Manager — Systems & Infrastructure
Annenberg School for Communication · University of Pennsylvania
March 2013 — December 2018

Architected next-generation hyper-converged infrastructure. Led cloud transformation and business continuity strategy using hybrid cloud. Designed enterprise private cloud with VMware Horizon.

Systems Engineer
Healthcare Administrative Partners
February 2009 — January 2015

Managed IT infrastructure including SAN/NAS storage, HyperV and VMware ESXi virtualization, and Windows domain, file, print, and infrastructure services.

Certificates
Nutanix Certified Professional — MCI 6
Nutanix · April 2026
SEC504: Hacker Tools, Techniques, and Incident Handling
SANS Institute · September 2024
SEC510: Cloud Security Engineering and Controls
SANS Institute · October 2022
SEC545: Cloud Security Architecture & Applications
SANS Institute · October 2020
Azure Solutions Architect Expert
Microsoft · September 2020
Azure Administrator
Microsoft · June 2020
Azure Fundamentals
Microsoft · May 2020
AWS Certified Cloud Practitioner
Amazon Web Services · March 2020
Nutanix Certified Professional
Nutanix · May 2019
SEC505: Securing Windows & PowerShell Automation
SANS Institute · June 2018
VMware Horizon 7: Install, Configure, Manage
VMware · February 2018
VMware vSphere: Optimize and Scale V6
VMware · July 2015
VCE Certified Associate (VCE-CIA)
VCE · June 2015
VMware Infrastructure 3: Install & Configure V3.5
VMware · August 2008
Microsoft Certified Systems Engineer (MCSE)
Microsoft · September 2002
Microsoft Certified Systems Administrator (MCSA)
Microsoft · April 2002
Microsoft Certified Professional (MCP)
Microsoft · December 2000
ASC Projects
KITE AD Migration (2025)

Moving ASC AD (JANUS) to ISC Kite AD for consolidation and better security posture.

APPC WordPress on AWS Elastic Beanstalk

Transforming hosted WordPress to Elastic Beanstalk with CloudFront. Migrating repos to BitBucket with PennKey SSO. Moving select sites to Pantheon.

PennKey SSO VPN Authentication

Shifting VPN auth to PennKey SSO with SSLVPN Web Access on Fortinet using Penn KITE Domain and Grouper Integration.

Grouper Groups for ASC

Designing Grouper group workflows for all ASC apps. Dynamically generated from Penn Community with instant or granular deprovisioning.

Infrastructure as Code — AWS

Transitioning to CloudFormation and Terraform with remote state on S3 and DynamoDB. Code maintained in Bitbucket with role-based access.

Windows Server 2012 Upgrade

Replacing all WS2012 instances — KMS, SMTP, SQL, Print, DFS, DHCP HA, and Active Directory — ahead of EOL.

Legacy Application Modernization

Deploying BPLogix No-Code/Low-Code platform to replace legacy .NET apps with PennKey SSO and Grouper Groups integration.

Project Revelation (2018)

Established DFS Replication for Local Servers and synced to Azure via VPN IPSec Tunnel. Used Cohesity for Backup and DR and established RPO and RTO.

Project Zeus (2017)

Hardware refresh to Nutanix HyperConverged Infrastructure as primary server hosting production VMs running on VMware, resulting in Project Genesis and Project Exodus.

PennO365 Migration (2016)

Moved email system from OnPrem hosted Exchange Server 2013 to O365 and utilized DUO Circle as our SMTP Routing, which also filters spam and phishing before reaching our O365 mailbox.

HyperConverge Secondary (2016)

Modernized our Backup Strategy by consolidating Physical (Netbackup) and Virtual Backup (Veeam) to Cohesity, removing fragmentation.

Synchronize File Servers to Azure (2016)

Established a VPN Tunnel to Azure and used robocopy to sync data to a File Server hosted in Azure for offsite copy as part of the DR Strategy.

Firewall Consolidation (2016)

Removed TMG firewall for VLAN100 and VLAN101 and added interface to Fortinet Firewall to use a single firewall for all VLANs.

File Server Upgrade (2015)

Upgraded 3 Windows File Servers with Multiple Shares that consist of Home Directory and other Departmental Shares from Server 2008 to Server 2012 R2.

Proofpoint to Exchange Online Protection (2015)

Did not renew our Proofpoint subscription and utilized Exchange Online Protection to filter email before it reaches our locally hosted Exchange Server.

Windows DHCP Failover (2015)

Implemented high availability DHCP that allows two servers to share and synchronize IP for redundancy.

Project Highlights
ASC-APPC Connectivity
Site-to-Site VPN
ASC-APPC Connectivity

Designed and managed site-to-site VPN connectivity for secure inter-building network communications.

Fortinet Firewall Migration
Next-Gen Firewall

Planned, designed, and executed migration to Fortinet NGFW with application awareness, IPS, and cloud threat intelligence.

CrowdStrike Migration
Next-Gen Anti-Virus
CrowdStrike Migration

Replaced Symantec Endpoint Protection with CrowdStrike enterprise-wide via GPO and PowerShell automation.

Nutanix Migration
HyperConverge Infrastructure
Nutanix & vSphere 6.5 Migration

Migrated from VBlock to Nutanix HCI, reducing server room footprint and improving operational efficiency.

VMware Horizon
Virtual Desktop Environment
VMware Horizon Greenfield

Migrated to Horizon 7 on Nutanix with Unified Access Gateway and Dynamic Environment Manager.

Cohesity Backup
HyperConverge Backup
Cohesity Backup & Files

Consolidated all backup workloads, migrated SMB shares to Cohesity with DFS, and enabled immutable DR backup.

Contact
267-217-2246
marlon@mwenceslao.com