Benjamin Morales

IT Operations Engineer

7+ years owning identity, access, and endpoint platforms at scale, from Okta and Jamf at work to GitOps and self-hosted infrastructure at home.

New York City Metropolitan Area

years in IT ops
7+
managed Macs
1,500+
office buildouts
3
~/benjamin
$ whoami
benjamin-morales · it-operations
$ cat focus.txt
identity · endpoints · automation

01 / about

About

I work in IT operations at Figma, supporting identity, endpoints, and office technology for a global team. I enjoy tracking problems down to their root cause and working with Security and IT Engineering on fixes that last.

Outside of work, I run a homelab and practice GitOps. It's how I keep learning and bring more of an infrastructure mindset to IT.

02 / skills

Skills

Identity & Access

  • Okta
  • Active Directory
  • AWS IAM
  • Authentik (homelab)
  • SSO/RBAC
  • MFA & Device Trust
  • SOX/SOC 2 Access Reviews
  • Persona

Endpoint

  • Jamf Pro
  • Microsoft Intune
  • Fleet
  • macOS
  • CrowdStrike Falcon
  • KnowBe4
  • Asset Lifecycle

Automation & IaC

  • GitOps
  • GitHub Actions
  • GitLab CI
  • Docker
  • Docker Compose
  • Portainer
  • Bash
  • Slack Workflows

Systems

  • Linux (Ubuntu/Debian)
  • Proxmox VE
  • Virtualization
  • systemd
  • cron
  • journald

Network

  • Palo Alto Networks
  • Cisco Meraki
  • UniFi
  • Tailscale

Workplace & AV

  • Zoom Rooms
  • Crestron
  • Openpath
  • Google Workspace
  • Slack
  • Zoom

03 / projects

Projects

featured

Fleet GitOps Device Management

Device configuration, patching, and security policy managed as code, built in an instructor-led Fleet lab. Changes go through PR review and deploy to Fleet automatically.

  • Fleet
  • GitOps
  • YAML
  • GitHub Actions
  • GitLab CI

github.com/benm0ra/newyawk-gitops

Self-Hosted Homelab Platform

Proxmox-virtualized Ubuntu server running a dozen containerized services, reachable only through a Tailscale overlay network, and rebuildable from a documented runbook.

  • Proxmox VE
  • Ubuntu 24.04
  • Docker Compose
  • Tailscale
  • UniFi
  • Uptime Kuma

github.com/benm0ra/homelab

ThorPaper: Dual-Screen Live Wallpaper (Android)

Live-wallpaper app for the AYN Thor handheld that splits one image, GIF, or video across both screens.

  • Kotlin
  • Android
  • MediaCodec
  • Material 3

github.com/benm0ra/Thor-SmartWall

Also: server-stats.sh, A Bash system-resource reporter

04 / experience

Experience

  1. IT Operations Specialist · Figma

    – Present

    • Drove resolution for 30+ users locked out during the OpenAI Enterprise rollout after name/email changes broke SSO: diagnosed the identity mismatch, documented the workaround, captured HAR traces for vendor support, and partnered with IT Engineering to escalate account-management gaps to OpenAI.
    • Administer Okta for 1,000+ employees and 500+ global contractors: app access requests, MFA recovery, and device-trust troubleshooting on managed endpoints; partnered with Security on SOX and SOC 2 access reviews.
    • Manage a 1,500+ device macOS fleet in Jamf Pro; built a laptop-refresh request form now being integrated into a Slack bot that proactively contacts users when their device is due.
    • Responded to a high-severity office-access outage (Openpath badge system), working into the night with the vendor to isolate the failure, confirm a vendor-side outage, and restore badge access by power-cycling the access control panels once the fix landed.
    • Own Zoom Rooms support for the NYC office and serve as the team's escalation point for Crestron/Zoom configuration in major meeting rooms; provide live AV support for company all-hands.

  2. Technical Support Specialist · Zocdoc

    –

    • Handled employee access requests across AWS IAM and Active Directory.
    • Supported Windows and macOS endpoints: Intune and Active Directory for Windows, Jamf for Macs, CrowdStrike Falcon for endpoint security.
    • Troubleshot network and VPN issues, working with Palo Alto Networks.
    • Helped with an office expansion: hardware setup and network readiness.

  3. IT Support Specialist · Attune

    –

    • Implemented just-in-time admin access via Jamf Self Service (MakeMeAnAdmin), replacing permanent admin rights with a time-boxed self-elevation window.
    • Ran a 200-MacBook Jamf fleet: policies, configuration profiles, and onboarding/offboarding.
    • Administered Okta; secured the network with Cisco Meraki and Palo Alto Networks.
    • Owned KnowBe4 security-awareness compliance.
    • Helped lead an office move: hardware, contractor support, and networking.

Earlier roles: IT Support Analyst (Contract), The Museum of Modern Art (Nov–Dec 2019) · IT Support Technician (Contract), American Eagle Outfitters (Sep–Oct 2019) · Apple Brand Ambassador & Territory Account Executive, The Retail Outsource (Oct 2016 – Apr 2019) · Technical Specialist, Apple (Jan 2015 – Apr 2016)

05 / certifications

Certifications

  • Fleet Certified GitOps Administrator

    Level 1

  • Jamf Certified Associate

Languages: English (native), Spanish (limited working)

06 / contact

Contact

Interested in IT Operations Engineering roles. Let's talk.

benmorany@gmail.com