Pasig, Metro Manila

Jonas Ricafort

I keep systems running, and investigate when they don't.

IT Operations • Technical Support • Cybersecurity

View Work Contact

Status · Open to roles

IT Operations, Technical Support, and Cybersecurity.

Now

Learning: KQL for Microsoft Sentinel.

Since Jan 2021

years of independent IT and software delivery

Certified 2026

industry credentials, led by Security+

Case StudySecurity Lab

Endpoint Telemetry and Investigation

An encoded PowerShell execution, traced from endpoint event to analyst decision.

Sysmon · Wazuh · PythonRead case →

Case StudyOps Lab

Windows Access Administration and Troubleshooting

A group-membership access failure, isolated across five diagnostic layers and verified after the fix.

Active Directory · PowerShell · AzureRead case →

About

Operations first, with a security habit.

Since 2021 I've worked independently: building software for clients and handling the IT problems around it, from machines and networks to the people using them. I'm moving that work into IT operations, technical support, and cybersecurity. I document my lab work as cases so the reasoning behind each fix can be checked.

Troubleshooting
Identity & Access
Endpoint Telemetry
Scripting & Automation
Client Delivery

Based: Pasig, Metro Manila.
Worked With: International and local clients, remote and on site.

Experience

Five years of client work: support and operations alongside software delivery.

Jan 2021 — Present
Jan 2021 — Present

Independent IT Consultant & Software Developer

Freelance · Remote and on site, Pasig
Support & operations
- Set up, troubleshot, and recovered client Windows machines, on site and remotely over RDP.
- Diagnosed network, Wi-Fi, and VPN problems with command-line tools.
- Deployed and maintained Linux hosting for delivered applications: users, permissions, services, and logs over SSH.
- Automated repetitive tasks with Python and PowerShell scripts, cutting manual work and keeping results consistent.
Software delivery
- Built a single dashboard for a retail client from three separate data sources. → View Project
- Built a fan site for a supporters' club and delivered it on a two-week deadline. → View Project
- Used static mockups to agree on the target with clients before building the logic.
- Remote
- International & Local Clients
- Async Across Time Zones
- Written End-of-Day Updates
- Owned Requirements to Handover
2019 — 2020
2019 — 2020

Search Quality Evaluator & Data Annotator

Remote contract work
- Rated search results against detailed written guidelines. Ambiguous queries were judged by the written criteria, and unfamiliar places were checked against outside sources.
- Annotated 3D LiDAR data under detailed written client guidelines and reached the platform's reviewer tier, reviewing annotation quality and supervising a 12-person batch of new annotators.
- When a case wasn't covered by the guidelines, I documented examples, escalated it, and applied the ruling consistently across the batch.
- Remote · Contract
- Written Guidelines
- Quality Review
- Escalation
Next

Next

An IT operations, technical support, or cybersecurity role.

Work

Problems solved, and verified.

Technical labs show how I investigate today. Client work shows what I've delivered since 2021.

PowerShell on client01: DNS and port 445 to dc01 succeed, but reading the Operations share returns Access is denied

01Ops Lab

Windows Access Administration and Troubleshooting

Isolated a group-membership access failure across five diagnostic layers, restored access, and verified that unrelated resources stayed restricted.

Active Directory · Windows Server · SMB/NTFS · PowerShell · Azure

Read Case → Technical breakdown ↗

02Security Lab

Endpoint Telemetry and Investigation

Collected Sysmon process telemetry centrally in Wazuh, traced a controlled encoded PowerShell execution from endpoint event to analyst decision, and closed the alert as authorized activity.

Sysmon · Wazuh · PowerShell · Python · Azure

Read Case → Technical breakdown ↗

Client Work

Recreated retail operations dashboard with sample data: weekly sales by channel, busiest day and low-stock items

C1Client Work

Store Operations Dashboard

A single dashboard for a hardware and general-merchandise store, in place of the three separate sources it used to check.

Retail · Dashboard · Data Consolidation

View Project →

Recreated home page for a fictional supporters' club: next match, squad and merchandise

C2Client Work

Supporters' Club Fan Site

A fan site for a soccer supporters' club, delivered on a two-week deadline: matchday hub, squad and club pages, and a merchandise showcase.

Web · Two-Week Build

View Project →

Capabilities

Credentials and skills.

Credential Ledger

CompTIA Security+

CompTIA

Security CompTIA · 2026 Verify ↗
Microsoft Azure Fundamentals (AZ-900)

Microsoft

Ops/Support Microsoft · 2026 Verify ↗
Google IT Support Professional Certificate

Google

Ops/Support Google · 2026 Verify ↗
Google AI Professional Certificate

Google

AI Google · 2026 Verify ↗