About

I'm Sofia Wagner, a Cybersecurity Engineer & Architect based in Fort Lauderdale, Florida, with an international background spanning Costa Rica and Europe. I began my career as a contract network engineer at Cisco before moving to the U.S., where I earned my Bachelor of Science in Network Operations and Security, along with more than 10 certifications.

With 10+ years of experience across healthcare, fintech, and banking, my career has evolved from network engineering into enterprise cybersecurity architecture, combining a strong networking foundation with hands-on experience designing, deploying, and integrating security solutions. My expertise spans Zero Trust, vulnerability and exposure management, identity and access security, endpoint protection, and data protection.

My focus is bringing these capabilities together through security orchestration: connecting platforms, centralizing telemetry, developing threat correlation rules, and automating response workflows to improve visibility, reduce risk, and accelerate incident response.

Experience

Senior Cybersecurity EngineerHayes Locums · Apr 2024 – Present

Hands-on across the CrowdStrike Falcon platform (Falcon Complete, Insight XDR/EDR, OverWatch, Spotlight, LogScale), using Spotlight for endpoint vulnerability visibility, prioritization, and remediation tracking, and writing correlation rules for threat detection.
Led the migration from a vendor-managed SOC to an in-house SOC on CrowdStrike Falcon Complete and Falcon LogScale, building correlation rules, log forwarding, and data connectors to bring detection and response in-house.
Implemented Palo Alto Strata Cloud firewall on Azure and migrated firewalls from local configuration to Strata Cloud Manager.
Built Zscaler ZIA URL filtering, cloud app control, DLP, sandbox, and file control policies; implemented ZPA on Azure and created application segments for Zero Trust access to private applications.
Implemented Delinea PAM and managed Microsoft Entra ID identity, IAM, and PAM, enforcing least privilege and designing SSO, MFA, and conditional access authentication flows.
Led the app allowlisting migration and policy design, and built data security automation and permission policies.
Owned email security across multiple platforms, creating protection policies and running phishing simulation campaigns to strengthen user resilience.
Performed Azure cloud security reviews and secured Azure storage accounts and buckets, hardening permissions to prevent public exposure of sensitive data.

Cybersecurity Architecture AdvisorFiserv · 2022 – 2024

Architected secure network segmentation by implementing advanced firewalls, IAM policies, and endpoint protection to meet PCI DSS, CP, GDPR, and other regulatory standards for high-security environments.
Designed and validated hybrid security architectures with cross-regional teams to maintain a consistent security baseline and strengthen endpoint, network, and cloud defense-in-depth.
Led vulnerability and exposure management for 300+ applications, conducting risk assessments, threat modeling, and architecture reviews that reduced critical findings by 45%.
Supported secure cloud migrations by implementing encryption standards, identity governance and access controls to protect sensitive data and maintain compliance.

Security EngineerBaptist Health · 2020 - 2022

Conducted proactive threat hunting focused on APT detection by correlating IOCs, behavioral analytics, and threat intelligence across SIEM and EDR platforms.
Led and architected the implementation of Symantec CASB and DLP across a 35,000-user hospital network to prevent data loss, insider threats, and data breaches reducing data-related incidents by approximately 40% enterprise-wide.
Implemented scalable security architectures with next-generation firewalls, segmentation, VPN, and IDS/IPS to enhance remote access and reduce external threat exposure.
Improved enterprise email security posture via behavioral analysis, secure gateways, phishing simulations, and automated quarantine and sandboxing.

Network Security EngineerBank of America · 2018 – 2020

Engineered and maintained firewall solutions for high-availability financial networks, ensuring continuous protection of critical data.
Collaborated with cross-functional teams to design and implement secure network architectures, focusing on scalability and security best practices.
Utilized Splunk for log analysis and threat detection, creating dashboards and alerts that improved monitoring and response capabilities.
Provided technical expertise in the configuration and management of VPNs, securing remote connections.
Set up advanced authentication (SSO, SAML) and managed security for vendor and partner access.

Cisco Network EngineerSykes Enterprises, Incorporated · 2016-2018

Installed, configured, and monitored network devices as well as documentation relating to network topology, equipment, and configuration.
Configured and troubleshooted routing protocols such as BGP, EIGRP, and OSPF
Set up and troubleshoot IPsec VPN and MPLS connections between remote sites and partner networks.
Performed IOS upgrades on Cisco routers and switches, validating configurations and ensuring high availability and security compliance.
Diagnosed complex issues through packet capture analysis with Wireshark.
Efficiently resolved IP network issues, achieving a 20% reduction in downtime and consistently meeting client Service Level Agreements (SLAs).

Education

Master of Science in Information Security Engineering (MSISE)
SANS Technology Institute · Expected 2027in progress
Bachelor of Science, Network Operations and Security
Western Governors University · December 2021
Full Stack Development (Java Focus)
Ironhack Bootcamp · August 2024

Certifications