Charles C.

I help organizations design, secure, and modernize Microsoft identity and cloud environments using Entra ID, Microsoft 365, Intune, Zero Trust, SSO, and privileged access controls. I’m a CISSP/CCSP-certified Senior Principal Systems Engineer with 20+ years of hands-on experience building and securing enterprise infrastructure, identity platforms, cloud environments, and highly regulated systems. My core areas of expertise include: • Microsoft Entra ID / Azure AD • Microsoft 365 security and administration • Conditional Access, MFA, PIM, and Identity Governance • Microsoft Intune and device compliance • SAML, OIDC, OAuth, SSO, and SCIM provisioning • Active Directory design, migration, and hardening • PKI, AD CS, certificate authentication, and lifecycle management • Azure architecture and security • AWS identity federation and IAM integration • Zero Trust and ZTNA architecture • Privileged Access Workstations (PAW) • NIST, FedRAMP, STIG, and security-hardening requirements • Kubernetes / RKE2 infrastructure and identity integration • Infrastructure automation using Ansible and PowerShell I can help if you need to: • Correct or redesign an Entra ID / Microsoft 365 tenant • Implement MFA and Conditional Access without locking out administrators • Deploy Intune and managed-device security policies • Integrate AWS, GitHub, Atlassian, VPN/ZTNA, and SaaS applications with Entra SSO • Implement SAML/OIDC federation and SCIM provisioning • Design secure administrator and emergency-access models • Build or troubleshoot Active Directory and PKI environments • Perform an identity, Microsoft 365, or Zero Trust security assessment • Automate infrastructure deployment and security configuration • Document an existing environment and create an actionable remediation plan My approach is architecture-first: understand the business and security requirements, validate the existing design, identify unnecessary complexity or risk, implement the solution in controlled phases, test it thoroughly, and leave behind documentation that your team can actually use. I’m particularly effective on projects where an organization already knows what it wants to accomplish but needs a senior engineer who can take ownership of the implementation and drive it through completion.