Kevin O.
M365 Architect | Entra ID | Intune | Teams Phone | Email Security
In enterprise IT, much like in aviation, precision, compliance, and zero downtime are non-negotiable. That is why I excel at: 🛡️ Advanced M365 Security & Disaster Recovery · 🔒 Threat Protection & Email Security: Deploying Microsoft Defender for Endpoint and Office 365 to proactively block zero-day threats. Hardening email infrastructure with strict authentication protocols—including DMARC, DKIM, SPF, and MTA-STS—while implementing BIMI for verified brand identity. · 🔑 Identity & Access Governance: Engineering complex Conditional Access policies in Entra ID, implementing Privileged Identity Management (PIM), and strictly enforcing phishing-resistant multi-factor authentication (such as FIDO2 keys and Windows Hello for Business) to eliminate credential compromise. · 🚨 Disaster-Proofing & Emergency Access: Designing highly monitored, MFA-bypassed "break-glass" administrative accounts and robust disaster recovery protocols for absolute tenant control during critical outages. · 📊 Posture Management & Auditing: Continuously evaluating your Microsoft Secure Score, configuring retention for audit logs, and setting up automated alerts for anomalous administrative behaviors to ensure long-term compliance. ⚙️ Infrastructure Automation & Endpoint Management · 💻 Zero-Touch Deployment: Utilizing Microsoft Intune and Windows Autopilot for PC fleets, alongside seamless integration with Apple Business Manager for iOS/macOS management. This ensures strict compliance before any device connects to company resources. · ⚡ Scripting & Workflows: Leveraging PowerShell (including the Microsoft Graph API) for bulk tenant management, and building Power Automate workflows to replace manual business processes. ☁️ Microsoft 365 Architecture & Complex Migrations · 🏢 Tenant Strategy: Leading cross-tenant migrations, tenant consolidations post-merger, and designing scalable licensing architectures to eliminate redundancy and lower overhead costs. · 🗄️ Data Lifecycle Management: Establishing retention policies, sensitivity labels, and compliance perimeters to protect intellectual property and sensitive data. · 📄 As-Built Documentation: Delivering crystal-clear, as-built architecture documents, operational runbooks, and disaster recovery playbooks so your infrastructure is never a "black box." 🌐 SharePoint & Unified Communications · 🏗️ SharePoint Architecture: Designing hub-site topologies, building modernized intranet portals, and structuring complex permission inheritance and document governance models. · ☎️ Teams & Voice Routing: Full-scale Microsoft Teams collaboration design. Deploying and administering Teams Phone Systems, including complex call queues, auto-attendants, and direct routing configurations. 🛫 Let's connect. Do not wait until it is too late.
Earnings and projects
Last 6 months ÷ 6
Last 6 months: $22k
Billed in all: $31,235$31k
$11k in the last 6 months
Earnings, last 30 days
Skill rankings: #1 in 1 skill of 15
Rarest: top 2% in Microsoft Teams, of 1,293. Ranked by MRR among everyone on Upwork with the skill.
- Kusto Query Language10 freelancers · 🇨🇭 #1Top 10%🇨🇭#1 of 1
- #10User Identity Management203 freelancers · 🇨🇭 #1Top 5%🇨🇭#1 of 1
- #12Microsoft Hyper-V Server236 freelancers · 🇨🇭 #1Top 5%🇨🇭#1 of 1
- #13VoIP352 freelancers · 🇨🇭 #1Top 4%🇨🇭#1 of 3
- #15Microsoft Intune336 freelancers · 🇨🇭 #1Top 4%🇨🇭#1 of 2
- #21Bash682 freelancers · 🇨🇭 #1Top 3%🇨🇭#1 of 2
- #22Microsoft Windows784 freelancers · 🇨🇭 #1Top 3%🇨🇭#1 of 2
- #28Microsoft Teams1,293 freelancers · 🇨🇭 #1Top 2%🇨🇭#1 of 1