Masood R.

Need Microsoft Entra ID, Intune or Azure Virtual Desktop set up properly the first time: secure, documented and working for your users? I help organizations on Microsoft 365 lock down identities and devices with Conditional Access, PIM, Intune and Defender, without disrupting how people work. I'm an IAM Architect with 24+ years in IT. I have led identity and access architecture across 2,400+ Azure subscriptions, 800+ AWS accounts and 60+ GCP projects in hybrid identity environments. Your project gets enterprise-grade thinking, scoped to your size. WHY CLIENTS HIRE ME ⭐️ Top Rated, 100% Job Success Score, 22 Upwork jobs, 440+ hours ⭐️ Microsoft Certified: Azure Solutions Architect Expert (AZ-305) ⭐️ Microsoft Certified: Identity and Access Administrator Associate (SC-300) ⭐️ Microsoft Certified: Azure Network Engineer Associate ⭐️ Microsoft Certified: Azure Virtual Desktop Specialty ⭐️ Microsoft Certified Trainer (MCT ID 14831841) ⭐️ ISC2 Certified in Cybersecurity (CC) WHAT I DO 1. Entra ID & Zero Trust: Conditional Access design, MFA, Privileged Identity Management (PIM), access reviews, hybrid identity (Entra Connect, Pass-through Authentication, ADFS), SSO (SAML/OIDC) and SCIM provisioning. 2. Microsoft Intune & Windows Autopilot: first-time Intune deployments, Autopilot, compliance and configuration policies, Edge and app policies, iPhone/iPad enrolment with Apple Business Manager. 3. Azure Virtual Desktop: pooled and personal host pools, FSLogix profiles, OneDrive optimization, Intune-managed session hosts, access secured with Conditional Access. 4. Microsoft 365 Security: Microsoft Defender, Purview data protection, endpoint and data security configuration, Exchange Online. 5. Email Security: SPF, DKIM and DMARC to stop spoofing of your domain. 6. IAM Strategy & Governance: least privilege, identity cleanup, Okta and SailPoint, CIEM, support for ISO 27001, GDPR, SOC2, NIST & HIPAA compliance. RECENT UPWORK PROJECTS • AVD with Entra ID & FSLogix: built an Azure Virtual Desktop environment with Entra ID and FSLogix profile management. Client review (5.0): "outstanding job... deep understanding." • SPF, DKIM & DMARC: configured email authentication end to end. Client review (5.0): "great experience... excellent technical knowledge." • First-time Intune deployment: rolled out Intune on an existing Azure subscription with Windows Autopilot and MDM over a multi-month engagement. • Apple Business Manager + Intune: iPhone enrolment consultancy (5.0). • Microsoft 365 endpoint & data security: configured endpoint and data protection for an organization already running M365, Intune and Entra ID. HOW I WORK Clear scope and plan before any change. Staged rollout (report-only and pilot groups first) so nobody gets locked out. Full documentation and handover so your team can run it after I leave. Send me a message with your user count and what you want to achieve or book a 30-minute consultation and leave with a concrete plan.