Alwatheq Bellah Z.

Senior Microsoft 365 and security architect with 8 years on the Microsoft stack (M365 since 2018; Azure, Defender, Purview, Conditional Access and migration tooling since 2020), available immediately for remote contract or full-time work. Delivers Exchange hybrid and on-prem-to-Exchange Online migrations in environments of 30,000 to 75,000 users; tenant-to-tenant migrations and divestitures with Quest, BitTitan, ShareGate and Cloudiway; AD, GPO and SCCM to Entra ID and Intune; SSO migrations from AD FS and Okta to Entra ID. Hardens tenants end to end: Conditional Access and PIM frameworks, Defender for Office 365, Identity, Endpoint and Cloud Apps, Purview DLP, labels, retention and eDiscovery, Sentinel, with PowerShell and Microsoft Graph automation. Owns engagements from requirements and architecture through SOW/LOE to delivery and handover; MS-102, SC-200, AZ-104, MD-102. Core skills Messaging and migration: Exchange Online, Exchange Server 2013/2016/2019/SE, Exchange Hybrid (HCW), tenant-to-tenant migration, divestitures and M&A, Quest On Demand Migration, BitTitan MigrationWiz, ShareGate, Cloudiway, Enterprise Vault to Purview, mail flow and DNS cutover, SPF/DKIM/DMARC Identity and access: Microsoft Entra ID (Azure AD), Conditional Access, Privileged Identity Management, Entra Connect, AD FS to Entra SSO migration, Okta to Entra SSO migration, SAML/OIDC enterprise apps, Active Directory, Group Policy, admin tiering, FIDO2 and MFA Endpoint: Microsoft Intune, Windows Autopilot, SCCM to Intune migration, compliance and configuration policies, security baselines, BitLocker, Windows LAPS, update rings, Defender for Endpoint onboarding Security and compliance: Defender for Office 365, Defender for Identity, Defender for Endpoint, Defender for Cloud Apps, Defender XDR, Microsoft Sentinel, Purview DLP, sensitivity labels, retention, eDiscovery, Zero Trust design, security assessments Platform and automation: Microsoft 365 administration, Microsoft Azure, PowerShell, Microsoft Graph, licensing optimization, Copilot data-readiness assessments Delivery: presales discovery, solution architecture, SOW and LOE, migration runbooks and rollback plans, pilot and cutover planning, documentation and handover, client-facing consulting at MSP and enterprise consultancy level Certifications and education • Microsoft 365 Certified: Administrator Expert (MS-102) • Microsoft Certified: Security Operations Analyst Associate (SC-200) • Microsoft Certified: Azure Administrator Associate (AZ-104) • Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) • SC-300 Identity and Access Administrator: earned, lapsed (list only if the posting asks; never as current)