Fahad G.
Microsoft 365 Security Specialist | Intune | Defender | Purview DLP
I help businesses secure Microsoft 365, manage company devices, and protect sensitive business data. I work with Microsoft Intune, Defender for endpoint, Purview DLP and Entra ID to improve endpoint security, identity protection and data governance. I am an MS-102 certified Microsoft 365 Security Administrator with 6+ years of IT experience. My project experience includes deploying endpoint security across 300+ devices, migrating 158 users from Google Workspace to Microsoft 365, and implementing Microsoft Purview DLP controls in a regulated environment. MICROSOFT INTUNE AND ENDPOINT MANAGEMENT I configure and manage Microsoft Intune, Windows Autopilot, device enrollment, compliance policies, configuration profiles, application deployment, security baselines, BitLocker, patch management, MDM and MAM. I also support Windows, macOS, iOS and Android devices, including transitions from Group Policy to Intune. MICROSOFT DEFENDER AND ENDPOINT SECURITY I work with Microsoft Defender for Endpoint, including device onboarding, EDR, threat investigation, vulnerability management, Attack Surface Reduction (ASR), tamper protection and security remediation. I also configure Microsoft Defender for Office 365, email threat protection and anti-phishing controls. MICROSOFT PURVIEW AND DATA LOSS PREVENTION I configure Microsoft Purview DLP, sensitivity labels, retention policies and information protection across Exchange Online, SharePoint, OneDrive, Teams and endpoints. I can also help prepare your Microsoft 365 environment for Copilot by reviewing permissions, oversharing risks and data protection controls. MICROSOFT ENTRA ID AND IDENTITY SECURITY I configure Microsoft Entra ID, Conditional Access, MFA, SSO, RBAC, Privileged Identity Management (PIM), Zero Trust and hybrid identity with Active Directory and Entra Connect. I test access policies carefully to reduce security risks and avoid unnecessary user or administrator lockouts. MICROSOFT 365 ADMINISTRATION I provide Microsoft 365 and Office 365 administration across Exchange Online, SharePoint Online, OneDrive and Microsoft Teams. My work includes tenant configuration, licensing, mailbox management, permissions, external sharing, mail flow, transport rules, SPF, DKIM and DMARC. MICROSOFT 365 MIGRATIONS I handle Google Workspace to Microsoft 365 migrations, Gmail to Exchange Online, Google Drive to SharePoint and OneDrive, and tenant-to-tenant migrations. This includes mailbox and data migration, permissions, DNS configuration, mail flow and cutover support. POWERSHELL AND MICROSOFT GRAPH I use PowerShell and Microsoft Graph to automate user onboarding and offboarding, licensing, bulk administration, reporting, tenant configuration, device management and Intune remediation. HYBRID IT AND INFRASTRUCTURE My infrastructure experience includes Windows Server, Active Directory, DNS, DHCP, Group Policy, Hyper-V, ESET Endpoint Security, pfSense Firewall, VPN and site-to-site VPN. My CCNA background also supports network troubleshooting across cloud and on-premises environments. HOW I APPROACH PROJECTS I first understand your existing environment and business requirements. Then I identify the configuration gaps, plan the changes, test important policies and document the final setup. I aim to deliver practical solutions that are secure, manageable and easy for your team to maintain. If you need help with Microsoft Intune, Defender, Purview DLP, Entra ID, Microsoft 365 security or a migration, share your requirements and current setup. I can help you identify the right approach.