Andrej U.

Security-focused Infrastructure Engineer with 10+ years in enterprise Active Directory and Identity Security. Expert in hardening, securing, and automating hybrid AD environments (200k+ users) across pharma and finance sectors. Experienced in threat mitigation, PowerShell automation, and Zero Trust identity principles using Entra ID and Microsoft Defender for Identity and enterprise-grade security tools. Skills • Active Directory & Identity Security: ADDS, AD Hardening, Entra ID, MFA, SSO, GPO, RBAC, Tiered Admin Model • Infrastructure & Cloud: Windows Server 2008-2025, DNS, DHCP, DFS, BitLocker, Azure Platform • Security & Monitoring: CyberArk PAM, Microsoft Defender for Identity, Endpoint Protection, Guardicore, Cortex XDR, McAfee/Trellix Antivirus, , Splunk, Sentinel, Qualys, PingCastle, SCCM, SCOM • Automation & Governance: PowerShell scripting, IAM automation, ITIL processes, ServiceNow