Michael D.

TECHNICAL SYSTEMS ARCHITECT - Design Microsoft 365, Azure, and other PAAS and SAAS implementations based on industry standards and best practices for information security, data governance, and service delivery - Design Identity and Access Management (IAM) and Security Infrastructure solutions by defining requirements for identity governance, automated administration, privileged access, and other crucial security frameworks, controls, and policies - Design and propose migration strategy to gradually transition an on-premises infrastructure to a mostly cloud-based infrastructure with minimal downtime and effect on day-to-day user and client operations - Collaborate with stakeholders through regular review of infrastructure and security posture designs to integrate company vision and risk remediation strategies into overall implementation CLOUD INFRASTRUCTURE ENGINEERING - Build and deploy full stack of Microsoft 365 features, including: Microsoft Exchange, Teams, OneDrive, SharePoint, Security (Defender) Compliance (Purview), Azure AD (Entra ID) - Build and deploy Cloud/Virtual Infrastructure: Microsoft Azure IaaS & PaaS, Azure networking, Azure Firewall, Azure AD users, groups, apps, & identity, Azure Role Based Access Controls (RBAC), Privileged Identity Management (PIM), and Conditional Access (CA), Purview Data governance and classification - Build and deploy Microsoft Endpoint Manager (Intune) MDM & MAM solutions: Configure Autopilot to automatically enroll, configure and deploy computers and mobile devices; Build configuration profiles, compliance policies, application configuration and application protection policies to secure all company-owned devices; Configure and deploy all computer and mobile devices applications via Endpoint Manager, utilizing the Company Portal application; Integrate Apple Business Manager with Microsoft Endpoint Manager and local Cellular provider to build fully automated mobile device configuration and deployment program  - Build and deploy Cloud and Endpoint security policies via Microsoft Defender to defend against spam, phishing, and impersonation attacks. - Build and deploy DLP, Compliance Policies, Sensitivity Label Policies, and Retention Policies based on defined information and data governance strategy utilizing Microsoft Purview based on HIPAA, GDPR, ISO, and DoD standards - Migrate MS Teams and Exchange items from acquired asset’s previous tenant and configure Teams and Exchange settings in new tenant. IAM/IDP & SECURITY ENGINEERING - Design, Build and Deploy Identity and Access Management solutions ensuring identity security and compliance while driving maximum automation - Configure Entitlement Management services and Privileged Identity Management to automate just-in-time access to apps and services - Integrate and manage access and permissions to all internal and SAAS applications and other cloud services utilizing Entra ID MFA, SSO, SAML, OAuth - Develop and implement cloud security solutions to protect cloud data and systems - Configure Rapid7 InsightIDR and InsightVM Cloud security services - Collaborate with Security team to ensure all systems are compliant with a “Minimum Level to Run Business” (MLRB) standard based on NIST and SOC compliance standards OTHER INFRASTRUCTURE ENGINEERING - Build and manage network security and monitoring solutions: Provide detailed documentation for all configurations, deployments, and troubleshooting and upload into SharePoint-based corporate KB; Function as SME and senior point of escalation for difficult-to-solve systems tickets and issues for the following technologies: Microsoft 365, Entra ID, Azure, Intune, Ubiquity Unifi, Rapid7 Insight