In my current role, I integrate and optimise security tools within SIEM solutions, specifically Alert Logic and Microsoft Sentinel. I lead vulnerability management and enterprise-wide remediation efforts, assist SOC analysts with threat hunting and incident response using KQL/SQL and Python, and oversee PKI management as well as identity and access controls across Azure and on-premises environments. I successfully migrated our organization from Sophos to Defender XDR, setting up and maintaining Defender for endpoint, identity, and cloud protection, achieving a secure score of 85% across devices, identity, cloud, and data. Additionally, I automated remediation processes with custom scripts, SCCM, and Intune, and aligned all Windows devices with CIS v1.10.1 and STIG compliance benchmarks. My work also includes implementing Azure security controls for compliance with CIS, ISO 27001, and PCI DSS standards, enhancing email security with DKIM, DMARC, and SPF via Mimecast and Defender for O365, and enforcing data loss prevention through Varonis and Microsoft Purview with data classification and labeling. I manage mobile device security with JAMF Trust and Intune, oversee Forcepoint Web Proxy and Defender for Cloud Apps, administer Cisco Meraki switches, and lead remediation of penetration testing findings.

Implemented Azure Sentinel SIEM solution, rolling out Microsoft XDR including deploying solutions and data connectors for- Defender for Endpoint (roll out via script, GPO, SCCM and intune)- Defender for Identity- Defender for Cloud Migrated web filtering policies from Cisco Umbrella > Defender.Implementing (M365 and Endpoint) DLP policies and insider risk management policies.Dealt with various audit requirements including ISO27001 and cyber essentials and various other external and internal audits.Added various azure policies to ensure governance of our Azure tenant.Rolled out Azure virtual desktop to allow offshore developers to get secure access to certain parts of our environment.Vulnerability remediation using Qualys and following various external penetration tests.Various cyber awareness training including phishing campaigns and attack simulations.Rolled out Cisco DUO for MFA across entire multi-domain server estate.Implementing various zero trust methodologies including conditional access policies, PIM, IDAM, PAM.Designed and created various POC’s including certificate based authentication using internal PKI via GPO and intune using SCEP, utilising DUO Network Gateway (DNG) as a potential VPNLess solution to allow access to various on-prem web applications and services.

Infrastructure support including working on the following-:- Vulnerability Remediation- Azure IAAS hub and spoke / Datalake - Azure Sentinel- Azure Virtual Desktop - Azure Firewall- O365 E5 licensed including MCAS / Security and compliance (purview) / Defender for identity / M365 Defender / Exhange Online / MS Teams- Microsoft Endpoint Manager (Intune) / autopilot - SCCM administration / packaging / Security patching- Azure Devops- Lansweeper- Cisco Umbrella (open DNS and web content filtering)- Cisco Meraki (wireless and camera)- Cisco Duo for on-prem MFA- PRTG- Mcafee DLP- HP San administration.Working on various IT infrastructure projects and also working on BAU tickets, changes and requests.

Working as part of a team of 6 to support B&CE’s IT Infrastructure (financial industry), both with delivering BAU support and project deliveries. This includes the support of the windows infrastructure estate, networking, firewalls, SAN storage, Mobile device management, communications - key technologies include.- Windows Server 2008 > 2019- Active Directory- Fortinet Fortigate Firewalls- Forticlient VPN- MDM intune for mobile device management - HP network switches - Clearpass for Network security - HP Datacore SAN storage- Dothill SAN storage- HyperV and SCVMM- SCCM- Microsoft Exchange 2013 on prem- Office 365, including exchange online, teams, SharePoint - Mimecast for email security - Azure IAAS, PAAS- Azure HCI stack- Azure Devops - assisting the development team for pipeline code delivery- Hardware support, repairs and upgrades- Web support on IIS, including configurations on front end services within DMZ’s.- Mitel, digital and IP phone system and redbox call recording - including physical and softphone- Veeam backup configuration and restores- Solarwinds - Event and Alerting- Kemp loadbalancing

Windows system administrator for a large corporate FTSE energy company - part of a 11 man support team whom are responsible for SSE’s multi-forest / multi domain 3,500+ server Windows enterprise, this includes support of sensitive critical infrastructure for the national gas and electric networksRoles & Responsibilities • BAU Support of 4 Active Directory forests incorporating 10 Windows Domains • Managing and Maintaining a server estate of over 1500 HP Physical Servers on Windows Server 2003 - 2019 incorporating 2 large data centers and numerous remote sites, spread across the UK• Managing and Maintaining a Virtualised server estate of over 2000 Virtual Servers on ESXI 5.5, 6.0 & 6.7 VMware Vcenter Server Farms including Build, Development and upgrades and implementing High Availability (HA) and Distributed Resource Scheduling (DRS)• SCCM Security Patching and Deployment / HP Server patching using SPP from HPE• Ensured PCI compliance for all payment card services and servers for auditing• Worked on various GDPR regulation projects to ensure the company was fully GDPR Compliant• Server Build and Application deployment using SCCM ready for OAT testing• Configuring and Maintaining Windows Failover Clustering / NLB Clustering and High Performance clustering• DNS and DHCP Administration.• Managing Incident, Problem, Change and Request tasks using Service Now (ITSM) using ITIL best practices• Deployment of Symantec Endpoint Protection (SEP) and defining policies • Windows Sharepoint Installation and Integration• SAN Storage Administration using Symantec (Veritas) Enterprise Administrator / Infoscale• Active Directory Management / Group Policy Objects implementation (AGPM)• Configuration of Symantec Enterprise Vault for archiving including dehydration• Installation and configuration of Microsoft Windows Data Deduplication• Managing all file system backups on Tivoli Storage Manager (TSM)

Citrix Support Analyst for a large blue chip energy company.Citrix support to over 20,000 users using Xenapp 7.6 and 6.5, Presentation Server 4.5 and Citrix Access gateway.Server builds for the new Xenapp 7.6 farm on VMware and server building on HP Blades for the Xenapp 6.5 farm.App centre and delivery services console administration over 10 different citrix farms applied accross 3 domains, including pre-production farms for testing purposes.RES Software deployment and APP-V for packaging and sequencing the citrix apps that are applied to the citrix farm.Citrix access gateway administration on netscalers.Incident and request management adhered to ITIL best practices and also implementing changes that are needed to be raised to service managment when various larges fixes and patches are applied to the citrix farm.

Application packager for our SCCM deployment solution on a large windows 2008 domain.Packaging for over 300+ vendor and bespoke in house packagesPackaging and sequencing applications using MSI,SCCM,VB,Wise, Install shield and App-V.Assistance of the development and documenting the application packaging process from the discovery, through to uploading it onto our SCCM servers and Application Virtualisation servers.Implementing various patches including working with WSUS and SCCM to get these packages rolled out.Also used RES software to certain packages and patches rolled out on other areas of the domain.

• Senior team member of the ‘Regional Support team’, providing IT solutions to the demands on 4 domains for over 3000 users and various sites and depots.• Helped to Project manage the transition to the new sites SSE acquired.• Consistent Technical point of reference role in day to day faults and for various projects for desktop and software rollouts.• Consistent closure of over 50 incidents per week within SLA adhering to the ITIL methodology to all levels from customer services, IT Development teams and senior management.• Mentor to new members of staff providing feedback and Personal development plans for their continual progression.• Technically competent with exposure to variety of automated Service Management tools, including hands on training and project management experience with Infoman for Incident, Problem and Change Management, Microsoft Office suite and bespoke computer applications and packages.• Provide support for several Operating Systems & applications. • Provide support using several Remote tools: Dameware, Netfinity, SMS, RD, PC-DUO, and Remote Assistance.• Implementation of networks and fault finding from pc back to comms room inclusive of various tools through to resolution. • Adhere to the appropriate security measures in line with corporate Security Policy. This includes anti-virus and malware protection, Hard Disk Encryption and Devicewall.• Network Administration (DHCP, DNS) on PC’s and Laptops• PC Build Development and Deployment using Altiris Rapid Deployment.• Built and Administered the Desktop Support Microsoft Sharepoint site for all regions• Built and Administered the Desktop Support Quickr site for all regions

Support analyst of the 'Regional Desk desktop and 2nd line Support team', providing IT solutions to the demands on 4 domains for over 3000 users and various sites and depots.Helped to Project manage the transition to the new sites Norwich Union acquired.Consistent Technical point of reference role in day to day faults and for various projects for desktop and software rollouts.Consistent closure of over 50 incidents per week within SLA adhering to the ITIL methodology to all levels from customer services, IT Development teams and senior management.Mentor to new members of staff providing feedback and Personal development plans for their continual progression.Technically competent with exposure to variety of automated Service Management tools, including hands on training and project management experience with Infoman for Incident, Problem and Change Management, Microsoft Office suite and bespoke computer applications and packages.Provide support for several Operating Systems & applications. Active directory administration and worked on producing the architecture for the new domain that was rolled out accross the company.Provide support using several Remote tools: Dameware, Netfinity, SMS, RD, PC-DUO, and Remote Assistance.Implementation of networks and fault finding from pc back to comms room inclusive of various tools through to resolution. Adhere to the appropriate security measures in line with corporate Security Policy. This includes anti-virus and malware protection, Hard Disk Encryption and Devicewall.Network Administration (DHCP, DNS) on PC's and LaptopsPC Build Development and Deployment using Altiris Rapid Deployment, Ghost and Radia Novidigm.Norwich Union IT Support Engineer 2nd/3rd Line

Helpdesk computer service technician on a domain with over 20,000 users for a very large blue chip insurance company.Also supported the old OS/2 network which also included various in house applications.Providing first line support and resolution on a windows 2003 domain and supporting in house bespoke applications.