Developed and deployed automated solutions using Azure Automation run-books.Conducted lift and shift operations from on-premise infrastructure to SaaS based applications.Streamlined client and internal MDM deployment via Intune.Configured and deployed Microsoft Pureview for internal and client systems.Deployed SIEM, SASE and ZTNA solutions to internal systems.Performed continuous vulnerability management and monitoring of client and internal systems via Microsoft Defender.

Maintained the security services and technologies involving the SIEM and Purview configuration & planning, and incident response both internally and for clients.Conducted research, evaluated, deployed, and managed various security products and services to reduce alert fatigue while reducing administration time by 50%..Created Policies and Runbooks for appropriate responses within the companies EDR solution to increasing response time by 34% while increasing internal KPI’s by the same factor and client satisfaction by 16%.Execute and evaluate optimal configurations for firewalls and Unified Threat Management (UTM) systems, adhering to industry best practices.Lead the development and maintenance of SOC2, NIST 800-171, CMMC and HIPPA scoping documentation including system understanding, process flows, and system infrastructure diagramsIAM for client orgs.

Managed the company's EDR solution, overseeing its configuration, monitoring, and maintenance to enhance threat detection and response capabilities while reducing False Positive rates by 27%.Leveraged threat hunting techniques and tools to detect and analyze advanced threats, contributing to reduction of the organization's overall attack surface.Streamlined patch management procedures, resulting in increased system stability, 47% reduced vulnerabilities, and improved overall security resilience.Performed regular audits and updates to maintain accurate and up-to-date documentation, ensuring compliance with industry standards and facilitating efficient knowledge sharing within the organization.Administrated Quest KACE OVAL scanning to identify, track, address, and resolve vulnerabilities reported.

Spearheaded the implementation of a desired state tool to deploy baseline company applications SIEM, EDR, DNS Filtering using powershell reducing deployment time by 75%.Migrated clients to M365 while implementing DLP Policies, ATP Policies, Client defined RBAC, and Conditional Access MFA policies to comply with client standards.Implemented Terminal Server farms that included load balancing with RD session brokers to ensure client app uptime.Configured and deployed Active Directory Domain Controllers.Migrated clients from on premises Active Directory Domains to Azure Active DirectoryImplemented Intune and Autopilot for clients to ensure that proper MDLM compliance is metResponded to potential incidents using company EDR and investigated suspect files using sandbox tools while reducing time to respond by 32%.Audited Azure Active Directory/Office 365/Dropbox to respond to possible data loss eventsTroubleshoot and resolved VDI related issues in VMWare Horizon/Azure Virtual DesktopConducted vulnerability assessments using Microsoft Defender for Endpoint to to comply with client compliance standards and investigated possible phishing attacks using Microsoft ATP.

Provided basic end-user troubleshooting and desktop support.Documented support interactions for future reference via Servicenow.Maintained device inventory via Servicenow.Maximized use of hardware and software by training users and interpreting instructions.Provided password reset assistance for Active directoryDuo administrationProvided basic printer troubleshootingProvided basic operating system troubleshooting for both Windows and MacOS users.Hardware diagnostics and troubleshooting