Moved to the IT Security team following an internal re-organisation, where I had previously been seconded for two days a week. This was intended to be a 50:50 split role working across the IT Security and End User Environment teams.Initially focused on assisting the End User Environment team review vulnerability scan results, security processes and help translate these in to priorities.Continuation of responsibilities for Managed Windows Server, Defender for Endpoint, EntraID Connect (AzureAD Connect) and more from my existing post whilst suitable candidates for handover were found.

Technical lead for the deployment of Defender for Endpoint across a multi-domain Windows Server estate, including the defining of policies, creation of roles, device groups and alerting.Designed and led the rollout of Microsoft Local Administrator Password Solution (LAPS) across both Windows Server and Windows Desktop estate, including the design and implementation of permission policies for multiple teams.Automation of tasks and management reporting with Windows PowerShell.Development and management of a managed Windows Server Service incorporating Windows Server 2012R2 to 2022 running on VMware.Migrated ~20,000 on-premises student workspaces to OneDrive for Business under a tight timescale.Working in collaboration with the IT Security team:Proactive security scanning of managed Windows servers using Tenable Nessus and remediation of identified vulnerabilities. Proactive security hardening for on-premises Active Directory using tools like PingCastle and Purple Knight.Responding to and hunting compromised accounts using a variety of tools, including EntraID (AzureAD), Splunk and Microsoft Defender advanced hunting.Previous responsibilities:Management and maintenance of ESXi hosts and supporting vSphere infrastructure.Key technologies: Windows Server 2012R2/2016/2019 and 2022, PowerShell, Exchange 2016/Exchange Online, Microsoft 365 administration, EntraID (AzureAD), OneDrive for Business, VMware ESXi, vSphere, Microsoft Defender, Splunk.

Undertook a mixture of Business as Usual and project work predominantly within the Microsoft stack (Windows Server, ADDS, ADCS, DNS, etc).Completed a renewal and upgrade of a multiple domain internal Public Key Infrastructure (PKI) moving from SHA1 to SHA256 encryption.Reviewed account memberships of privileged active directory groups within multiple active directory domains in line with Microsoft best practices.Liaised with other technical teams to resolve incidents or provide solutions to problems.

February 2014 - June 2015: LANDESK DeveloperMember of the core project team, involved from the tender stage through to go live. One of two administrators implementing LANDESK Service Desk, replacing ServiceNow (Change & Release management) and Sunrise Sostenuto (Incident, Request and Problem Management).Responsible for implementing and maintaining LANDESK. Development of agreed process flows for multiple modules (Incident, Service Request, Change and Problem). Interface connectivity with SCCM 2012, SQL 2014, and Active Directory.Monitoring & configuration of DEV, UAT and PROD Web and Application servers running Windows Server 2012/2012R2Feb 2013 - Feb 2014: Technical Service Desk Officer

Provided 1st-3rd line support within a small IT department including leading on several business critical upgrade/migration projectsTechnical Architect and lead engineer in migration from Citrix XenApp5 to Microsoft Server 2008 Remote Desktop Services.Project and technical lead in migration from Exchange 2007 to Exchange 2010 infrastructureLead upgrade from Microsoft Internet Security and Acceleration 2006 to Microsoft Threat Management Gateway 2010Performed an audit of the Active Directory hierarchy and rationalised security and distribution groups Business Continuity (DR) planning and testing with Senior Network AdministratorSupport provided for all aspects of IT and Telephony across 8 sites connected via Cisco ASA/877 site-to-site VPNsResponsible for the development of WDS OS imaging platform and maintenance of firms desktop OS image.MiTel VoIP Telephony support across two offices, Avaya INDeX/NorStar Meridian telephony support across the remaining offices.Involved in designing a new network IP addressing schema and VLAN routing required for multi-site implementation of a MiTel VOIP phone systemManagement of network switches, Internet connectivity with ISA Server 2006 and WAN linksDaily coordination and monitoring of server backups with Symantec Backup ExecPatch management for Windows delivered via WSUS & Anti-virus via McAfee ePolicy OrchestratorEarly testing for Hyper-V suitability with a view to migrating to virtualized serversManagement and monitoring of server platforms including Windows Server 2003, 2008 and 2008 R2 Implemented additional Citrix XenApp/RDS servers and perform ongoing maintenance of delivered business applicationsDesktop and laptop support for Windows 7 (previously Windows XP, Vista) systems Progressed from previous role as Case Management Developer and IT Support OfficerDevelopment of Case Management Systems (CMS) using IRIS Evolution that enables each legal department’s needs for managing cases