Justin Choe Email & Phone Number

Seattle, Wa, Us

• Rearchitected client Azure AD Connect implementation to efficiently synchronize identities to the cloud, reducing presence of hundreds of privileged identities in Azure AD• Introduced and deployed greenfield Privileged Identity Management solution in client’s Azure tenant to minimize permanent privileged role assignments for cloud admin accounts through utilization of Just-In-Time access capabilities • Lead the transformation of client’s Azure tenant Conditional Access Policies to utilize risk-based factors and enabled secure authentication to cloud applications globally without VPN• Aligned client with security audit requirements to strengthen password security by enabling Azure AD Password Protection for both Azure and on-prem Active Directory password changes• Securely deployed Azure Self-Service Password Reset capabilities to actively reset and update passwords in both Azure and on-premises Active Directory

Microsoft Information Protection Tech Lead:- Designed global sensitivity label schema for the classification of sensitive information throughout client organization- Provided recommendations on custom label policies to better dictate user experience with Microsoft Information Protection (MIP)- Educated client leadership team on user experience and value of MIP sensitivity label consumption - Created training guides and communication templates for client use in organizational change management efforts - Guided customers through the hardware requirements and deployment of the Unified Labeling Scanner agent for the initial discovery scanning of on-prem repositories - Designed processes for administrators to automatically start discovery scans for newly added repositories in the AIP Scanner tool while also providing an option to set automatic labeling for select repositories after accuracy reviewAutopilot Engineer: - Architected the design of remote device provisioning solution to ease the onboarding process of devices during a pandemic with Windows Autopilot- Educated SCCM administrators on the repackaging and deployment of applications through Intune- Validated client’s Hybrid Azure AD implementation for readiness of supporting Hybrid Azure AD Joined devices- Deployed Intune Connector server to support Hybrid Azure AD Join of Autopiloted devices, easing client need to move to full cloud device management solution- Guided client through the configuration of device configuration profiles and compliance policies to align devices with organization’s security policies

Los Angeles, California

- Advised government and enterprise customers on Microsoft best practices during implementation of EM+S capabilities including identity, mobile device management (MDM), and mobile application management (MAM)- Secured customer accounts with Azure multifactor authentication based upon location and trust factors, this resulted in secured user accounts with minor impact to accessibility- Created and scoped compliance policies and configuration profiles to ensure users would access company data and applications from secured devices- Aided with the creation of dynamic Azure security groups in order to streamline the process of assigning user roles and licenses for Azure and Office 365- Aided in the planning of early Windows as a Service approach for client on-boarding using Intune or SCCM- Lead the creation of documentation utilized by client engineers around the world to implement Windows servicing capabilities to customers- Guided clients through implementation of Co-Management within environment to enable bridged transition into modern device management using Intune- Aided client customers with on-boarding Windows Analytics capabilities and taught customers how to utilize Windows Analytics to better manage IT environment- Provided technical training to high level engineers to aid in the scaled delivery of client’s services

El Segundo

- Executed migration of 300 VMs from 3rd party cloud service to public Azure cloud using Azure Disaster Recovery tools- Creation and configuration of Azure Site Recovery and Azure Backup vaults- Implemented Azure automation scripts to manage client Azure backup schedules for all 300 servers and aided in the cutting of operation costs by planning and implementing power off schedules for non-essential machines in Azure- Created and customized JSON templates to streamline client manual VM creation process within Azure- Provided knowledge of Azure IaaS constraints to avoid potential blockers during Azure migration, including resource limits and VM sizing requirements per region- Lead KT sessions for Azure Backup, Azure Site Recovery, and Azure automation for proper handover to client administrators- Created documentation for Azure cloud services utilized in cloud environment for reference by employees

El Segundo

- Created and administrated team lab environment within Azure to validate operation of client applications in the cloud- Tested and documented configuration of client applications to ensure proper implementation by general engineering team- Conducted demonstrations and training of client applications to Accenture leadership for use in sales pursuits with customers

Corona, Ca

Deployment of company data entry centerSupport employees with use of company applications such as Microsoft OfficeTake record of customer information in company Database

Set-up and programming of Fadal CNC MillQuality AssuranceTraining of basic CNC coding and loading procedures