Kevin Armstrong Email and Phone Number

Key Responsibilities:• Team Leadership: Lead a team of engineers specializing in IAM, IGA, SSO, and PAM technologies, ensuring effective management and coordination.• Technology Management: Oversee the implementation and maintenance of security solutions using Microsoft, Ping Identity, BeyondTrust, CyberArk, Okta, and Netwrix.• Process Optimization: Collaborate with the Vice President of Operations to optimize internal work processes, enhancing efficiency and productivity.• Customer Assessments: Conduct assessments with customers to identify identity pain points and develop strategic timelines for remediation.Key Achievements:• Enhanced Security & Compliance: Improved security and compliance across multiple companies by effectively managing IAM, IGA, SSO, and PAM technologies.• Operational Improvements: Increased operational efficiency and productivity by optimizing internal work processes.• Customer Satisfaction: Enhanced overall security posture and operational effectiveness for customers by addressing identity pain points and implementing essential features within their business frameworks.• Marketing Collaboration: Successfully collaborated with the marketing team to develop impactful marketing materials for the company webpage and LinkedIn, enhancing online presence and engagement.

Key Responsibilities:• Architectural Design & Deployment: Led a team in designing, deploying, and providing premier support for Azure, Entra, Office 365, and Active Directory operations.• Advanced Solutions Implementation: Spearheaded the seamless implementation of advanced solutions, enhancing operational security and efficiency.• System Integration: Championed the integration of on-premises Exchange and Active Directory domains into a unified Office 365 and Azure environment, improving system centralization.• Modern Authentication Transition: Collaborated with application service teams to transition applications to modern authentication standards, ensuring compliance and bolstering security protocols.Key Achievements:• Enhanced Security & Efficiency: Improved operational security and efficiency through advanced solution implementations.• System Centralization: Improved system centralization through the successful integration of multiple domains.• Strengthened Security Protocols: Reduced security incidents through the transition to modern authentication standards.• Leadership & Innovation: Drove strategic initiatives that fostered a culture of innovation and operational excellence, resulting in an increase in team productivity.

Key Responsibilities:• PowerShell Scripting: Developed PowerShell scripts to streamline domain consolidation, manage permissions on file servers and SQL servers, and create a GUI for the User State Migration Toolkit to facilitate profile migrations.• Active Directory Management: Created scripts to update the description field of computers in Active Directory, including logged-in user and model information without removing custom descriptions.• OS Deployment: Designed a process in System Center Configuration Manager for standardized OS and application deployment, requiring minimal technician input (country, computer type, and serial number).Key Achievements:• Security Policy Implementation: Enhanced security compliance through the deployment of AppLocker, firewall, and local admin enforcement policies.• LAPS Implementation: Improved security by implementing LAPS, reducing the risk of unauthorized access.• Automation & Efficiency: Increased operational efficiency through the automation of various tasks, including certificate creation and AppLocker event scanning.• HelpDesk Support: Reduced HelpDesk resolution times with scripts that automated common tasks like enabling mailbox legal hold and auditing.

Key Responsibilities:• Technology Maintenance: Managed a diverse set of technologies over 150 servers, including AD, SQL, IIS, MSMQ, TFS, Kemp/Barracuda load balancers, 6 Hyper-V clusters, Tegile SAN, System Center 2012 products, Office 365 Exchange/SharePoint, on-premises SharePoint, and Octopus Deploy, leading a team of 2 engineers.Key Achievements:• PowerShell Automation: Developed numerous PowerShell scripts for daily activities, significantly reducing manual effort and increasing efficiency in AD user management, IIS website/application pool management, certificate creation, virtual machine deployment, and SQL user/login management.• System Upgrades & Migrations: Successfully upgraded and migrated TFS, SharePoint, and Octopus Deploy, enhancing system performance and reliability. Collaborated with developers to resolve deployment issues and migrated VM and SQL data from EMC VNX to Tegile SAN, ensuring data integrity and system stability.• Security Enhancements: Implemented critical security initiatives, including LAPS and STIGs via group policy, improving overall security posture. Developed a plan for transitioning services and application pools to group managed service accounts, and worked with network engineers to restrict firewall rules, enhancing network security.• Infrastructure Setup: Established a new infrastructure for Windows Updates and antivirus updates through WSUS and SCCM, centralizing reporting and management across environments, leading to improved update compliance and system security.

• Designed and configured multi-tenant environment for Microsoft Exchange, Lync, SharePoint and SQL and Citrix XenDesktop utilizing Citrix’s CloudPortal Services Manager.• Wrote PowerShell script to send emails to employees reminding them to change their password before it expires and used open source software to create a self-service password reset portal, drastically reducing the calls to Help Desk/NOC for unlocking accounts.• Migrated individual file servers to Windows Distributed File System, building in redundancy between servers on the islands without needing to purchase extra hardware as well as minimizing bandwidth across the WAN during work hours.• Installed and configured Citrix Netscalers to load balance customer-facing services, critical business applications such as Microsoft Exchange as well as line-of-business applications. Due to this, we could also implement SSL offloading to lower virtualization host resource utilization.

• Digital Insight Active Directory migration from Intuit’s corporate Active Directory utilizing PowerShell scripts and Quest Migration Manager for migrating users and groups and QMM for Exchange to migrate mailboxes to Office 365 • Utilize cached credential Quest utility for migration of profiles so migrations could occur without loss of wifi or VPN access. Created script to copy newest ini file from QMM for always up-to-date mapping file• Instruct DI’s engineers regarding new Digital Insight AD infrastructure, including site management, OU structure, group policy design and security group best practices.• Install and configure LanDesk for PCs and Macs for asset management and software deployment• Migrate on-premises mail environment out of Intuit’s servers into Digital Insights new Office 365 domain utilizing custom PowerShell scripts• Install and configure PKI (certificate) servers for use in wireless and VPN authentication, utilizing an offline root certificate authority for security

• Worked on design team for Nevada Health Link website for infrastructure and application utilization, capacity planning• Set up and configured federation using ADFS to communicate with Xerox and Nevada NetIQ Access Manager to authenticate access to customized portal for healthcare exchange• Implemented SCCM for hardware/software inventory, deploying applications through a self-service portal with approval and managing compliance on end user devices• Changed websites to being monitored by SCOM using web application transactions for checking past the entry point to a website and for performance monitoring• Installed Microsoft CRM in a highly-available and distributed system utilizing 10 servers per environment utilized claim-based authentication for partner login• Migrated from Citrix 4.5 to RemoteApp servers for applications that should not have data leave the campus, such as Microsoft Great Plains• Organize active directory to optimize for deploying group policy settings and applications• Removed KIX scripts and migrated to Group Policy & Group Policy Preferences for faster start time• Set up a Central Management Server for SQL so DBAs would have be able to set polices and run queries across multiple servers from a central location

• Contract based work for maintenance of systems, problem resolution, design and implementation of Microsoft, Cisco, VMware and Citrix solutions for business clients• Migrated customers from on-premises Exchange servers to Office 365, from small to environments with thousands of mailboxes• Document requirements and lead junior consultants on large scale projects• Design, install and manage Citrix XenApp server farm for a law firm with multiple remote sites• Design, install and administer VMware ESXi environments for various customers including design of compute, network and storage resources • Renovate network for large retirement community including port security, wireless access, VLANs to limit broadcast domains and Private VLANs for each residential suite• Various consultant work involving Active Directory design and migrations, Group Policy design, Exchange design and migration

• Lead migration projects consisting of 2 other Systems Administrators• Provide VMware administration and support, including upgrade to vSphere 5 and implementation of distributed switches, DRS and SDRS • Create migration plan for 20 servers and 300 workstations to migrate to a building with larger office space• Move from old building to new building accomplished from 9pm on Friday to 6am on Saturday, zero loss in business hours availability• Provide scripts to generate HTML reports on infrastructure statistics and ensure standardized email signatures based off Active Directory values• Provide Active Directory and Group Policy administration and support• Provide Exchange administration and support• Perform SQL server support, administration, and backups • Assist implementation and documentation of new Avaya phone system for new call center location

• Manage and maintain an Active Directory network and back-end routing and switching equipment• Lead and supervise a team of 3 Help Desk Analysts• Migrate the school district from a flat Active Directory architecture to a site per school with read only domain controllers at the schools. Move from 2000 functional levels for the domain and forest to 2003 then later to 2008 levels. Create policies to deploy applications, to lock down student access, to log computer access and files for troubleshooting infrastructure problems• Continuously automate and improve processes using a combination of group policy and SCCM and scripting for deploying 1000+ applications for users• Create intelligent scripts to identify and resolve workstation issues without requiring administrator intervention• Improve distribution of data to 10 site operation utilizing DFS replication with compression and de-duplication, reduce downtime and storage related maintenance with an iSCSI NAS, and virtualize a number of production servers in the data center using VMware vSphere in a highly available cluster with load balancing • Develop and execute migration plan from Exchange 2003 to 2010 to improve real-time communications and storage replication strategy• Introduce technical team to a helpdesk system to streamline resolution handling while assigning 30+ service orders to field technicians for processing daily• Design and distribute in-house training videos on deployed software suites for users, resulting in a reduction of service orders and increase in user productivity• Maintain intranet knowledgebase site instructing users on procedures, frequently asked questions, and bug fixes hosted on SharePoint • Provide day to day SQL administration and support. Responsible for migrating from a single server to a clustered environment. Provide SQL maintenance and backup

(Contracted to Beavercreek City Schools)• • Manage and maintain an Active Directory network and back-end routing and switching equipment• Lead and supervise a team of 3 Help Desk Analysts• Migrate the school district from a flat Active Directory architecture to a site per school with read only domain controllers at the schools. Move from 2000 functional levels for the domain and forest to 2003 then later to 2008 levels. Create policies to deploy applications, to lock down student access, to log computer access and files for troubleshooting infrastructure problems• Continuously automate and improve processes using a combination of group policy and SCCM and scripting for deploying 1000+ applications for users• Create intelligent scripts to identify and resolve workstation issues without requiring administrator intervention• Improve distribution of data to 10 site operation utilizing DFS replication with compression and de-duplication, reduce downtime and storage related maintenance with an iSCSI NAS, and virtualize a number of production servers in the data center using VMware vSphere in a highly available cluster with load balancing • Develop and execute migration plan from Exchange 2003 to 2010 to improve real-time communications and storage replication strategy• Introduce technical team to a helpdesk system to streamline resolution handling while assigning 30+ service orders to field technicians for processing daily• Design and distribute in-house training videos on deployed software suites for users, resulting in a reduction of service orders and increase in user productivity• Maintain intranet knowledgebase site instructing users on procedures, frequently asked questions, and bug fixes hosted on SharePoint • Provide day to day SQL administration and support. Responsible for migrating from a single server to a clustered environment. Provide SQL maintenance and backup

Various short term technical contract work for ManPower including assisting in the migration of Reynolds and Reynolds in Dayton and Honeywell in Urbana from Windows 98/2000 to Windows XP