Leon H. Email & Phone Number

Glasgow, Scotland, United Kingdom

Design and implement security solutions to protect technical infrastructure and ensure compliance with regulatory requirements.• Designed and maintained security solutions across multi-tiered architectural platforms, ensuring compliance with ISO 27001, PCI DSS, and NCSC CAF standards.• Led the development of technical roadmaps and security frameworks, driving innovation through research and adoption of new technologies.• Collaborated with cross-functional teams to deliver security solutions aligned with business goals and communicated strategic platform evolution to senior stakeholders.

United Kingdom

Advise clients on how to solve complex problems within security using research, people-centred design, and agile methodologies• Be part of a multidisciplinary agile team to design services that meet user requirements• Build relationships with clients and stakeholders• Present designs, plans and related recommendations to team members and stakeholders• Utilise IriusRisk to generate a threat model and risk assessments in AWS and Azure.

United Kingdom

Work with IT department and senior executives of 20+ clients to give rapid restoration of entire IT estate after client companies are hacked – ultimately giving customer satisfaction. Some industries worked in are manufacturing and education.• Work daily with client leadership to establish workstream priorities and effectively communicate status of restoration.• Workstream leader for European teams of 4-5 staff as we rapidly respond to threat actor actions.• Threat hunting and infrastructure hardening.• Install SentinelOne, CrowdStrike and other EDR/XDR, Azure services, Microsoft Entra Connect, and any other IT infrastructure previously used by client.• AD Recovery including GPO, DNS, DHCP, Sysvol and DFSR after compromise/corruption.• TA evictions.• Rebuilding ESXi/vSphere and Hyper-V.• Restore systems (e.g. LOB apps, File server, SQL server) using multiple backup solutions.• Configure client firewalls (e.g. Palo Alto, Sophos, CheckPoint) to prevent most egress traffic while allowing critical egress traffic.• Configure SAN (NetApp, Pure etc) using NFS and iSCSI• Provide forensic data to DFIR.

Carlisle, England, United Kingdom

Manager and lead cloud architect for a global charity providing operational management of IT services.• Maintain corporate IT security policies and leading regular audits to ensure compliance.• Research and implement vendor best practices for securing Windows, Azure and Linux systems to ensure confidentiality, integrity and availability of services using SaltStack for SOAR and DevSecOps.• Roll out Sentinel as SIEM solution to review security logs and configuration of infrastructure.• Led a team of nine, optimizing service desk and technical operations for 3500 users. Expanding the scope of our service desk support to all staff of the organisation.• Lead weekly tactical and ad-hoc strategic meetings using Kanban, emphasizing purpose, addressing roadblocks, and ensuring team success.• Applied WIP limits, implemented Scrum practices, and organized quarterly offsite meetings for strategic analysis and team culture building.• Engage with senior leadership and other stakeholders using analytical skills to design digital services.• Writing effective documentation and communication for stakeholders.• Managed recruiting, hiring, appraisals, and mentoring of new staff.• Conducted Working Genius workshops for 20 staff in IT department. This instantly caused staff to change their jobs to more align with their passions and skills and improved overall team collaboration and productivity.• Extensive experience of Azure following design and migration of global data centers of 60 Windows and Linux servers into Azure.• Rollout Azure Conditional Access Policies and InTune policies.• Negotiated agreements with external IT providers worth $200K.• Developed and maintained a DR plan and implemented MFA for 3500 users in 120 countries.• Designed and implemented complex identity management solution using Microsoft Identity Manager & Azure Entra Connect deployment in C#, Graph, GraphQL, REST, PowerShell, SQL, PowerApp, and Power Automate.

Carlisle, England, United Kingdom

A highlight in this role was providing leadership for Carlisle office team of 25 staff through Covid Lockdown. This was a non-IT focussed role where I worked closely with Human Resources and Finance for the office staff. Main focus was on:• Compliance• Team Communication• Healthy team culture

Carlisle, England, United Kingdom

Streamlined IT infrastructure, ensuring the secure and seamless transition of services to the cloud for a 24x7x365 organization.• Led as primary IT engineer, architecting, managing cloud systems and implementing Kanban boards for task visualization and project optimization.• Utilized Salt and scripting for SOAR and IaC, overseeing 60 Windows and Linux servers across 3 data centers using VMware.• Enhanced source code management by migrating to GitLab from CVS, SVN and Bazaar, supporting 40 users and numerous projects.• Established CI/CD systems with Jenkins, TeamCity, GitLab Pipelines, and Docker, integrating with Salt for DevOps.• Implemented DMARC protocol for 29 email domains, enhancing email security for 10M emails annually and reducing phishing and spam threats.• Centralized email infrastructure by transitioning from 50+ Linux mail servers to a single Exchange Server, consolidating more than 160 email subdomains into a single email domain.• Fully rollout M365 Modern Workplace to entire organisation across the globe.• Migrated 3 TB of data and 4200 mailboxes to Exchange Online.• Configured Nagios (CheckMK) to monitor 150 hosts and 4000 services, customizing alerts with Python and PowerShell.• Managed 100+ LOB published apps for 300+ users using Parallels Remote Application Server & Remote Desktop Services for 300+ users.• Designed site-to-site IPSec VPN and Firewall (PfSense) for a global network spanning North America, Europe, and Asia.

Carlisle, England, United Kingdom

Involved in various projects supporting the work of this organization in 100+ countries. My position has me performing system administration as well as directing the strategy for Microsoft software utilization at an international level. Much of my work was restricted to utilizing Linux Samba servers to administer Windows XP/Vista.• Developed an international software distribution solution• Developed a DVD menu based solution automating the installation of 40 commonly used applications• Implemented Microsoft Business Desktop Deployment 2007• Developed an OS imaging solution using an open source product• Negotiated a deal with Secunia to use their Network Security Inspector for auditing purposes• Security vulnerability monitoring and assessment• Responsible for desktop/server hardware purchasing• Designed and implemented a multi VLAN switched network involving VoIP traffic• I performed a variety of other tasks as needed

Bloomington, Illinois, United States

• Project Manager for full time team of 5 individuals performing a desktop replacement• Lead technical analyst in creating process and procedures for enterprise PC upgrade to Windows XP encompassing 800 Windows 9x workstations and 100+ applications• Created an SMS 2003 greenfield design for 800 workstations spread over one main campus and 10 satellite locations

Bloomington, Illinois, United States

I performed a variety of Local/Wide Area Network design and implementation tasks as a network consultant for this MSP's clients. Long term engagements at a hospital, eye clinic and State Farm Insurance.Industry Certifications: Windows 2000/2003 MCSE, MCSA 2000/2003, Exchange 2000/2003 Server, SMS 2.0, CCNP, CCDP, Cisco IP Telephony Operations Specialist, CompTIA Network+, iNet+ and A+ certification.• SMS 2.0/2003 design, support and upgrades• Antivirus Support• Security configuration and troubleshooting• Windows application troubleshooting and support• Cisco networking and routing• Software packaging

Bloomington, Illinois, United States

• Responsible for supporting 600+ computers in their level 2 helpdesk.• Supporting their computer hardware, in-house software, and troubleshootingWindows 9x and NT 4.0 workstations.• Documented hardware, OS, and other software issues and solutions in HEAT.• Responsible for developing Ghost images for standardized computer configurations.• Developing good customer relations when dealing with Anderson Financial’s manybusiness partners.• Supporting an office move by preparing for transport, transporting, installing, andconfiguring 500 computers.