Michael Heerwagen Email & Phone Number

Colorado Springs, CO, US

Arlington, VA, US

• Accenture Federal Services - Contract.
• SME in Zscaler Internet Access, Zscaler Client Connector, Zscaler Private Access, Conditional Access, Azure Identity, Azure Applications, Zscaler Suite Expertise: Led the design and implementation of Zscaler Internet.
• Endpoint Access Security: Designed implementation and maintained Zscaler Client Connector (ZCC) and Private Access (ZPA) configurations, enhancing endpoint security and network connectivity, including disaster recovery.
• Compliance and System Configuration: Played a crucial role in setting up and documenting compliant system configurations across various platforms, integrating Azure Identity, BeyondTrust EPM, and Jamf Pro for enhanced.
• Mass Storage Device Control: Architected and executed policies to restrict unauthorized access to unencrypted USB devices, contributing to the organization’s readiness for CMMC Level 2 - NIST 800-171 compliance.
• Software and Endpoint Management: Led the deployment and management of software across endpoints using SCCM, Intune, and Microsoft's winget, ensuring proper software governance and patch management.

Accenture Federal Services contract through intermediary.

Chicago, IL, US

• Accenture Federal Services - Contract.
• SME in Zscaler Internet Access, Zscaler Client Connector, Zscaler Private Access, Conditional Access, Azure Identity, Azure Applications, Zscaler Suite Expertise: Led the design and implementation of Zscaler Internet.
• Endpoint Access Security: Designed implementation and maintained Zscaler Client Connector (ZCC) and Private Access (ZPA) configurations, enhancing endpoint security and network connectivity, including disaster recovery.
• Compliance and System Configuration: Played a crucial role in setting up and documenting compliant system configurations across various platforms, integrating Azure Identity, BeyondTrust EPM, and Jamf Pro for enhanced.
• Mass Storage Device Control: Architected and executed policies to restrict unauthorized access to unencrypted USB devices, contributing to the organization’s readiness for CMMC Level 2 - NIST 800-171 compliance.
• Software and Endpoint Management: Led the deployment and management of software across endpoints using SCCM, Intune, and Microsoft's winget, ensuring proper software governance and patch management.

Chicago, Illinois, US

• Transition to Microsoft Technologies: Spearheaded the replacement of Symantec with Defender for Endpoint using SCCM, Intune, and PowerShell, integrated with Microsoft Sentinel for robust security monitoring and.
• Privilege Access Management: Served as a subject matter expert for Beyond Trust, significantly improving macOS performance and policy compliance for developers and high-flex users.
• Cloud Security with Zscaler: Architected and implemented Zscaler to safeguard internet and private access, leading high-level configurations and policy setups for enhanced tenant security.
• SAML/SSO and MFA Implementations: Built robust Conditional Access policies and advised on implementation of SaaS integrations and their secure and functional design.
• Policy Development and Training: Developed and deployed critical policies including an Acceptable Use Policy at login across macOS and Windows, and trained teams on cybersecurity best practices and tool usage.
• Compliance and Audit: Collaborated with compliance teams to handle vendor security assessments and audits, enhancing the cybersecurity posture and compliance readiness.

Boston, MA, US

• Microsoft Security Suite Mastery: Led initiatives around Microsoft Defender for Endpoint, Office 365 ATP, and Intune, focusing on creating secure and compliant environments through proactive and reactive security.
• Endpoint Security Transformation: Managed the transition from McAfee and Carbon Black to Microsoft Defender, involving the decommissioning of existing tools and replication of controls, enhancing endpoint performance.
• Advanced Security Operations: Developed Advanced Hunting Queries and implemented automations for threat mitigation and alerting, significantly improving operational efficiency and security incident response.
• Integration and Automation Expertise: Scripted solutions to enhance functionality across Microsoft Security Suite and Endpoint Manager using PowerShell, and integrated external SIEM and analytics solutions to bolster.
• Collaboration and Stakeholder Engagement: Worked closely with Microsoft program managers to address and resolve feature gaps, ensuring that our needs were prioritized on the development roadmap. Provided demonstrations.
• Compliance and Policy Development: Played a key role in the design and enforcement of security policies and standards, including STIGs and baseline policies for compliance across a variety of operating systems and.

Redmond, Washington, US

• Role Summary: As a dedicated engineer within the highest echelon of Microsoft Enterprise Paid Support (Support for Mission Critical, SMC/PMC), I provided top-tier reactive, proactive, on-site discovery, and advisory.
• Technology Expertise: Delivered expert-level support for a diverse set of technologies including Exchange (On-Premises and Online), SharePoint, Skype/Lync, Intune, Dynamics CRM/AX, SQL Server, Windows Server, System.
• Proactive and Strategic Support: Engaged in scripting, third-party integration, automation, and solution implementation aimed at preempting issues and optimizing client infrastructures for better business outcomes.
• Customer Satisfaction and Relationship Management: Successfully maintained high satisfaction rates across all client interactions, instrumental in securing contract renewals and expanding business engagements due to.
• Leadership and Process Improvement: Led the reform of internal documentation and operational processes, improving efficiency and service delivery. Trained, mentored, and managed vendor staff for on-call support.
• Innovation and Development: Designed and implemented solutions tailored to enterprise customers' needs, particularly within Office 365 environments. Contributed to internal beta initiatives, providing critical feedback.

Plano, TX, US

• Cloud Infrastructure Expertise: Designed and maintained robust AWS environments, utilizing Terraform, Ansible, and AWS CLI for streamlined automation and efficient cloud resource management.
• Virtualization and Server Management: Oversaw the architecture and maintenance of VMware VCenter and ESXi 6.0 systems, ensuring high availability and performance. Administered Armor Hosting and HPE Nimble SAN systems.
• Security and Compliance: Managed comprehensive security operations including McAfee EPO, Carbon Black, and BitLocker implementations. Led the transition from traditional antivirus to NextGen AV solutions, enhancing.
• Active Directory and Network Services: Executed major updates to Active Directory across multiple forests, designed and implemented group policies, and rebuilt forest trusts to ensure secure and efficient network.
• Automation and Scripting: Developed and maintained scripts in PowerShell and Python, facilitating automation tasks, and integrating security solutions such as Automox for patch management and application distribution.
• Software and Application Management: Handled the administration of Atlassian software, Google Apps, and professional Gmail, maintaining operational excellence and supporting business communications.

Fort Worth, Texas, US

• Developed and Designed:
• Documentation, Process and SOP for Office 365 Pilot Program 300+ Users
• Hybrid Deployments Exchange,Skype,SharePoint, Active Directory within organization.
• Internal SharePoint WikiUpdated and Optimized:
• Skype Server 2013 with Hybrid Configuration
• Hybrid Configuration and Federation information

Dallas, TX, US

• Provided Experience and Support for Office 365 Migration
• Migration of 80,000+ global mailboxes
• Supported AD Sync environment and cleaned up any errors with Azure AD
• Provided support on ADFS and other authentication platforms regarding Office 365
• 5000+ Public Folder Migration and Organization
• Enterprise Vault Management for On-premise and Migrated Mailboxes

Redmond, Washington, US

• Tier 3 'last resort' Escalation Engineer for Exchange Online and various other Office 365 Cloud support issues. Supporting Premier and Professional Microsoft Customers.
• Support provided via phone, email, and remote control sessions
• Connected with the back end, front end, and client applications for Microsoft's Office 365 - Examples Not Limited: Azure Active Director, Directory Synchronization, Federation, AD FS, Exchange Online Protection.
• Handle Escalations and Critical cases that are not solved by normal research methods or lower tiers
• Maintain High Customer Satisfaction and Prompt Resolutions
• Assist with Developmental Changes and Application Updates

Richardson, Texas, US

• Exchange 2003-2013+Office365 Administration, Support, Repair, Implementation, Migration.
• Migration of 3rd party mail services to Exchange 2010-Office 365 from hMail, Google, Web-based pop3, Exchange cloud.
• Advanced Active Directory and Domain Configuration. Manipulating and repairing domains.
• Active Directory Federation Services (ADFS) with Windows Azure Directory Synchronization; Single Sign-On
• Domain Upgrades from 2003 to 2012 R2 including Functional level and FSMO Roles.
• Exchange Litigation and Archive Management and Implementation.

Bedford, TX, US

• Managed Services coordinator and systems engineer. VOIP Phone Engineer, Labtech RMM Engineer, Labtech script engineer and analyst. Company Branding. Software Integration Administrator. ESET Server Administrator.
• Maintaining Customer Relationships, Department Organization, and Development of Business Strategies.
• Facilitated high level projects from office moves to complex Exchange DAG environments over MPLS COLO
• Implemented Microsoft Server migrations, Upgrades, and Microsoft Integration
• Advanced Management of On-Premise Active Directory, Exchange, and SBS Servers.
• Hyper-V and VMware Management, Implementation.

Dallas, Texas, US

• Project Manager, VOIP Phone Engineer, Labtech RMM Engineer, Connectwise Administrator and Engineer, Managed Services coordinator and engineer. Script Engineer and analyst. Sharepoint Web Administrator and Designer..
• Support of Small and Medium Business Environments from Helpdesk to Server.
• Switchvox VOIP Engineer – Develop, Maintain, and Implement VOIP Systems
• VMWare and Hyper-V Management and Server Builds
• Advanced 3rd Party Line of Business application support.
• Advanced Workstation Helpdesk Support and Software Administration

Bellevue, Washington, US

• Maintaining LAN WLAN WAN, Windows Servers, Windows Virtual Servers, Windows XP 7 Workstations, Intranet FrontPage and SharePoint internal website creation and management, OSX + iOS, Documentation and Installation Guide.
• Microsoft Windows Deployment, Microsoft Deployment Toolkit, Windows Automated Installation Kit
• Microsoft Frontpage Intranet Site development, maintenance, and administration
• Active Directory Administration and Management of Local User Accounts
• Upgrading of Windows XP Pro Workstations to Windows 7 Pro
• Windows Virtual Servers 2005 Management, Support and Administration

• Remote and onsite Maintenance of 20 small businesses covering LAN WLAN WAN VPN, P2P, Tunnels, Sonicwall, OSX and iOS support, bootcamp, Citrix Xenserver/Xenapp, Windows Servers, Windows Virtual Servers, Documentation.
• Exchange 2003-2010 Management, Administration, and Support
• SBS Upgrades from 2003/2008 to 2010
• Active Directory Administration and Support.
• Full Helpdesk Support
• Advanced Networking Full OSI Management and Support

Richfield, Minnesota, US

Sales of Geek Squad Services, and the performing of Geek Squad Services on customer devices, Scheduling and prioritizing Geek Squad Department Associates, Merchandise Inventory, Documentation and Confidentiality of Customer Personal Information, Sales Floor Consultation