• Deployed Veracode Dynamic Scan (DAST) to reduce application vulnerabilities• Hardened Wordpress site configurations, reducing brute force attacks• Implemented Zscaler Internet Access (ZIA) across to 800+ mobile endpoints, collaborating with legal/HR for policy development• Managed website vulnerability scanning (Tenable.io), reporting and remediation• Led password management consolidation, reducing costs and improving security • Assessed Azure and Office security configurations, enhanced logging and access controls• Strengthened MFA by migrating from insecure methods (email/SMS)• Reviewed Active Directory, improving GPO and account security compliance• Developed CIS compliance scripts for Windows servers/workstations• Designed security standards for Windows, Linux, Kubernetes and workstation platforms• Evaluated third-party vendors for security risks• Led Corporate MDM and MAM deployment for mobile device security• Administered phishing campaigns, reducing click rates by 10%• Improved company’s SecureScorecard report from 68% to 81%• Reduced third-party application hooks into Azure, Microsoft Teams

• Designed and deployed IT security solutions, enhancing cloud and on-premises security posture• Delivered monthly metrics to executive leadership, driving informed decisions• Led M365 and Azure security incident response, including alert management and playbooks• Spearheaded M365 Purview DLP and retention projects for compliance• Conducted enterprise-wide threat hunting via Splunk, mitigating vulnerabilities• Implemented KnowBe4 phishing program, reducing attack success by 50%• Deployed Rapid7 InsightVM and Fortify On Demand for vulnerability management and application security• Managed security patch compliance, reducing server and workstation vulnerabilities• Administered Forcepoint Mail Control and Websense for email and web security• Researched and deployed ManageEngine Password Manager Pro, improving password management and reducing solution costs• Led forensics investigations, analyzing compromised machines• Administered Cisco AMP, Cisco Firepower IDS and Cisco Meraki for 13,000 systems• Managed F5 Silverline Web Application Firewall (WAF) and Imperva/Distil Networks bot protection security settings• Responsible for Tripwire CCM file integrity administrator on PCI systems• Deployed Sysmon for better log enrichment and detections in Splunk• Oversaw SOC operations, including triage, candidate interviews, and escalation processes

• Investigated O365 security alerts (Exchange, SharePoint, Skype), remediating cloud-based threats• Hardened Azure Web Services configurations for secure cloud deployment and compliance• Deployed AppLocker to 8,000 cloud-based Exchange machines, blocking unauthorized applications• Used Splunk to detect anomalies in large cloud data sets, improving threat detection• Led cloud security alert triage and escalation, enhancing internal risk management processes• Delivered security incident debriefs covering investigation, resolution, and lessons learned• Developed Power BI dashboards to track cloud security incidents and team workloads• Collaborated with IT stakeholders to implement cloud risk mitigation strategies across O365• Authored cloud security SOPs and response procedures, improving operational efficiency• Resolved escalated cloud security issues for Fortune 500 clients, reducing vulnerabilities• Participated in cross-team security hunts and penetration tests, identifying advanced cloud threats• Managed cloud security detection systems, reducing false alerts and improving threat visibility• Supported FedRAMP audit preparations, ensuring compliance with cloud security requirements• Tuned cloud security alerts to improve accuracy and response times• Partnered with engineering teams to fix cloud vulnerabilities, ensuring secure operations• Wrote Host IDS design specs to enhance cloud security monitoring in O365 environments• Conducted security investigations for compliance audits, ensuring evidence accuracy• Provided 24/7 on-call cloud security support, maintaining uptime for critical services• Obtained PTP-High federal security clearance, ensuring compliance with federal cloud security standards

• Managed Exchange mailbox operations for 1.8M Exchange 2007 and 3M O365 Exchange 2010 users, resolving technical escalations for enterprise customers• Led server capacity planning and management, ensuring optimal performance and resource utilization• Oversaw key projects and escalated issues for O365 Exchange and Business Productivity Online Suite, providing analysis and reporting on SLA-impacting issues• Hired, trained, and managed a high-performing operations team; collaborated with talent agencies to source contractors• Developed and delivered training and best practices to front-line Exchange support teams, improving response times and service quality• Led a hardware replacement analysis that identified root causes, resolving issues with software/firmware fixes, saving $4M in operational costs• Directed a server configuration standardization project that streamlined server builds, reduced troubleshooting time, and enhanced security

• Managed IT infrastructure for Active Directory, Exchange, SQL, and SharePoint, handling backups, upgrades, DNS, Group Policy, SCCM, and SCOM• Developed PowerShell user provisioning tools, streamlining account management• Administered Exchange services, including CAS servers, ISA for client access, and database restores• Led help desk team for issue escalations and provided 24/7 on-call server support• Evaluated and integrated third-party software and hardware products into the IT infrastructure• Implemented virtualization solutions using APP-V and VMware ESX Server, consolidating hardware• Managed 24 Terminal Servers with Network Load Balancing and TS Gateway farm for optimized performance• Customized software deployment for a 120-node thin client environment• Proposed, designed, and implemented Microsoft infrastructure upgrades, including Active Directory, Exchange, SharePoint, and System Center Configuration Manager• Led the migration of 200 remote users from VPN to TS Gateway, developing and delivering communication and training materials• Collaborated with developers, security, and infrastructure teams to implement network load balancing and other complex projects, creating cross-functional business solutions

• Provided architecture and deployment plans for Exchange, Active Directory and Live Communications Server infrastructure solutions for 8,000 users• Supported architecture reviews, recommendations and pre-sales and expansion proposals for Netherlands and UK companies

• Led projects for design, migration and deployment of Exchange and Active Directory servers for enterprise clients• Partnered with sales to design project scope, approach, plan and benefits for prospective clients

• Provided guidance and instruction on messaging infrastructure and Exchange server design, installation, migration, configuration and disaster recovery to enterprise customers • Developed and delivered training on Exchange and Active Directory to internal teams• Created mentoring program with US and India teams—increased skill level and customer satisfaction survey scores

• Developed and delivered Microsoft IT training courses for certification to IT faculty and students • Recruited, interviewed, trained and supervised training staff