- Serve as IT security subject matter expert. Advise senior management on state of security posture and provide recommendations for improvement. - Performed in depth analysis of IT infrastructure’s security posture. Identified key weaknesses; planned and executed remediation initiatives.- Provide MDM team with support in executing remediation plans. Author scripts to automate configuration changes.- Author written IT security policies and procedures. Ensure compliance standards are met across all information systems.- Advise and assist IT infrastructure team with AD configuration and design. Assist with network segmentation and firewall rules.- Collaborate with IT teams to streamline and automate previously manual tasks to ensure consistent configuration across endpoints.

- Planned and executed security initiatives for multiple production tenants (incl. +100 custom hosted XDR solutions) and test tenants.- Transitioned remote access system for corporate hosted resources from always-on to ephemeral; developed dedicated infrastructure automation.- Used Powershell, Python, and Azure Functions to run automations via webhook between services. - Resolved +5 years of technical debt (misconfigurations in Azure, Intune, Jamf).- Implemented FIDO2-based hardware authentication requirements companywide.- Deployed centralized Enterprise Password Manager; migrated +250 users from local database.- Wrote and standardized Azure resource health alerts for Containers, Container Apps, Virtual Machines; integrated new alerts and log streams into workbooks for Sentinel SIEM.- Standardized SAML-based SSO authentication for associated SaaS providers.- Migrated iOS/macOS endpoint control from Jamf to Intune. Updated configuration profiles, package deployments, and user authentication.- Enforced macOS security and feature parity; ensured consistency with Windows endpoints.- Authored and maintained Conditional Access Policies. Defined access perimeter; minimized impact of exceptions.- Researched and tracked technical developments in security and usability features.

- Oversaw and completed transition of corporate IT infrastructure and resources post $3.7 billion acquisition.- Maintained IT infrastructure and resources (Network, SIEM, VPN, Virtual Servers, Email).- Documented all security policies and procedures.- Administered Intune, Office 365, Azure tenant.- Ensured regulatory compliance (SEC) for data in transit and at rest.

- Planned, executed, and oversaw corporate IT infrastructure (network, SIEM, VPN, virtual servers). Equipment procurement.- Trained and oversaw helpdesk personnel in incident response; train all personnel in security best practices.- Implemented and maintained domain controllers, backup systems, robotic tape libraries, SANs, ESXi clusters, and physical and virtual servers.- Administered VDI, SAN, and vSphere and replication. Served on change control review panel.- Implemented monthly patch schedule and remediation procedures (servers, workstations); increased workstation patch compliance from 70% to +90%. Updated business applications and IT systems as needed; deployed Group Policy.- Managed endpoint security response. Responded to alerts; examined detection chains; maintained and updated AV agents as needed.- Migrated 45 users to Azure / Microsoft 365.- Implemented, configured, and maintained corporate SIEM.- Documented all security policies and procedures.- Administered Intune, Office 365, Azure tenant.- Ensured regulatory compliance (SEC) for data in transit and at rest.- Designed and implemented Azure tenant: gateways, backups, conditional access policies, failover procedures, and virtual servers and network.- Migrated all business applications to Azure; migrated 20+ years of data to Office 365.- Implemented AAD SSO and MFA; secured endpoints and entryways to company data.- Reduced monthly datacenter expenditures by +50%.- Planned and designed virtual infrastructure. Enabled pandemic WFH.

- Imaged, maintained, deployed and tracked +2500 laptops.- Migrated cloning process from baremetal to imaging server; increased cloning rate by 400%.- Created bootable test environment; enabled quick and accurate testing of workstation components.- Created additional domain controllers; enabled georedundancy.- Provided tier-3 technical support to +1700 users.- Maintained catalog of educational software packages.

Replacing equipment, troubleshooting machines, creating and deploying software images for Windows and Mac OS X machines.