Windows and Intune specialist

Delivering Autopilot globally for the bank, as part of the ongoing transition to MDM.

Providing Autopilot/Intune SME services to corporate clients. Working on a full Windows 10 to cloud migration project involving moving all imaging processes to cloud based modern management. All newly provisioned devices become fully hybrid and modern managed.•Working with end client from requirements through to implementation for a full cloud migration project.•Moving existing imaging process away from siloed regional builds to a ‘core’ build across the organisation with regional layers of policies and applications.•Reviewing existing build processes to understand how devices are configured and why and translating these processes into modern tools such as Microsoft Endpoint Manager using Autopilot.•Reviewing existing on-premises GPO sets between regions globally to identify core commonalities which can be built into core policy set and regional differences to build customisation layers for each geography.•Reviewing a set of 500+ applications to identify commonalities and differences. Working with application packaging teams to build core and regional application packages.•Migrating all policies to Microsoft Endpoint Manager to make devices modern managed as hybrid endpoints.•Implementing Windows Autopilot processes to provision devices. Using pre-provisioning as primary method to allow devices to be provisioned directly out of OEM factory.•Creating RBAC profiles for all regional support and technical teams to ensure all teams receive only the permissions they require.•Implementing NDES and SCEP infrastructure to issue certificates to devices through the cloud without requiring connectivity to the corporate network. Deploying Always on VPN solutions to allow for Azure Hybrid AD join during Autopilot process.

•Enabled decommission of ADFS by migrating SaaS application authentication to Azure AD for fully integrated SSO experience through Azure.•Enabled upgrade and delivery of the Microsoft 365 Apps for Enterprise through MECM to get the end-user estate upgraded from Office 2016.•Designed evergreen Windows 10 servicing to allow continuous Windows 10 feature upgrades on a regular annual schedule. This helped to normalise the environment from 5 various feature update versions all to Windows 10 2004.•Designed and implemented an automated cumulative patching process for the Windows 10 estate to ensure all Windows clients were kept up to date with latest security patches. This included design of a process to deploy zero-day patches when released.•Designed POC of Windows 10 Autopilot deployment to enable global remote locations without connected infrastructure to provision and configure Windows 10 devices.•Implemented Microsoft GPO security baselines to enable to secure and increase compliance of the end-user estate.•Implemented Intune Certificate Connector to allow internet connected devices to successfully request private certificates from the internal CA via Intune. Integrated with Autopilot, enabled delivery of an Always on VPN connection and Hybrid Azure AD join devices.

Technical design and strategy of the Office 365 suite of products including EM+S suite, Intune, Azure AD, OneDrive, Teams and SharePoint.

Desktop architect and technical consultant, working on a program providing deliverable technical solutions to the client. Inclusive but not limited to:- Group policy management - review of all policies, looking at creating efficiencies where applicable.- Design, management and creation of new build images- Deployment of Office 365- IE11 deployment, using Enterprise Mode to resolve all internal application compatibility issues- Designing all Patch and software distribution through the use of SCCM- Working with front and back office teams to ensure all new application implementations will be compatible within the desktop environment.- Working with third parties to keep existing applications up to date and also introduce new solutions where applicable.- Making and keeping the desktop environment adaptable to change with minimal impact. Mainly achieved by ensuring policies allow users and support teams to carry out their jobs whilst also maintaining the highest level of security and compliance expected at an industry level.Designing and developing the Windows 10 build within MDT and SCCM.Developing a robust desktop patching solution in SCCM. As the desktop subject matter expert I am the 4th line escalation point for any desktop related matter. Delivery an IT service to an estate the size of approx 8000 devices.Working with enterprise architects, project managers and operational teams to deliver IT projects. Constantly reviewing all deliverable solutions to ensure any risks or issues are highlighted and providing resolutions to rectify well in advance of implementation.Designing and documenting deliverable solutions to meet business requirements whilst conforming to internal compliance and following industry best practicesManaging and assisting internal and third party resources to deliver technical solutions and acceptance into live by owning the technical solution and becoming the subject matter expert. Including a full handover to BAU

• Development and management of relationships with IT suppliers and developers within the region• Project management of major regional projects◦ Migration to Active Directory in stores, including joining machines to domain and setup of accounts◦ Deployment of Websense to all machines and users◦ Deployment of Office 2010 to entire corporate estate◦ Deployment of Symantec v12 to entire store\corporate estate◦ Planning of migration to co-located data centre in the ME region◦ Implementation of server infrastructure in Doha to host local trading applications and data to comply with local regulator◦ Working with internal and external stakeholders to deliver highest standard of IT systems to the region, at the same time ensuring local regulations are adhered to within each different countrySupporting an IT estate of 400+ devices and users on a multi site operation of 60 sites spread across 4 different countries in the Middle East