• EUC Build Engineer. Implementation of TOGAF Architecture Development Method (ADM) – for developing an Enterprise Architecture that addresses business needs.• Client build customizations using Microsoft Deployment Toolkit (MDT). • Task sequence design, triage, build failures, log analysis (BDD, ZTI logs). • I implement Modern device provisioning and the associated management technology framework. I research, design & implement solutions based on Autopilot device provisioning. • I am Proficient with managing drivers, BIOS as part of build customizations via MDT; Power Shell, and WMI queries. Operating System & application deployment using SCCM.• Creation of unified documentation depicting various components in the Build infrastructure; working independently, implementing iterative solutions, recommending improvements in the build’s space.

• MECM/MEM (SCCM/Intune) Cloud Migration Project. AutoPilot & GPO Migration to MDM Policies, Hybrid AAD, Power BI integration (Data Analysis) with MECM/MEM. • M365 Administration. I am responsible for AD, Azure AD, Hybrid Azure AD, PKI, PowerShell Scripting, SCCM, Imaging and Co-management as these services align with requirements for Modern Desktop Device Provisioning. • Developing utilities and processes to optimize images and installation procedures. Develop and document design specifications and build processes. IAM, Authentication and verification methods used in Azure AD (MFA, Microsoft Authenticator, SSPR).• The deployment and implementation of Microsoft Office 365 and Enterprise Mobility + Security (EMS) services.• Delivering Onboarding Accelerators for WHFB (Hello for Business Passwordless Authentiction), MSFT Authenticator & FIDO 2 Security Keys.• B2B app enterprise experience ready with SSO, RBAC, and SCIM provisioning. Azure integrated MFA; DUO, Descope, Okta, RSA Secu SecreID Access.• Experienced with Hardware Security Modules (PKI CA)/ Azure Dedicated HSM/ CISCO/ YubiKey

• I have Windows 10 servicing experience in large enterprises using MEM/MECM/(SCCM/Intune: previous branding) task sequences and for Windows Update for Business.• I have Intune and Autopilot Experience for managing and deploying Windows 10 devices.• I have Expert level Powershell knowledge & Bash on Mac OSX & Linux• I have Experience using REST APIs such as Microsoft Graph• I am experienced In (MEM/MECM) Advanced Dashboards & Generating custom reports using PowerBI • I am a Microsoft 365 Modern Desktop Administrator Expert• I perform SCCM (MEM/MECM)/Intune Security & Device Protection via Windows Defender ATP Integration• I am experienced Using PowerShell to Manage Office 365/ EOL Users/ TEAMS Powershell/ Skype for Business PowerShell Modules/ TEAMS Rollout and Skype Upgrade• I am experienced implementing Enterprise Mobile Device Management: Windows 10; iOS; Android • I Implement Microsoft 365 security and threat management & Manage Microsoft 365 governance and compliance• I am experienced deploying Conditional Access & Compliance policies for Device enrollment• I am experienced in Intune App Deployment/ Application Protection (MAM) & Windows Information Protection (WIP)• I am experienced performing Store for Business integration with Intune

Contract System Administrator• County of Los Angeles ISD (Internal Services Department):• Enterprise Mobile Device Management: Windows 10; iOS; Android • M365 /Office 365 ATP/ Defender ATP /Azure ATP• SCCM/ Intune Windows 10 Deployment/ AutoPilot• Configuring Microsoft Intune Prerequisites and Subscription• Conditional Access, Compliance policies, Device enrollment• Intune App Deployment/ Application Protection (MAM/WIP) (Windows Information Protection) /AIP (Azure Information Protection)• Solid grasp of JAMF/ Intune/SCCM/ Mac OSX Server & 3rd Party Integration for MDM

• I create and deliver MIP (Microsoft Intellectual Property) as Workshops, Assessments and Onboarding Accelerators & customized deliveries for SCCM, Intune, Office 365, WHfB (Hello for Business), WSfB (Windows Store for Business), Auto Pilot, M365 and MDM (Modern Device Management), EMS, IAM (Identity and Access Management; AAD & Hybrid ID, SSO, MFA), Windows 10/Office 365 Security and Threat Modeling• System Center Configuration Manager Compliance and Security• SCCM/Intune Security & Device Protection via Windows Defender ATP Integration• I am experienced Using PowerShell to Manage Office 365/ EOL Users• Enterprise Mobile Device Management: Windows 10; iOS; Android • Configuring Microsoft Intune Prerequisites and Subscription• Conditional Access, Compliance policies, Device enrollment• Intune App Deployment/ Application Protection (MAM) & Windows Information Protection (WIP)• Store for Business integration with Intune• Security and Certificate Management/ Full/Selective Wipe and Reports• Software Update Management and Microsoft Intune Endpoint Protection• PowerShell – Management of AD Infrastructure• I Have Core Competency in Office 365 Administration and Service Management• I work with Customers to troubleshoot and resolve deployment & integration challenges• I Develop & present customer facing documentations associated with design, configurations, run books, and project status• Windows 10 Image Build & Deployment SME• Custom Scripting (VBScript, Powershell, AutoIT)

09/2018 - 04/2019Win10/ Office 365 ArchitectOxford International (On Contract to DELL EUC Deployment Services)·I am a customer facing delivery consultant responsible for successfully assessing, designing, validating, documenting, & implementing complex Windows Image solutions while ensuring exceptional Customer Satisfaction·I leverage exceptional professional consultative skills in leading & facilitating customer workshops to define problems, identify risks, & determine appropriate solutions· I Work closely with Account Teams, PMO, Customer, & Key Stakeholders· I am able to execute projects based on a defined Statement of Work (SOW)· I Bring clarity to ambiguous engagements where outcomes need to be defined· I work with Customers to troubleshoot and resolve deployment & integration challenges· I Provide pre-sales scoping assistance as needed in area of expertise· I Develop & present customer facing documentations associated with design, configurations, run books, and project statusI demonstrate Knowledge and Proficiency In Most Of The Following Technologies· Windows 10 Image Build & Deployment SME· MDT & SCCM OSD/ Service Now/ Altiris/ Ivanti· Custom Scripting (VBScript, Powershell, AutoIT)· · MDM/EMM – Intune /Autopilot / Airwatch/ Azure AD/ Workspace One/ Office 365 Deployment & Hosting/ Airwatch/ Horizon 7/ Identity and Access Management/ SSO/ MFA· Application Compatibility & Packaging (wrappers, task sequences etc) Workflows· Knowledge and proficiency in configuring the following networking and security technologies:· LAN/WAN implications to image build· Active Directory domain join on-prem and through VPN (Azure AD)· Firewall & Security technologies· GPOs

• I am responsible for the planning, design and configuration of automated solutions for Desktop and Server operating system deployments (Windows 10 deployments/upgrades (1511/1607/1703/1709/1803). Configuration of Service Branches and Deployment Rings (SCCM 1602/1606/1610/1702/1706), Altiris AppOS; SCOM, Power Shell DSC Scripting, Chef.• I configure a combination of Microsoft tools to automate image installs, OS configuration, domain join, application loading, user state migration and all other tasks related to the provisioning and configuration of bare metal Desktops and Servers onto Hyper-V and ESXi. • Integration of SCVMM, SM, SCCM, SCOM, SCORCH, HYPER-V, ESX 6.1, Power Shell DSC, Chef, OMS Azure integration.• I am responsible for the design, planning & implementation of end to end Desktop and Server deployment solutions where automation is used to execute all required tasks.• I work closely with various technical and project teams to identify and resolve issues and mitigate customer impact during engagement.• I Maintain a high level technical expertise in OS and Application deployment and management best practices, industry trends, and technologies.• I Assume leadership on engagements and work without direct supervision, interfacing with customer IT and business function leaders.• I create concise deliverable's, process diagrams, and solutions that demonstrate return on investment.• I train deployment technicians to operate the automated processes.• Experienced in Altiris ITMS, Architecture, Cloud, Deployment Solution, Policies, Jobs, Tasks, Organizational Views, SMP, AppOS.

City National Bank, Los Angeles, CAWindows System Center Automation Engineer April 2017 - December 2017• Developed variety of batch scripts, VBScripts and Power Shell scripts, SQL & Power Shell SQL to automate server & desktop builds & administration and to rollout security settings throughout the enterprise. Windows 10 deployments (1511/1607/1703). Configuration of Service Branches and Deployment Rings (SCCM 1602/1606/1610/1702/1706)• Engineered and automated server build process used to configure Dell and HP servers to company standards. Application of the NIST Cybersecurity Framework, UCF, CCH, GRC, SCAP• Configured antimalware policies, Windows Firewall settings, and managed Windows Defender Advanced Threat Protection.• Tested and approved Windows security updates and service packs for deployment to workstations and servers. • Automated server user administration tasks i.e. add remove users, create shared directories, set permissions on shares and modify registry settings.• Provide project support by configuring DNS, DHCP, GPOs and Active Directory changes and implementations as needed.• Plan, document and test disaster recovery, including instructions for restoring AD, DNS, DHCP and virtual and physical server infrastructure using VMware, Hyper-V 2016 and BMR(Bare Metal Restore solutions) VEAM, Bacula, Zetta DRAAS, Acronis P2V, V2P, (V2C; SNMP).• Ongoing maintenance & administration of System Center Operations Manager 1607. • Ongoing maintenance & administration of System Center Configuration Manager (1607).• Integration of (2016) SCVMM, SM, SCCM, SCOM, SCORCH, HYPER-V, ESX 6.1, Power Shell DSC, Chef, OMS Azure integration.

• SCCM Engineer, Provided Support for the Windows, VMware, SCCM/SCOM 2012 R2 environment including activities such as provisioning, maintenance, troubleshooting and advanced analysis of requests within the Windows Environment. Prepared and maintained documentation of IT Infrastructure. Security and Non Security Patch Management for Servers (2008/R2/2012/R2) and Workstations (Windows 7/8.1/ 10). Image Engineering and OSD.• Performed Deployment/ Content Distribution/ Client Health using SCM 3.0, EMET 5.1, MBSA 3.0 Baselines/ Patch Management/ SRS Reporting. Creating Custom Reports using SQL Views/2012R2 SDK, Tables, Views, Joins, Share Point and SCCM Dashboards.• Endpoint migration of Office 2010 clients to Office 365. Configured Server Roles for Server 2008/R2, Server Core and AD, ADLDS and ADFS into a DMZ for SSO. Managing Office 365 Groups, Passwords, Users and Licenses using power shell.• Analysis of traffic flows utilizing SIEM/IPS technology and other tools to detect malicious activity, and completion of tasks associated with security monitoring, detection, and incident response including event correlation and syslog analysis, conducting system security reviews, patch management plans, risk mitigation and conformance plans. • Active Directory Audit, Configuration, Monitoring, Troubleshooting. Authoritative/Non-Authoritative Restore of AD and migration from FRS to DFS-R. Reconfigured AD Replication Topology and Domain Restructuring to support RODCs for Hybrid Cloud. AD Groups Analysis & Cleanup using Power Shell and VB Scripting. Group Policy Management and Troubleshooting using PowerShell and VB Scripting. • Creating and managing OU architecture and group policies, set-up and designed AD across multiple sites, TCP/IP, DHCP, DNS, AD Sites and Services, FTP, RRAS, NFS (AS400), SMB (CIFS), sub-netting, SMTP, IIS, Terminal Server configuration.

• Planned 2003/2008/2012SP1R2/ 1511 maintenance, installation, upgrades, migration & deployment/ Office 2003/7/10/13 Office 365 deployment & support Power Shell for Office 365; XP/ Vista/ Win 7/8.1/ 10 Technical Preview & CBB, LTSB, MDT 2013U1/2, SCCM 2012R2SP1/1511 Desktop Deployment Upgrade & Migration.Power Shell for SCCM, MDT 2013 U1/U2.• Implemented a Private Cloud Solution Deploying an On-Premises System Center 2008/2012SP1R2/1511 & Virtual Machine Manager (VMM) Private Cloud.• Virtualizing with Microsoft Hyper-V hypervisor and VMWare, Virtual Machine conversion, migration, VMWare Power CL and Power Shell, Bash. • Planned Windows 7/8/8.1/10 Migration Project; ACF (Application Compatibility Framework); Create Zero Touch MDT Device DeploymentSolution with Office 2010/13/ 365/ Lync/ Share Point/ Exchange.• Performed SCCM 2007/R3/2012R2SP1/1511 Migration/ VMWare virtualization to Hyper V Migration. OSX support experience including OSX Applications.• Performed Deployment/ Content Distribution/ Client Health using SCM 3.0, EMET 5.0, MBSA 2.5 Baselines/ Patch Management/ SRS Reporting /Service Now/ Creating Custom Reports using SQL Views/ SCCM 2007/2012R2 SDK, Tables, Views, Joins, Share Point and SCCM Dashboards.• Dynamic Collection creation for S/W Remediation & Version Control.• Created Complex lab configurations for development and test purposes using Vyatta/VyOS Router/SDN staging SC 2012 R2SP1/1511 on Hyper V for configuring DCM/DSC. • Implemented and managed federated identities (single sign-on (SSO))• Implemented and managed identities by using DirSync, Manage cloud identities, Monitor and troubleshoot Office 365 availability and usage, Plan and implement networking and security in Office 365, Provision Office.

Windows 7 Project Lead; Security, Compliance, Patch Management and XPEOL SME applying SOX/PCI/HIPAA Templates to existing Windows 7, XPCorporate and Retail POS Machines (LGPO's); Planning and DocumentationLead for AD Server 2003 Forest/Domain Migration to Server 2008 R2Infrastructure.Created Standard Corporate Image for Windows 7 x64 MDT /Using Tivoli (TEM Big Fix)Deployment for Domain Joined and Non Domain joined devices.Created and deployed MDT Server 2013/ ADK 8.1 onto Hyper V and VMWareWorkstation 10.0.Created ACF (Application Compatibility Framework) VM Shares for Remediation, Packaging and Application Migration using Wise, AdminStudio, InstallAware, ACT 6.5/ MAP 8.5.Power Shell and VB Scripting.Created XP EOL Security Baseline Created Security Baseline for Windows 7x64 Corporate Machines for import into GPO, EMET 4.0, SCM 3.0.

Windows 7 Image Engineering using the Microsoft Deployment Toolkit 2010/2012 (MDT) Build Server and integrated into SCCM 2007 R3 production deployment gateways. Staging SCCM 2012SP1/R2 Migtrations and SCCM 2007 decommissioning. Planning, deployment and migration from SCCM 2007 R2/R3. Deployment of Windows 7 Enterprise functions and features, Deploy & Manage Office 2007/ 2010 Using SCCM R2 Both Virtual (MDOP AppV Sequencng) & Physical (OCT MSP)Visio & Project 2007/ 2010 Deployment, Support and Maintenance.Automation of Lite Touch Installation (LTI) techniques in conjunction with deployment configuration database(s)Creation of compiled & scripted migrations of XP to Windows 7 and Windows 7 to Windows 7, QA and Testing of departmental and business unit migrations across multiple geographic locations. AD Group Policy Design and Settings for Forest /Domain Level, Location Level, Global Workstation Level and Windows 7 GPO’s, Firewall and Security Policies, Symantec Endpoint Protection.System level debugging using Sysinternals: Procmon, Procexp, WinDbg, PSTools, Process and Diagnostic Utilities including Visual Studio Debugging. Complex lab configurations for development and test purposes; IEAK (IE6/7/8/9/10/11) Internet Explorer Admin Kit, MDOP, MAP, ACT 5.5/5.6,8.5 ORK, OEAT, OACT, OCT, OMPM, OCCI (Macro Remediation), SCM (Security Compliance Manager LGPO) and Custom Security Baselines for SCCM 2007 R3 DCM.

Performed Windows 7 Desktop image deployment process development anddocumentation, including Boot Image, Task Sequence, Driver Packages,Language Packs & Regional components.Configured Server Roles for Server 2008/R2, Server Core and AD, ADLDS and ADFS into a DMZ for SSO Partner & Vendor access.Performed Core image development and distribution, hardware catalogcreation, testing cycle implementation.Performed Application staging, development and deployment.Deployed Office 2007/ 2010 Using SCCM 2007 R2 Both Virtual (MDOP AppVSequencng) & Physical (OCT MSP) Office 97/ 2003Application Files andSettings Migration, Excel COM add-ins and Automation add-ins, Macros &VBA, VB Editing & Debugging Installing native 64-bit Office 2010 inenterprise environments Application Deployments of Windows 7 andMed-V(XP), APP-V & MSI-EXE.