Selected Work in Systems Administration, Automation, Security, and Agentic AI Workloads
Identity & Access
On-Demand Adobe SCIM Sync Trigger
PowerShell utility that lets the helpdesk force an immediate Entra-to-Adobe provisioning sync instead of waiting on the scheduled window. View Project →
Entra Stale Device Cleanup Automation
Automated lifecycle management for stale Microsoft Entra devices using certificate-based Graph authentication. View Project →
SSPR Rollout
Deployed Self-Service Password Reset across the organization, saving $8,000. View Project →
Windows Hello Deployment
Deployed Windows Hello to On Premises devices for a Hybrid environment. View Project →
Conditional Access Infrastructure
Created a Conditional Access infrastructure of over 10 policies to keep company safe from bad actors. View Project →
MFA Configuration and Deployment
Deployed MFA to the entire company securing identities. View Project →
SSO Deployments
Deployed SSO configurations to all internet facing apps View Project →
Entra ID Access Reviews
Deployed Entra ID Access Reviews for external users and applications View Project →
Entra Applications Management
Managed applications for Microsoft Entra, securing access to Microsoft Graph Rest API View Project →
Microsoft PIM Deployment and Role Configuration
Implemented Microsoft PIM for the high privileged and critical roles View Project →
M365 Critial Account Creation and Protection
Per Microsoft Recommendation, created 2 break glass accounts in case of breach to regain access to the tenant View Project →
Risky User Management
Deployed conditional access to automatically deal with risky users and risky sign ins View Project →
Entra Connect Sync Staging Server
Deployed an Entra Connect Staging Server for High Availability of ouron prem to cloud sync View Project →
New User Creation Automation
Automated New User Creation via a Powershell Script. View Project →
Security & Compliance
Tenant-Wide Phishing Email Purge
Incident response tooling that finds and removes malicious email across every mailbox in the tenant, with enforced just-in-time privilege, mandatory preview, and full audit logging. View Project →
Automated Mailbox Permission Audit Reporting
Biweekly compliance reporting on mailbox permission changes, with automatic identity resolution and historical retention for auditor requests. View Project →
Secure Score Optimization
Improved Microsoft Secure Score from 30% to 87% through Conditional Access and MFA. View Project →
Defender for Identity
Deployed Defender for Identity in a Hybrid environment. View Project →
Deployed Attack Simulation Training
Deployed AST to train users on email phishing and social engineering View Project →
CrowdStrike Falcon Next Gen SIEM Deployment
Installed Flacon Agent automatically throughout the environment and connected all log sources to the SIEM, also deployed MFA for onpremises Domain Controllers View Project →
Cloud & Governance
Implemented Azure RBAC and PIM
Deployed RBAC and PIM in our azure cloud to protect existing subscriptions View Project →
BI Infrastructure
Configured connection, user provisioning and SSO for BI Infrastructure using Snowflake, Talend and Qlik View Project →
AI & Copilot Agent Development
Leading AI Implementation
Took AI adoption from a single free Copilot Chat license to a governed, org-wide AI program — Frontier enrollment, Copilot Studio agents, Azure AI Foundry, and compliance-driven retention for a regulated environment. View Project →
Power Automate Flows
Built and maintain 30+ production Power Automate flows automating HR onboarding, change management, fraud intake, and compliance reporting. View Project →
Leading Power Platform Implementation
Stood up Power Platform from scratch — designed a four-environment ALM strategy, least-privilege access model, and connector governance where none existed before. View Project →
Business Prospecting Agent
Agent that helps relationship managers research and prepare for prospective business clients using enterprise guidelines and a relationship-first approach. View Project →
MCP-Connected Microsoft Expert Agent
Microsoft Expert Agent connected to the Microsoft Learn MCP server to answer questions directly from Microsoft's official documentation. View Project →
Endpoint Management
BitLocker Automation via Intune
Automated BitLocker deployment for Intune Devices. View Project →
Windows 11 Upgrade
Lead Windows 10 to Windows 11 upgrade for over 1000 company devices View Project →
BitLocker Automation On Premises
Automated BitLocker deployment across 1,000+ devices using GPOs and PowerShell. View Project →
Automatic Patching for Windows Updates
Automated monthly windows updates via SCCM co-management via Intune. View Project →
Office 365 Application Auto Patching
Deployed infrastructure for 0365 application auto patching View Project →
PC Deployment Server Upgrade and Revamp
Redid the PC deployment Workbench, moved the services to a specific, compliant and modernized server View Project →
Automation & Scripting
File Share to SharePoint Sync
Continuous one-way sync that bridged a network file share to SharePoint during migration, letting a department adopt the new platform at its own pace without stranding data. View Project →
Automated Mailbox Quota Enforcement
Monthly drift correction that keeps mailbox quotas aligned to policy across standard, tiered-exception, and shared mailboxes. View Project →
Automated Health Check Scripts
Implemented Scripts for Systems I was in charge of for automatic health checks and reports. View Project →
Shared Mailbox Creation Automation
Automation of Shared Mailboxes in a Hybrid environment via Powershell. View Project →
Infrastructure
Exchange Online Migration
Migrated from on-prem Exchange, saving $2,000 in certificate costs. View Project →
Windows Server OS Upgrdaes
Upgraded entire server infrastructure of over 100 servers to Server 2019 and Server 2022 View Project →