Microsoft Cloud & Infrastructure Consultant with 3.5+ years of hands-on experience across Microsoft Entra ID (Azure Active Directory), Microsoft 365 administration, Azure cloud, identity governance, endpoint security and automation. Strong practical experience with Conditional Access, MFA/SSPR, SAML SSO, SCIM provisioning, PIM, Access Reviews, Entitlement Management, dynamic groups, group-based licensing and hybrid identity using Entra Connect. Experienced in PowerShell and Microsoft Graph API automation, M365 tenant migrations, Intune/Autopilot, Defender, Active Directory Domain Services/GPO, and Azure VM operations.
KEY ACHIEVEMENTS
▪ Microsoft Solution Partner — Drove BaffleSol's Gold → Solution Partner upgrade by coordinating competency requirements, licenses, Azure funding/credits and partner benefits.
▪ 5+ Migrations — Led Google Workspace → Microsoft 365 and tenant-to-tenant migrations with minimal downtime.
▪ 50% Azure Cost Reduction — Reduced Azure compute costs through right-sizing, reserved instances, off-hours shutdowns, cleanup, storage tiering and Azure Hybrid Benefit.
▪ Automation — Built organization-wide PowerShell + Power Automate automation for onboarding, offboarding, licensing, security reporting and provisioning.
▪ In-house CRM — Co-designed D365 Customer Service as an internal CRM replacing Freshservice, saving lakhs in annual licensing fees.
▪ 15% Licensing Savings — Built license-auditing automation to identify unassigned, duplicate and unused licenses.
CORE SKILLS
Identity & Access: Microsoft Entra ID (Azure Active Directory), Active Directory, Entra Connect / Azure AD Connect (AAD), Conditional Access, Named Locations, MFA, SSPR, PIM, Access Reviews, Entitlement Management, Dynamic Groups, Group-Based Licensing, B2B Guest Access, Enterprise App SSO, SAML SSO, SCIM
Microsoft 365: Exchange Online, SharePoint Online, Teams, OneDrive, M365 Copilot, Viva Suite, Viva Engage, Microsoft Loop, Planner, Project, M365 Lighthouse, Service Health, Message Centre
Security & Compliance: Defender for Endpoint, Defender for Email, Defender for Cloud, Defender for Cloud Apps (MCAS/MDCA), Microsoft Purview, DLP, Sensitivity Labels, eDiscovery, Retention, Communication Compliance, Secure Score, Attack Simulator, SPF, DKIM, DMARC
Endpoint: Intune MDM/MAM, Windows Autopilot, Compliance Policies, Configuration Profiles, Endpoint Migration, Device Enrollment
Automation: PowerShell, Microsoft Graph API, Exchange PowerShell, ExchangeOnlineManagement, MicrosoftTeams PowerShell, Entra PowerShell, Power Automate, Azure Automation, Azure Functions, Runbooks
Azure & Cloud: Azure VMs, Azure DevOps, Azure Key Vault, Azure Cost Management, Azure Billing, FinOps, Azure Hybrid Benefit, Cloud Resource Governance
Directory / Infra: AD DS, OU Structure, GPO, DNS, DHCP, Replication Health, Disaster Recovery Planning, Windows Server
Other: Fortinet VPN, Sophos Central, VPN Configuration, SQL, JSON, YAML