Microsoft Azure & application delivery
Hands-on Azure administration spans subscriptions, virtual machines, virtual networks, NSGs, Storage and Key Vault, alongside Azure SQL Database. Application delivery work includes Azure Virtual Desktop session hosts, FSLogix profile containers and dedicated SQL Server infrastructure.
My migration work connects the compute platform with the dependencies that determine day-to-day usability: storage, access controls, profile behavior and application-team coordination.
Microsoft 365 & messaging
Experience includes Exchange Online mail flow, Microsoft Teams and SharePoint, alongside domain and DNS administration. Email security work covers Defender for Office 365, SPF, DKIM, DMARC enforcement and external-forwarding restrictions.
This sits alongside Microsoft 365 backup and licensing administration—not just tenant configuration, but the operational work around messaging, protection and lifecycle changes.
Windows Server, Active Directory & Entra
Windows Server and hybrid identity work includes AD DS, domain controllers, DNS, Group Policy, trusts, directory cleanup and domain migrations. Entra ID and Entra Connect connect that foundation to cloud identity.
Security work includes Conditional Access, MFA, legacy-authentication restrictions, administrative role reduction, Delinea Secret Server, gMSA and Windows LAPS. The focus is on controlled access and reducing reliance on embedded or unmanaged credentials.
Linux, virtualization & storage
My infrastructure background includes Windows Server and Linux administration, VMware vSphere, ESXi and vCenter, and Microsoft Hyper-V. Storage work includes SAN/NAS platforms, virtual disks, storage migrations and server lifecycle management.
Datacenter changes also involve coordinating switching, VLANs, cabling and UPS improvements. I treat virtualization as part of a wider operating environment, rather than an isolated hypervisor layer.
Veeam, replication & recovery
Recovery experience includes Veeam Backup & Replication, Veeam Backup for Microsoft 365 and Veeam ONE, with repository, retention and archiving work. Azure Site Recovery, Zerto and Hyper-V replication extend that background to workload replication and failover-test environments.
Backup, replication and recovery testing serve different purposes. This portfolio describes the technologies and configuration work involved; it does not claim guaranteed availability or unverified recovery times.
Cisco networking & infrastructure security
Networking experience includes Cisco switching and routing, DNS, DHCP and firewall technologies. Infrastructure security work includes NSG controls, Azure Storage and Key Vault access restrictions, domain-controller segmentation and vulnerability mitigation.
These controls connect network boundaries with identity and workload access. Troubleshooting and change coordination remain part of the engineering work, alongside configuration and hardening.
PowerShell, automation & operations
PowerShell work includes administrative automation, secure service-account integration and automated ESXi root password rotation. Operational experience includes PRTG monitoring, incident troubleshooting, technical documentation, vendor coordination and licensing governance.
A concrete example is replacing embedded script credentials with gMSA, connecting automation with credential hygiene rather than treating scripts as exceptions to access controls. My personal lab also provides space to explore infrastructure-as-code concepts and document lessons learned.