CurrentNov 2024 — Present
System Specialist / Digital Workplace Specialist
HCLTech · client: Multinational food & beverage group · Abu Dhabi, UAE
Digital workplace, identity and endpoint specialist for the group's Microsoft cloud platform — a single Entra ID tenant over a multi-domain, multi-forest Active Directory estate of 5,000+ identities, 4,000+ mailboxes, 3,700+ managed devices, 2,500+ endpoint security sensors and 2,000+ SharePoint sites.
- Architected and manage Microsoft Intune for 3,700+ devices: Autopilot, compliance and configuration profiles, BitLocker, Windows LAPS and Win32 packaging.
- Own hybrid identity for 5,000+ identities: Entra ID, Conditional Access, MFA, PIM, SSPR and the Joiner-Mover-Leaver lifecycle.
- Deployed Windows Hello for Business passwordless sign-in to 2,800+ devices (97% of the Windows estate) via cloud Kerberos trust, with no PKI and no extra spend.
- Administer Exchange Online, SharePoint Online, OneDrive and Teams across a 2,000+ site tenant, and support the Microsoft 365 Copilot rollout.
- Delivered tenant-to-tenant Microsoft 365 migrations (Exchange, SharePoint, OneDrive, Teams) with minimal disruption to users.
- Disabled legacy SMTP authentication across 4,000+ mailboxes and doubled mailbox audit retention, with zero downtime.
- Hardened a 100+ server estate to a 90%+ CIS Benchmark compliance score using Qualys Policy Compliance.
- Restored a domain-wide Group Policy failure affecting 700+ computers in production hours, with no reboots.
- Delivered a privileged access and directory hygiene audit across 30,000+ records.
- Build PowerShell and Microsoft Graph automation and reporting, and integrated the service desk over OAuth, cutting ticket closure from minutes to about a second.
