● Deliver Azure and Microsoft 365 infrastructure solutions in a consultative engineering model, translating client-reported problems into deployed cloud solutions rather than working as first-line technical support. ● Contributed to a commercial proposal automation system built across three components, developing the backend orchestration service (Python, FastAPI, PostgreSQL) that integrates with an Azure Function for document generation and coordinates with a teammate-built email service through webhook-based communication, using an event-driven state machine to track every proposal from request to delivery — replacing a fully manual process. ● Built a standalone quoting tool (HTML/CSS/JS) for the sales team that reads tax rates live from the official pricing template as a single source of truth and exports quotes into the company's official Excel/PDF format, replacing a manual, error-prone process. ● Design architecture for select client cloud solutions end-to-end, and implement pre-defined architectures for others, deploying resources and integrations using Azure Functions and workflow automation. ● Support Microsoft's Partner incentive program by preparing technical documentation and contributing engineering input toward proposed client solutions

● Delivered Azure and Microsoft 365 security and infrastructure consulting for corporate clients across financial services, insurance, education, and tourism sectors. ● Implemented Endpoint DLP in Microsoft Purview across a client's full device fleet, integrating Intune with Defender for Endpoint to eliminate sensitive data exposure with zero manual intervention post-deployment. ● Migrated and secured hybrid identities for a tenant with 500+ objects, syncing on-premises Active Directory with Entra ID and deploying Administrative Units to segment administration by business area and reduce the blast radius of privileged roles. ● Closed identity and access gaps for multiple clients by implementing Entra ID, Conditional Access, MFA, and Identity Protection, removing legacy access policies incompatible with a Zero Trust model. ● Built a security posture from the ground up for a client with no prior security maturity, raising their Secure Score by roughly 30 points in 60 days through Conditional Access, MFA, and PIM with least-privilege principles, and cut privileged access provisioning time from days to under 15 minutes with just-in-time approval workflows. ● Automated enrollment of 100% of a client's corporate devices into Intune with zero manual intervention, designing the full Active Directory → Entra ID → Hybrid Join → auto-enrollment flow with compliance policy validation. ● Reduced critical incident response time from manual intervention to automated execution in under 5 minutes by designing a Defender → Sentinel → Playbook → Hybrid Runbook Worker workflow, delivered as a reusable Bicep and Azure Automation template that cut onboarding time for similar future projects by roughly 40%. ● Designed and implemented a disaster-recovery architecture from the ground up for an infrastructure client — including region and availability-zone selection, resource sizing, network topology, and VPN connectivity — validated through controlled failover testing with Azure Site Recovery, and configured Azure Lighthouse for delegated multi-tenant administration. ● Implemented resource tagging across a client's Azure environment to attribute cloud costs individually per resource, and built a utilization dashboard that identified underused resources, informing rightsizing and SKU/tier changes that reduced overall infrastructure spend by an estimated 25%. ● Resolved daily tier 1–3 technical support tickets across Azure and AWS environments for multiple corporate clients via Freshdesk — covering identity and access issues, user onboarding, Microsoft 365 licensing recommendations, and cloud resource/log monitoring in both platforms.

● Maintained 99%+ availability across 15+ Windows Server instances by implementing Hyper-V clusters with proactive health monitoring and scheduled preventive maintenance. ● Reduced unauthorized access incidents by ~40% by deploying GPO hardening baselines, network segmentation, and DNS filtering across 200+ corporate endpoints. ● Achieved RTO under 2 hours for critical systems — validated by quarterly DR drills — through a structured backup strategy using Windows Server Backup with off-site replication.