Microsoft 365Entra IDIntuneDefenderPurviewZero Trust
LM
9+ Years
Enterprise IT
99.9%
Availability
0+
Years of Experience
0+
Enterprise & Home Lab Projects
0+
Technical Articles
0+
Enterprise Endpoints Managed
97–0%
Patch Compliance
0.0%
Infrastructure Availability
About
Engineering secure, resilient Microsoft environments
Nine years spent designing, securing and operating the infrastructure enterprises depend on — from hybrid identity to endpoint compliance and Zero Trust.
I'm a Senior Microsoft 365 & Infrastructure Engineer based in Bengaluru, focused on designing and securing hybrid IT across Azure and on-premises Windows Server. My work spans identity, endpoint management, security and compliance — the pillars that keep modern enterprises running safely.
At Celegence, a regulated life-sciences company, I manage hybrid IT for 200+ endpoints, hold 99.9% infrastructure availability and lead patch management to 97–99% compliance while supporting ISO/IEC 27001 audit readiness. Earlier, at CX100, I owned the entire Microsoft 365 cloud environment and reached 100% MFA coverage.
Outside of engineering, I run TechCertGuide and the IT Insider newsletter (1,000+ subscribers), publishing practical guides on Microsoft 365, Azure and security. I lean on AI-assisted workflows to move faster without cutting corners.
Security and compliance built in, not bolted on
Automation-first operations with PowerShell & Graph
Continuous learning across the Microsoft security stack
Clear technical writing that turns complexity into clarity
Microsoft 365 & Collaboration
Exchange Online, Teams, SharePoint and OneDrive administration with governed provisioning, licensing and access control.
Identity & Access
Hybrid identity on Microsoft Entra ID — Conditional Access, MFA, SSPR and RBAC designed around Zero Trust.
Endpoint Management
Intune, Windows Autopilot and compliance policies driving 98%+ endpoint compliance across managed fleets.
Security & Threat Protection
Microsoft Defender for Endpoint, Defender XDR and EDR for threat visibility, hardening and rapid response.
Infrastructure & Continuity
Active Directory, Windows Server, Azure IaaS, DNS/DHCP and BCP/DR planning validated against RTO and RPO targets.
Compliance & Governance
ISO/IEC 27001:2022 audit readiness and Microsoft Purview data governance embedded into day-to-day operations.
Skills
A full-stack Microsoft engineering toolkit
Depth across the Microsoft cloud and infrastructure stack — organized the way enterprise teams actually work.
Microsoft 365
Exchange OnlineMicrosoft TeamsSharePoint OnlineOneDrive for BusinessLicensing & ProvisioningPower Automate
Identity & Access
Microsoft Entra IDEntra ConnectConditional AccessMFA & SSPRRBACActive Directory
Endpoint Management
Microsoft IntuneWindows AutopilotMDM / MAMCompliance PoliciesBitLockerWSUS Patching
Security
Defender for EndpointDefender XDREDRMicrosoft SentinelZero TrustVulnerability Management
Infrastructure
Windows ServerAzure IaaSDNS / DHCPGroup PolicyFortiGate / VPNBCP / DR
Automation
PowerShellPower AutomateProvisioning ScriptsReporting AutomationGraph API
Compliance
ISO/IEC 27001:2022Microsoft PurviewData Loss PreventionAudit ReadinessSecurity ControlsITIL
Experience
Nine years across enterprise IT
A steady progression from enterprise endpoint support to owning hybrid Microsoft infrastructure and security.
C
Celegence
Current
Senior Infrastructure Engineer
Jul 2023 — PresentBengaluru · Life Sciences
Own hybrid Microsoft 365, Azure and Windows Server infrastructure across 200+ endpoints in a regulated life-sciences environment, aligned to ISO/IEC 27001.
Maintain 99.9% infrastructure availability across hybrid M365, Azure IaaS and Windows Server.
Lead patch management via WSUS and Intune, achieving 97–99% endpoint compliance.
Implemented Intune, Autopilot, Conditional Access, MFA and SSPR for 98%+ Zero Trust compliance.
Support ISO/IEC 27001:2022 audits and BCP/DR validation against defined RTOs and RPOs.
Microsoft 365Entra IDIntuneDefenderAzure IaaSWindows ServerPowerShellISO 27001
C
CX100
System Administrator
Dec 2021 — Jul 2023Bengaluru
Primary Microsoft 365 administrator for a cloud-native environment, owning identity, endpoint management, security and SaaS operations.
Owned the full M365 estate — Entra ID, Intune, Exchange Online and Teams — reaching 100% MFA coverage.
Reduced onboarding and provisioning time by ~40% through standardized IAM.
Automated provisioning, licensing and reporting with PowerShell, cutting admin effort ~50%.
Enforced Zero Trust with Intune MDM/MAM, Autopilot and compliance policies.
Microsoft 365Entra IDConditional AccessIntuneExchange OnlinePowerShellITIL
MA
Moody's Analytics
Desktop Support Engineer
Dec 2018 — Dec 2021Bengaluru
Delivered enterprise endpoint support for 500+ users while supporting Active Directory, Microsoft 365 and infrastructure operations.
Supported M365 services — Outlook, Teams, OneDrive and SharePoint — for 500+ enterprise users.
Administered Active Directory accounts, security groups, Group Policy and access requests.
Deployed Windows 10 with BitLocker and standardized configurations to speed onboarding.
Monitored patch compliance and drove remediation while maintaining SLA targets.
Active DirectoryMicrosoft 365Windows 10MDMGroup PolicyBitLocker
WI
Wipro Info Tech
Desktop Support Engineer
Jan 2017 — Nov 2018Bengaluru · Contract
Provided enterprise desktop support in a 3,000+ user environment covering endpoint deployment and ITIL-based service operations.
Deployed enterprise desktops and laptops using SCCM for imaging and hardware refresh.
Resolved Windows, Office, VPN and network incidents with accurate ticket documentation.
Coordinated SaaS access provisioning and escalations using ITIL service management.
Monitored endpoint patch compliance and escalated operational issues for remediation.
SCCMWindows OSMicrosoft OfficeVPNITIL
Featured Projects
Enterprise work that moves the needle
Selected engagements across compliance, endpoint management and Zero Trust — each mapped to certifications and focused on measurable security and operational outcomes.
Hero ProjectProductionCompliance · Data Governance
Hero image placeholder
Microsoft Purview Data Loss Prevention
Enterprise DLP across Microsoft 365 and Windows endpoints — standard and custom SITs, Endpoint DLP and Generative AI upload protection.
Difficulty
Advanced
Environment
Microsoft 365 / Purview
Outcome
Reduced sensitive-data exposure through policy-driven classification, alerting and automated enforcement mapped to ISO 27001 controls.
Certification mapping
SC-400SC-900MS-102
Microsoft PurviewDLPEndpoint DLPCustom SITGenerative AI ProtectionDefender for Endpoint
AI-powered departing-employee exfiltration investigation — scoped evidence collection, generative AI categorization, natural-language search and deep content examination inside Microsoft Purview.
Difficulty
Advanced
Environment
Microsoft 365 / Purview
Certification mapping
SC-400MS-102SC-200
Microsoft PurviewData Security InvestigationsGenerative AIInsider Risk ManagementSC-400SC-200
Policy-driven detection of sensitive information and code-of-conduct risk across Exchange, Teams and Viva Engage, with a full reviewer investigation and remediation workflow.
Difficulty
Advanced
Environment
Microsoft 365 / Purview
Certification mapping
SC-400MS-102
Microsoft PurviewCommunication ComplianceInsider RiskExchangeMicrosoft TeamsViva Engage
Defence-in-depth email protection with Microsoft Defender for Office 365 — sandbox every attachment, inspect every URL at click time, and quarantine identity-based impersonation attacks.
Difficulty
Advanced
Environment
Microsoft 365 Business Premium / Defender for Office 365 Plan 2
Certification mapping
SC-200MS-102
Microsoft Defender for Office 365Safe AttachmentsSafe LinksAnti-PhishingZero Trust
Compliance-enforced ethical wall between Finance and HR, blocking Teams communication and SharePoint/OneDrive collaboration in both directions, independently verified via PowerShell and live Teams enforcement testing.
Difficulty
Advanced
Environment
Microsoft 365 / Purview
Certification mapping
SC-400SC-300
Microsoft PurviewInformation BarriersInsider RiskMicrosoft TeamsExchange Online PowerShell
Discovering, auditing and governing Microsoft 365 Copilot and generative AI activity, with auto-provisioned Data Loss Prevention and Insider Risk Management policies.
Difficulty
Advanced
Environment
Microsoft 365 / Purview
Certification mapping
SC-400SC-300SC-900
Microsoft PurviewDSPM for AIMicrosoft 365 CopilotPurview AuditData Loss PreventionInsider Risk Management
Operationalising a risk-based compliance program — assessments, a 500-item improvement action backlog and a full ISO/IEC 27001:2013 control mapping across a Microsoft 365 tenant.
Difficulty
Advanced
Environment
Microsoft 365 / Purview
Certification mapping
SC-400SC-900
Microsoft PurviewCompliance ManagerISO/IEC 27001Regulatory ComplianceData Protection BaselineAI Baseline
