
Experienced IT Systems & Security Engineer with a strong track record delivering infrastructure, identity, and compliance solutions across hybrid Microsoft 365 environments. Adept at operating across the full technical stack from endpoint management and server administration to cloud governance, security operations, and ITIL service delivery.
Recent project work includes architecting Microsoft Purview data governance and records management solutions, deploying Intune-based endpoint estates across Windows 11, implementing Entra ID hybrid identity and tenant federation, and designing compliance frameworks aligned to ISO 27001. Certified Microsoft Endpoint Administrator (MD-102) with hands-on experience across Intune, Entra ID, Microsoft Defender, Exchange Online, and SharePoint Online.
Comfortable working at engineer and architect level scoping, designing, documenting, and delivering solutions independently while maintaining strong service desk and stakeholder awareness. Experience spans both in-house and MSP environments, supporting users across the UK and internationally.
Now seeking a senior engineering or systems architect role where technical depth, security focus and the ability to drive meaningful improvement can be fully utilised.
Certified Microsoft Endpoint Administrator
Additional Responsibilities:
▸ Technical Services Representative on the Operational Leadership Team (OLT), collaborating across departments to shape technical strategy
▸ Technical Advisor on the AI Working Group Board, guiding AI implementation across the business
▸ Change Advisory Board (CAB) stakeholder — risk assessing and authorising high-impact IT changes
Key Responsibilities:
▸ Provided 1st & 2nd line support to ~100 employees across the UK and Pakistan, in person and via remote access tools
▸ Administered the full Microsoft 365 suite -SharePoint, Intune, Entra ID, Exchange, Defender, and Azure DevOps
▸ Managed domain services including Group Policy, user and group accounts, and computer management
▸ Oversaw on-premises and virtual server infrastructure: Domain Controllers, WSUS, VDI environments, Oracle databases, and Hyper-V
▸ Supported virtual remote access solutionsincluding Citrix, Always On VPN, and Sophos VPN
▸ Used Intune to automate application deployment, policy management, remediation scripts, and endpoint compliance
▸ Ran an ITILv4 service desk, managing triage, incident, problem, and event records
▸ Led weekly vulnerability management meetings, coordinating team actions and driving remediation
▸ Implemented company-wide changes aligned to ISO 27001 standards, strengthening security posture and compliance
▸ Carried out licence reconciliation and asset tracking via CMDB
▸ Conducted vendor audits and managed supplier information as part of formal vendor management
▸ Produced policies and technical documentationto standardise and improve IT processes
▸ Diagnosed and resolved hardware faultsacross laptops, peripherals, mobile devices, and printers
▸ Delivered 1st line technical support on network devices including routers, modems, and switches, resolving issues within agreed SLAs and KPIs
▸ Operated an ITILv4 service desk(FreshDesk) for incident logging, documentation, and ticket management
▸ Resolved billing and account queries using customer records, applying strong interpersonal and conflict resolution skills
▸ Designed physical and logical network infrastructure using GIS and CAD systems, supporting ISP-scale rollout planning
▸ Analysed spatial and infrastructure datasets to inform design decisions and coordinate field surveys
▸ Coordinated with field teams to problem-solve and accurately document infrastructure builds end to end
▸ Acted as Subject Matter Expert (SME), providing prompt technical guidance to support agents across the business
▸ Managed project tasks and deliverables in collaboration with senior engineers, tracking milestones and ensuring accurate as-built documentation
▸ Built working knowledge of cloud services and network management in a technical engineering environment
▸ Delivered 1st line support across a managed service provider (MSP), supporting customers across multiple industries via phone, email, and on-site visits
▸ Administered Microsoft 365 for hundreds of users — Intune, Entra ID, and Exchange Online management
▸ Managed customer devices through N-able RMM; resolved network, software, and hardware faults with minimal downtime
▸ Utilised PowerShell and Bash automation tools to update and track customer equipment
▸ Configured and deployed hardware and networking equipment at customer sites
▸ Progressed from supporting the lead designer to assuming full ownership of GIS workflow design, independently leading network planning processes for telecoms infrastructure rollouts
▸ Tracked and ensured delivery of project milestones and objectives across infrastructure build programmes
▸ Liaised with external stakeholders to oversee telecoms infrastructure builds and produce accurate as-built documentation
▸ Planned and coordinated field team appointments for service changes and new product delivery
▸ Applied an agile working approach to network infrastructure planning, using critical thinking to evaluate and select optimal solutions
▸ Authored business correspondence and technical documentation for internal and external audiences
▸ Acted as the primary point of contact for GIS design decisions, coordinating with stakeholders and field teams to ensure accurate, compliant infrastructure documentation
Microsoft 365 Stack
Intune Entra ID Defender Exchange Online SharePoint Online Purview
Identity & Security
Hybrid AD Azure AD ISO 27001 DLP eDiscovery Vulnerability Management
Infrastructure
On-prem AD Group Policy Hyper-V WSUS VDI Oracle DB Always On VPN Citrix Sophos VPN
Service Management
ITILv4 ITSM CMDB Change Advisory Board SLA Management
Networking & Design
GIS CAD Network Planning Cisco Fibre Optics
Development & Data
Python SQL Oracle MySQL PowerShell Bash
Microsoft Certified: Endpoint Administrator Associate (MD-102)
CCNA: Switching, Routing & Wireless Essentials — Cisco, 2021
CompTIA IT Fundamentals — Cisco, 2020
Complete Cyber Security: Network Security — Udemy, 2019
Complete Cyber Security: Hackers Exposed — Udemy, 2019
SQL Bootcamp — Udemy, 2024
Women In Tech Awards
Rising Star Nomination, 2025
Confident and practised user of AI tools including Claude (Anthropic) and ChatGPT, applying them to technical problem-solving, documentation, and workflow automation in day-to-day engineering work.
Technical Advisor on the company AI Working Group Board, contributing to strategy and governance around AI adoption.
Capable of designing and deploying AI agents — demonstrated via a fully interactive AI-powered CV built with Hugging Face Spaces:
huggingface.co/spaces/WanderingPlato/career_conversation
▸ Leading a remote support tool evaluation and POC (Splashtop vs BeyondTrust), with compliance, security, and auditability requirements at the core of the selection criteria covering Windows and mobile device coverage across UK and Pakistan
▸ Leading the deployment of PRTG network monitoring, including WMI-based auto-discovery, LAPS credential integration, and privilege scoping managing the full change process through CAB
▸ Architected a Microsoft Purview event-based retention solution for HR leaver documents in SharePoint, using Power Automate and the Compliance REST API
▸ Led the migration of Windows and iOS devicesto Microsoft Entra and Intune, enabling modern device management and remote working
▸ Designed and implemented an ITILv4 service desk with clear SLAs and a continuous improvement register
▸ Rolled out a company-wide SharePoint intranet, providing a central hub for collaboration and communications
▸ Built a SharePoint onboarding portal in collaboration with HR, with setup guides and self-service resources for new starters
▸ Introduced biometric security (Windows Hello for Business / FIDO2) across the organisation, strengthening access control
▸ Deployed Microsoft Purview sensitivity labels, DLP policies, and eDiscovery to safeguard data and meet compliance requirements
▸ Introduced a CMDB to improve visibility and control over devices and applications across the estate
▸ Managed the migration of on-premises file storage to SharePoint and OneDrive, improving governance and reducing data loss risk
▸ Automated laptop and mobile device deployment using Intune and Apple Business Manager
▸Designed and ran a proof of concept for tenant federation with a sister company, improving cross-group data sharing oversight