Madhur Deepak

Work History

Digital Workplace Consultant

European Bank of Reconstruction and Development (EBRD)

04.2025 - Current

The EBRD aspires to evolve in the Azure IDAM and DWP space by migrating workloads from SCCM to Intune and evolving in IDAM for a cloud-based identity and access management solution.
I have joined the Digital Workplace team as a consultant for the DWP technology stack, which includes M365, EUC, IDAM, Intune, and SCCM.
Contract

Sr Architect, IDAM

TCS and NationalGrid

05.2023 - 04.2025

Worked for the divestiture of National Energy from the parent organisation NationalGrid Inc, which is the government power supplier in the UK
Key roles include:
1. Designing and planning a new greenfield hybrid Identity and Access management solution using AD, Entra ID connect and Entra ID and the migration strategy for the users to the new tenant using Quest Migration Manager QMM.
2. Configuration and deployment of a cloud-based EUC solution (InTune) on a new Azure tenant. It included the migration strategy of the devices and the applications.
3. Migration of O365 workloads to a new tenant, ensuring business continuity and maintaining a great user experience. The workloads include Exchange, SharePoint, Teams and ancillary services.
4. Responsible for coordinating with various stream architects for security, Azure Infrastructure team, workload migration, business head, DPIT, EUC, DWS and M365.
5. Migration strategy and aligning with various streams to ensure a smooth migration without hampering the user experience.
6. Prepared the LLD and HLD, which includes the migration approach, access to the workloads during the transition and dependency mappings.
7. Vendor engagement and interviews for the IAM migration strategy.
8. Vendor management and handover to the operations.
Contract

Cloud Architecture Consultant

Cluster Reply UK

01.2022 - 03.2023

I work as a cloud consultant/architect specialising in Azure infrastructure technologies with the following key responsibilities.
Active engagement in every phase of a typical project lifecycle, including discovery, design, testing and deployment of Azure cloud solutions.
Preparing design documents, proposal writing, Pre-sales, pre-engagement process, RFPs, Work orders, Project planning, solution documentation, HLD and LLD.
Assisting companies in identifying and addressing their cloud computing needs, enabling them to leverage the technology to achieve their organizational objectives and operate more efficiently.
Conducting workshops and training on Azure to help them adapt cloud with confidence.
Providing strategies and standard models to the customer to help them mature the cloud infrastructure.
A few of my recent projects include:
Deployment and configuring of Azure Active Directory hybrid solution.
Deployed various identity and governance features of Azure active directory components like PIM, RBAC, Access reviews, Conditional Access, Enterprise applications, MFA, secure score, application proxy, SSO and seamless SSO, enabling authentication types like PHS, PTA or hybrid ADFS.
Conducted multiple workshops on Azure Landing zone, Azure Entra, Identity and Access management for customers.
Enterprise Application migration from hybrid ADFS-based authentication to Azure active directory.
Deployment and configuration of Azure Defender security suites.
Designing and deploying AZURE Landing Zones following cloud adaption framework.
Migration of mobile devices to Intune and implementing the lifecycle of mobile devices enrolled in Intune.
Deployment of SCCM current branch infrastructure, Setup and configuration of Intune co-management
Deployment of Windows10 21H2 through MECM task sequence and Intune Autopilot
Migration of on-prem Exchange mailboxes to O365 and migration of G-suite mailboxes to O365.
Discovery, and assessment of current Azure estate and prepared the roadmap/HLD/LLD to mature in Azure adhering to the zero-trust architecture principle.
Permanent

Infrastructure Solutions Architect/ IAM Architect /Wintel Lead

Hexaware Technologies

10.2015 - 01.2022

Project 1
Title: Active Directory and IAM consultant.
I worked for a client with a global presence with more than 300,000 users where I led an end-to-end Active Directory intra-forest migration project of consolidation of 50 domains into one single domain.
It started with hiring a team of 10 members, onboarding and training for a project on active directory domain migration.
Discovery of the current AD infrastructure, sites and services, subnets, application dependencies, Group policies, file servers and Integration with platforms & Applications.
Next phase of the project includes the preparation of HLD and LLD and regular review of the documentation and later the intra-forest phased migration using ADMT and quest migration manager for AD.
Troubleshoot post-migration issues and transition to the operations and documentation of operational tasks.
Project 2:
Title: System Architect/Wintel Lead
I worked as an Infrastructure Lead architect for the EU region. This is a customer-facing role based in the UK and led a global team for all the major technologies in the organization.
Data Centre Administration: The infrastructure was primarily hosted on-prem and UK being the HUB site. I have been solely responsible for the DC administration for the UK and EU regions. Along with the administration tasks such as racking and stacking, cabling, and power management of the Datacentres, I have also done various compute, storage and network-related upgrades and migrations, DC-Refresh projects, and procurement of enterprise hardware and software.
VMware infrastructure: Physical to virtual migration reducing the physical footprint, deploying hyper-converged solutions. Migration of VMs and storage, Troubleshoot ESXi/Hypervisor host issues related to computing, storage, network and performance. Installation of hyper-converged solutions like Dell VxRail, Dell Unity storage, and HP SimpliVity.
Experience in troubleshooting and configuring V-Sphere, fault tolerance, V-centre server, Storage and storage v-motion, VLAN, Port groups, high availability and redundancy.
Windows servers: I have a deep conceptual understanding of various flavours of the Windows operating system and the roles/applications it hosts. The majority of the projects I worked on are Windows-specific which include Imaging of virtual machines, Windows 2008, 2008R2 and 2012 end-of-life, SQL cluster upgrade and migration, Exchange EOL, file server migrations and automation of various tasks through PowerShell and tools.
Windows 2008 End of Life: I worked on Windows 2008 and 2012 end-of-life. This included migrating a Windows 2008, 2008R2 and 2012 servers footprint of more than 200 applications (standalone and clustered) servers to windows server 2016 and 2019. This includes the migration of applications like Biztalk, JDE, Tableau, file server, exchange 2010, and SQL servers.
Azure: As part of the customer's cloud-first strategy, with Azure being the primary cloud service provider, I have been actively involved in preparing the cloud infrastructure to enable a seamless workload shift. I have been responsible for the administration of entire Azure tenants, ensuring smooth operations and adherence to best practices. This included planning and deployment of the Azure Landing zone. Network infrastructure including VNET, peering, topology, VNET Gateway and NSG. Setup of Management groups, subscriptions, resource groups, naming conventions, RBAC (Role-Based Access Control), Governance model, Azure policies, and tagging. I also conducted sessions on governance and configured PIM (Privileged Identity Management), Azure Security Centre, conditional access policies, and MFA and Password-less options.
EUC/SCCM administrations: SCCM and SCOM are the key components in my scope of work. I have built the SCCM infrastructure from scratch including one primary site server, one secondary site server and multiple distribution points. Have set up site boundaries, and device discovery, configured SCCM client settings, compliance policies, reporting services, power management, and application management, and migrated MBAM to SCCM bitlocker, Branch Cache and Peer Cache for smaller sites.
Windows 10: After building and configuring the SCCM infrastructure, I successfully led and completed a Windows 10 migration project using the SCCM task sequence. The project also included Enrolling of azure AD and hybrid Azure AD joined devices to Intune, setting up co-management, distributing the workload between MECM and Intune for pilot machines, Enabling conditional access, App protection policies, App configuration policies, Device configuration profile and compliance policies.
Mobile device: Zero-touch enrolment of Android and IOS, Configuration profile, compliance policies, Mobile application management (MAM), ABM and Android enterprise management, mobile device lifecycle setup, configuration and deployment.
Additional Projects: Deploying, configuring, and testing McAfee products through EPO, deployment, configuration and tuning of auditing applications in compliance with GDPR laws, Audit and security reviews of the network and the servers, identifying the gaps and remediation of issues.
6 years 4 months

AD consultant

Atos India Pvt Ltd.

12.2013 - 10.2015

Migration of active directory objects as part of recent merger and acquisition of the client. My key role included.
Thorough discovers of AD infrastructure of the source forest domain and the target forest domain which include authentication & authorisation mechanism, application & services discovery, engaging with the application/product owners for complex applications.
Preparing a phased migration plan which include migration of users, groups, service accounts, computer accounts, file servers, exchange mailboxes. It also creation of test plans, rollback plans, and end-user communication
Establishment of trusts between the forest and validation of trust.
Migration of resources following the sequential and phased approach. Troubleshoot migration failures, troubleshoot post deployment issues.
1 year 11 months

Windows and Active Directory consultant

Microsoft Global Technology Centre

06.2013 - 12.2013

During my tenure at Microsoft, I was part of their Identity team and was responsible for providing advisories on Microsoft products and active directories best practices. As a member of the advisory team, my SME areas were Kerberos authentication, Active directory replication and Group policies.
My day-to-day job includes.
Providing troubleshooting support and advisory to the Microsoft customer. The key technologies I provided support are active directory-related components including Groups Policies, AD replication, Domain Controllers, LDAP, Active Directory domain services, Active directory domain and forest trust, DFS, DFSR, FRS, Account lockout, NTFS permissions.
Other components include Hyper-V, file servers, Terminal servers, Terminal server licensing servers, Windows cluster services, disaster recovery and software deployment.
Also, the client components like folder redirection, offline file synchronization, login issue and client-side caching.
6 months

Netbackup Administrator

Symantec/Veritas technologies

07.2011 - 06.2013

As a support specialist for the backup application NetBackup which was the leading backup application. My job involved support and consulting to enterprise customers and partners worldwide.
Key responsibilities include:
Assisting customers with installation and upgrades of various Netbackup products and break fixes for backup and restore failures.
Guiding customers through backup strategies and planning to optimum time and throughput of backups and restores.
Troubleshooting and diagnosing Netbackup device management issues, including drives, tape media, robotic arms, Data Domain, DSSU, and Virtual Tape Library (VTL).
Troubleshooting Exchange database backups and restores for Exchange 2003, 2007 (configured on Windows Cluster), and 2010 (for Database Availability Group).
2 Years

Windows and Active Directory consultant

Convergys

09.2007 - 06.2011

Microsoft has diverged their enterprise customer as premium and professional. The professional-level support was outsourced to Convergys. During my tenure in Convergys, I have got a thorough knowledge of the Microsoft Operating system, and the linear and logical framework for investigating and troubleshooting.
During my tenure as a Windows Active Directory Support Engineer at Convergys from September 2007 to June 2011, have been providing troubleshooting support and advisory to the Microsoft customer. The key technologies I provided support are active directory-related components including Groups Policies, AD replication, Domain Controllers, LDAP, Active Directory domain services, Active directory domain and forest trust, DFS, DFSR, FRS, Account lockout, NTFS permissions.
Other components include Hyper-V, file servers, Terminal servers, Terminal server licensing servers, Windows cluster services, disaster recovery and software deployment.
Also, the client components like folder redirection, offline file synchronization, login issue and client-side caching.
3 years 10 months

Summary

Overview

Work History

Digital Workplace Consultant

Sr Architect, IDAM

Cloud Architecture Consultant

Infrastructure Solutions Architect/ IAM Architect /Wintel Lead

AD consultant

Windows and Active Directory consultant

Netbackup Administrator

Windows and Active Directory consultant

Education

Bachelor of Engineering - Computer & Information Technology

Skills

Interests

Timeline