Newbie Developer , have a Passion for learning New Development Skills. I'm a Self Learner, But actively looking for a Mentor, so i can be steered in a right Direction!!

Cloud Infrastructure & Identity Specialist | 100% Azure-Native Environments | 500+ Endpoints | Vulnerability & Patch Management
I design, deploy, and secure enterprise cloud infrastructure using Microsoft Azure, Intune, and Entra ID.
Currently architecting endpoint security and patch orchestration strategies at ASPIRE Global Service Centre—a
managed services provider delivering infrastructure support to financial sector clients across fully cloud-native
(zero on-prem) environments.
WHAT I SPECIALIZE IN:
Cloud Infrastructure & Identity
→ Microsoft Intune expert: configuration profiles, compliance policies, security baselines, app protection policies,
conditional launch controls across 500+ heterogeneous endpoints (Windows, macOS, iOS, Android)
→ Microsoft Entra ID (Azure AD) mastery: Conditional Access policies, identity governance, MFA enforcement,
privileged access management (PAM), identity lifecycle management
→ Azure platform administration: VMs, networking, storage, monitoring, hybrid identity synchronization
→ Secure by default: zero-trust architecture, device compliance enforcement, insider threat mitigation
Windows Patch & Vulnerability Management (CE+ Hardening)
→ Patch orchestration: WSUS, Windows Update for Business, Intune-driven deployment cycles
→ CVE monitoring & risk prioritization: continuous vulnerability assessment, 48-hour response SLA on zero-days
→ CE+ (Chromium Edge) security: enterprise browser policy, vulnerability response, security hardening
→ Windows Server hardening: STIG implementation, GPO configuration, Windows Defender for Endpoint tuning
→ Compliance frameworks: SOC 2 Type II, ISO 27001, HIPAA readiness, audit-ready documentation
Microsoft 365 Enablement
→ Exchange Online, SharePoint, Teams, OneDrive administration for 500+ users
→ License optimization, cost control, M365 SKU right-sizing
→ Office 365 troubleshooting (SARA, command-line tools)
BACKGROUND:
9 years driving enterprise IT across financial services, retail, hospitality, and managed services.
Transitioned from traditional 2nd/3rd line support to **cloud infrastructure engineering**. I no longer
just fix problems—I architect systems that prevent them.
WHAT SETS ME APART:
✓ Architect cloud-first endpoint strategies (not just react to tickets)
✓ Lead vulnerability management programs (proactive, not reactive)
✓ Mentor junior engineers on Azure, Intune, and security best practices
✓ ITIL-aligned operations: incident/change/problem management, runbook creation
✓ Communicate complex cloud architecture to technical teams AND C-level stakeholders
Master's degree in Computer Networks. ITIL v3 Foundation certified.
OPEN TO:
→ Azure Cloud Administrator roles (enterprise-scale)
→ Cloud Infrastructure Engineer positions (financial services preferred)
→ Senior Endpoint Management Specialist (Intune, JAMF, security-focused)
→ Cloud Operations & SRE positions (infrastructure automation, monitoring)
Let's connect if you're building secure, scalable, cloud-first infrastructure. I love technical challenges
and learn fast in ambiguous environments.
Managed services provider delivering infrastructure support to financial sector clients across 100%
cloud-native (Azure) environments—zero on-premises or hybrid infrastructure.
→ Design and deploy Microsoft Intune configurations: compliance policies, security baselines, app
protection policies, conditional launch controls across 500+ endpoints
→ Expert Entra ID (Azure AD) administration: Conditional Access policies, identity governance, MFA, PAM
→ Windows patch orchestration (WSUS, Windows Update for Business, Intune); CVE monitoring and
vulnerability remediation with 48-hour response SLA
→ CE+ (Chromium Edge) security hardening and policy deployment
→ Microsoft 365 support: Exchange Online, Teams, SharePoint, OneDrive for 500+ users
→ Incident triage and cloud infrastructure troubleshooting (Azure, Intune, Entra ID)
→ Compliance & audit: SOC 2 Type II, ISO 27001, STIG hardening, audit documentation
→ ITIL-aligned incident/change/problem management; runbook creation and team mentoring
IMPACT:
500+ cloud-connected endpoints supported | 48-hour vulnerability response SLA | 99.2% patch
compliance | Zero unpatched zero-days
Transition role, Where I've supported MAC Environment before fully transitioned into current Azure cloud infrastructure specialist position
Implemented security measures to protect sensitive information from unauthorized access, mitigating potential risks and vulnerabilities.
Deep technical foundation in enterprise endpoint management, imaging, and release orchestration;
led transition from SCCM to modern cloud-first Intune deployments
Responsible for First Line Technical Support Advisor under the TFM business campaign in a team that reports to the Contract Team manager
GPA: B+, JNTU, 2009 -7 GPA Conversion
Software Development - Advanced -Designed and deployed enterprise-level software solutions, with a focus on reliability
Project Management - Advanced - Delivered critical IT projects within tight deadlines, such as deploying 110 iPhones
Cloud Computing - Intermediate - Configured cloud solutions for app deployment using platforms like Azure
Data Analysis - Intermediate - Analyzed user data to optimize system usage and identify performance improvements
Cybersecurity - Intermediate - Implemented security policies to safeguard devices and sensitive data
Database Management - Advanced - Designed scalable databases, ensuring high performance and data integrity
DevOps - Intermediate - Automated deployment processes and monitored infrastructure performance Networking - Intermediate - Troubleshot network issues and ensured connectivity across organizational branches
Technical Support - Expert - Provided efficient IT support for Christian Louboutin UK, handling end-to-end issues
System Integration - Advanced - Integrated mobile devices seamlessly with JAMF and Vodafone services
IT Strategy Development - Advanced - Defined IT strategies aligning with business goals to enhance operational efficiency
Technical Support
Project Management
Office365 expertise and Administration
Technical Analysis
Hardware repair
Hardware and software installation
Windows Operating System 7/81/10/11 Support
Remote Diagnostics
Windows updates
MacOS support and installation (till Ventura)
Cloud-Based Software Deployment (Intune & JamF)
Newbie Developer , have a Passion for learning New Development Skills. I'm a Self Learner, But actively looking for a Mentor, so i can be steered in a right Direction!!
Web Development , Web Hosting and curious about AI tools ( including smart skills for smart devices and apps )
Currently on a Self teaching course on Python , HTML , CSS and JavaScript ( for web development) and also working on my xml programming skills to better understanding of the automated deployment processes
As the sole IT support for all UK boutiques and the headquarters, I successfully managed and delivered several major projects, including a significant store opening at Bicester Village during the COVID-19 pandemic. This project was completed on schedule, demonstrating my ability to navigate complex challenges and meet tight deadlines under pressure.
In addition, I played a key role in setting up the IT infrastructure for the retail side of the business. Concurrently, I oversaw the successful upgrade of all employees’ devices across the UK, transitioning from desktops to laptops and upgrading iPhones, which enhanced overall operational efficiency and employee performance.
CLOUD INFRASTRUCTURE & PLATFORM
★ Microsoft Azure (VMs, Networking, Storage, Monitoring, Cost Optimization, Hybrid Identity)
★ Microsoft Intune (Configuration Profiles, Compliance Policies, Security Baselines, App Protection,
Conditional Launch)
★ Microsoft Entra ID / Azure AD (Conditional Access, Identity Governance, MFA, Privileged Access Management)
★ Azure Arc, Azure AD Connect, Hybrid Identity Synchronization
ENDPOINT MANAGEMENT & SECURITY
★ Windows Patch Management (WSUS, Windows Update for Business, Intune-driven deployment)
★ Vulnerability Assessment & Remediation (CVE monitoring, risk prioritization, proof-of-compliance)
★ CE+ / Chromium Edge Security (Policy deployment, vulnerability response, browser hardening)
★ Windows Hardening (STIG, GPO configuration, Windows Defender for Endpoint)
★ JAMF / Apple Device Management (macOS Ventura, iOS, MDM enrollment)
★ Imaging & OS Deployment (Windows 10/11, macOS, zero-touch provisioning)
MICROSOFT 365 & COLLABORATION
★ Exchange Online Administration
★ Microsoft Teams Deployment & Troubleshooting
★ SharePoint Online & OneDrive Management
★ Office 365 & Microsoft 365 Apps (Licensing, Deployment, Activation)
★ SARA (Support & Recovery Assistant), Office Deployment Tool (ODT)
COMPLIANCE, SECURITY & OPERATIONS
★ SOC 2 Type II, ISO 27001, HIPAA Readiness
★ STIG Hardening & Security Baselines
★ Incident Management (ITIL-aligned)
★ Change Management & Release Management
★ Problem Management & Root Cause Analysis
★ Runbook & Knowledge Base Creation
TOOLS & PLATFORMS
★ Ticketing: ServiceNow, Jira
★ Monitoring: Azure Monitor, Intune Analytics
★ Configuration: Group Policy Objects (GPO), PowerShell, Windows Admin Center
★ Deployment: Configuration Manager (SCCM), Intune, JAMF, Windows Update for Business
SOFT SKILLS
★ Technical Communication (Stakeholder Management, Executive Briefings)
★ Team Leadership & Mentoring
★ Cross-functional Collaboration (Infrastructure, Security, Vendor Teams)
★ Process Improvement & Documentation
★ Problem-Solving in Ambiguous Environments
https://bold.pro/my/santosh-lanka