Summary
Overview
Work History
Education
Skills
Certification
Work Availability
Interests
Accomplishments
Languages
Timeline
Additional Information
Profile
Hi, I’m

Santosh Lanka

Azure Cloud & Infrastructure Support Engineer | Intune | Entra ID | Vulnerability Management | Patch Orchestration
Isleworth,Middlesex
Santosh Lanka

Summary

Cloud Infrastructure & Identity Specialist | 100% Azure-Native Environments | 500+ Endpoints | Vulnerability & Patch Management

I design, deploy, and secure enterprise cloud infrastructure using Microsoft Azure, Intune, and Entra ID.
Currently architecting endpoint security and patch orchestration strategies at ASPIRE Global Service Centre—a
managed services provider delivering infrastructure support to financial sector clients across fully cloud-native
(zero on-prem) environments.

WHAT I SPECIALIZE IN:

Cloud Infrastructure & Identity
→ Microsoft Intune expert: configuration profiles, compliance policies, security baselines, app protection policies,
conditional launch controls across 500+ heterogeneous endpoints (Windows, macOS, iOS, Android)
→ Microsoft Entra ID (Azure AD) mastery: Conditional Access policies, identity governance, MFA enforcement,
privileged access management (PAM), identity lifecycle management
→ Azure platform administration: VMs, networking, storage, monitoring, hybrid identity synchronization
→ Secure by default: zero-trust architecture, device compliance enforcement, insider threat mitigation

Windows Patch & Vulnerability Management (CE+ Hardening)
→ Patch orchestration: WSUS, Windows Update for Business, Intune-driven deployment cycles
→ CVE monitoring & risk prioritization: continuous vulnerability assessment, 48-hour response SLA on zero-days
→ CE+ (Chromium Edge) security: enterprise browser policy, vulnerability response, security hardening
→ Windows Server hardening: STIG implementation, GPO configuration, Windows Defender for Endpoint tuning
→ Compliance frameworks: SOC 2 Type II, ISO 27001, HIPAA readiness, audit-ready documentation

Microsoft 365 Enablement
→ Exchange Online, SharePoint, Teams, OneDrive administration for 500+ users
→ License optimization, cost control, M365 SKU right-sizing
→ Office 365 troubleshooting (SARA, command-line tools)

BACKGROUND:
9 years driving enterprise IT across financial services, retail, hospitality, and managed services.
Transitioned from traditional 2nd/3rd line support to **cloud infrastructure engineering**. I no longer
just fix problems—I architect systems that prevent them.

WHAT SETS ME APART:
✓ Architect cloud-first endpoint strategies (not just react to tickets)
✓ Lead vulnerability management programs (proactive, not reactive)
✓ Mentor junior engineers on Azure, Intune, and security best practices
✓ ITIL-aligned operations: incident/change/problem management, runbook creation
✓ Communicate complex cloud architecture to technical teams AND C-level stakeholders

Master's degree in Computer Networks. ITIL v3 Foundation certified.

OPEN TO:
→ Azure Cloud Administrator roles (enterprise-scale)
→ Cloud Infrastructure Engineer positions (financial services preferred)
→ Senior Endpoint Management Specialist (Intune, JAMF, security-focused)
→ Cloud Operations & SRE positions (infrastructure automation, monitoring)

Let's connect if you're building secure, scalable, cloud-first infrastructure. I love technical challenges
and learn fast in ambiguous environments.

Overview

11
years of professional experience
1
Certificate
3
Languages
7
years of post-secondary education

Work History

Version1 - ASPIRE Global Service
London, England

Azure Cloud & Infrastructure Support Engineer
11.2025 - Current

Job overview

Managed services provider delivering infrastructure support to financial sector clients across 100%
cloud-native (Azure) environments—zero on-premises or hybrid infrastructure.

→ Design and deploy Microsoft Intune configurations: compliance policies, security baselines, app
protection policies, conditional launch controls across 500+ endpoints
→ Expert Entra ID (Azure AD) administration: Conditional Access policies, identity governance, MFA, PAM
→ Windows patch orchestration (WSUS, Windows Update for Business, Intune); CVE monitoring and
vulnerability remediation with 48-hour response SLA
→ CE+ (Chromium Edge) security hardening and policy deployment
→ Microsoft 365 support: Exchange Online, Teams, SharePoint, OneDrive for 500+ users
→ Incident triage and cloud infrastructure troubleshooting (Azure, Intune, Entra ID)
→ Compliance & audit: SOC 2 Type II, ISO 27001, STIG hardening, audit documentation
→ ITIL-aligned incident/change/problem management; runbook creation and team mentoring

IMPACT:
500+ cloud-connected endpoints supported | 48-hour vulnerability response SLA | 99.2% patch
compliance | Zero unpatched zero-days

Insight Global -ASMISI
London, England

Windows 11 Migration Engineer
09.2025 - 10.2025

Job overview

  • Established strong working relationships with clients through exceptional communication skills, fostering trust and collaboration.
  • Achieved successful project outcomes by maintaining accurate documentation and meeting strict deadlines.
  • Developed positive working relationships with stakeholders to effectively coordinate work activities.
  • Presented technical findings to stakeholders, ensuring clear understanding of project status and goals.
  • Self-motivated, with a strong sense of personal responsibility.
  • Managed time efficiently in order to complete all tasks within deadlines.
  • Resolved problems, improved operations and provided exceptional service.

Wavenet UK
London, England

IT Consultant - Mac Support
04.2025 - 08.2025

Job overview

Transition role, Where I've supported MAC Environment before fully transitioned into current Azure cloud infrastructure specialist position

Implemented security measures to protect sensitive information from unauthorized access, mitigating potential risks and vulnerabilities.

  • Provided high-quality customer support on both Apple and PC hardware/software
  • Managed helpdesk tickets, including remote and on-site assistance
  • Delivered 1st and 2nd line support, responding promptly to urgent requests
  • Built and maintained strong customer relationships
  • Worked independently and collaboratively within support teams
  • Specialized in Microsoft 365 and cloud-based solutions
  • Gained hands-on experience with Microsoft Intune, JAMF, NAS systems, and general networking

Cundall
London, England

SCCM Desktop Engineer
01.2023 - 01.2025

Job overview

Deep technical foundation in enterprise endpoint management, imaging, and release orchestration;
led transition from SCCM to modern cloud-first Intune deployments

  • Managed the day-to-day operations of the SCCM environment, providing 2nd and 3rd line support to the business.
  • Developed and deployed images and task sequences for Windows 7 to Windows 10 migrations, including creating golden images and distributing them through SCCM.
  • Created task sequences using MDT for workstation deployment and managed application deployments using SCCM 2012/2016, SMS Installer, and related tools.
  • Conducted application testing, repackaging, and virtualization using technologies such as Microsoft App-V and VMware ThinApp, Hyper-V, ensuring reliable and efficient software delivery.
  • Implemented incident and change management processes, including raising change requests and adhering to ITIL procedures for packaging, testing, and releases.
  • Collaborated with team members and the SCCM Lead to identify areas for process improvement and maintained comprehensive documentation to support knowledge sharing.
  • Engaged in Windows image testing and deployment through Autopilot, ensuring smooth user experiences and system performance.
  • Additionally, my role also encompass Incident Management role for diagnosing major incidents
  • Ensure advanced testing methodology to ensure zero time for operating systems and deployed applications

Rivian

Sr. 2nd Line Desktop Support Engineer
04.2021 - 09.2022

Job overview

  • 2nd Line Desktop support
  • Support for Office365, Mac, Windows and Windows Server operating 2012 - 2016
  • Intune Management, MDM, VPN (zscalar)
  • Autodesk ADOBE, ETC
  • Maintained endpoint security and resolved Mac/Windows device issues.
  • Configured hardware, devices, and software to set up work stations for employees.
  • Patched software and installed new versions to eliminate security problems and protect data.
  • Developed detailed documentation for internal procedures and processes to promote consistency among team members.

VEJES

L2 IT Technician
12.2019 - 04.2021

Job overview

  • Delivered Office365, Active Directory, and Intune support for HQ and retail locations.
  • Led IT support for store openings, including POS setup, device configuration, and vendor coordination.
  • Performed MDM enrollments and maintained IT assets inventory.
  • Supported seamless remote work transitions by setting up and troubleshooting VPN connections for employees.

QVC

End User Support Technician L2
07.2018 - 09.2019

Job overview

  • The efficient management and maintenance the end user estate
  • Supporting both the end users and Helpdesk team, with a focus on rapidly responding to IT incidents and requests and seeing these resolved in a timely manner, acting as a point of technical escalation and collaborating with other IT teams on incidents/requests and projects
  • Maintaining an effective current knowledge of both current technologies and developments both in industry and in order to maximise customer service and call resolution
  • Responsible for packaging and delivery strategy to include areas such as application delivery, antivirus, security patching, drivers/updates, PC and laptop builds, provisioning/imaging OS deployment, user data migration and system tools
  • Promoting end user device and data security across the organisation
  • Maintaining awareness of technical developments within the industry and contribute to comply with the SOCX regulations, including evaluating supported hardware, software and toolsets

NTT DATA UK

Technical Support Analyst
08.2017 - 06.2018

Job overview

  • Responsible for installing and supporting network hardware, software, and applications on PC and Laptops
  • Handle the tasks of providing Level 1st to 2nd Line technical support to resolve day-to-day network, Wi-Fi, computer, and peripheral equipment issues for production and test environments according to the agreed SLA's
  • Updating Cisco ACS, Asset inventory
  • Creating and updating Cisco Unified communication services
  • Perform installation and upgrading of new network and desktop application software
  • Active Directory Management, IT Access Management etc
  • Responsible for preparing, loading, documenting and testing desktop and network-developed applications for deployment, staff training, and inventory
  • Handle responsibilities of analyzing hardware and software problems and select proper corrective action
  • Currently involved in the Windows 10/ Office 2016 Migration/Rollout Project and iPad/iPhone upgrades

Domestic & General

Service Desk Analyst
09.2016 - 08.2017

Job overview

  • Being the first point of contact and providing the FTF whilst Supporting, troubleshooting and maintaining all the internal IT related issues within D&G network
  • Configuring laptops / PC's and installing software's for the users according to theirs role requirements
  • AD management
  • IPhones/iPad/ mobile configuration
  • Assisting and helping users with SCCM software rollouts
  • Responsible for office365, online exchange, MS Exchange console 2010 management (mailboxes/shared mailboxes/ mail group creations etc.,)
  • VPN account activations, troubleshooting etc
  • File restores, shared Network drives mapping and AS400 account troubleshooting
  • Skype for business/ MS lync troubleshooting and installation

Dixons Carphone

MVNO 2nd Line Support Executive | ID Mobile Operations
02.2016 - 09.2016

Job overview

  • To provide 2nd line technical support for iD mobile customers answering support queries via phone, email and call tracking system
  • To assist in the resolution of MVNO customer faults raised from front line and back office teams whilst maintaining the exceptional customer experience that MVNO customers expect
  • Responsible for creating new subscriptions for the new starters and allocating them to the relevant Tariff groups
  • Escalating complex issue with Three Network and to the internal Tech Team and chase them up to the resolution

Cyntergy

IT Service-desk Analyst
10.2015 - 02.2016

Job overview

Responsible for First Line Technical Support Advisor under the TFM business campaign in a team that reports to the Contract Team manager

  • My primary duties include: Taking calls from customers experiencing technical issues with their voice, broadband (Fibre, LLU and BT Wholesale), Email and other contract specific services
  • To maintain a high degree of customer service for all support queries and adhere to all service management principles whilst following SLA's
  • Troubleshooting and diagnosing the customers' technical issues by thoroughly analyzing their copper line, broadband service and account information then resolve or escalate using the ticketing systems available to me.

Education

Middlesex University
London, ENG

Master of Science from Computer Systems Networking and Telecommunications
04.2010 - 01.2013

University Overview

GPA: B+, JNTU, 2009 -7 GPA Conversion

Jawaharlal Nehru Technological University
India

Bachelor of Science from Electrical and Electronics Engineering
01.2005 - 01.2009

Skills

Software Development - Advanced -Designed and deployed enterprise-level software solutions, with a focus on reliability

Project Management - Advanced - Delivered critical IT projects within tight deadlines, such as deploying 110 iPhones

Cloud Computing - Intermediate - Configured cloud solutions for app deployment using platforms like Azure

Data Analysis - Intermediate - Analyzed user data to optimize system usage and identify performance improvements

Cybersecurity - Intermediate - Implemented security policies to safeguard devices and sensitive data

Database Management - Advanced - Designed scalable databases, ensuring high performance and data integrity

DevOps - Intermediate - Automated deployment processes and monitored infrastructure performance Networking - Intermediate - Troubleshot network issues and ensured connectivity across organizational branches

Technical Support - Expert - Provided efficient IT support for Christian Louboutin UK, handling end-to-end issues

System Integration - Advanced - Integrated mobile devices seamlessly with JAMF and Vodafone services

IT Strategy Development - Advanced - Defined IT strategies aligning with business goals to enhance operational efficiency

Technical Support

Project Management

Office365 expertise and Administration

Technical Analysis

Hardware repair

Hardware and software installation

Windows Operating System 7/81/10/11 Support

Remote Diagnostics

Windows updates

MacOS support and installation (till Ventura)

Cloud-Based Software Deployment (Intune & JamF)

Certification

ITIL Foundation v3
Availability
See my work availability
Not Available
Available
monday
tuesday
wednesday
thursday
friday
saturday
sunday
morning
afternoon
evening
swipe to browse

Interests

Newbie Developer , have a Passion for learning New Development Skills. I'm a Self Learner, But actively looking for a Mentor, so i can be steered in a right Direction!!

Web Development , Web Hosting and curious about AI tools ( including smart skills for smart devices and apps )

Currently on a Self teaching course on Python , HTML , CSS and JavaScript ( for web development) and also working on my xml programming skills to better understanding of the automated deployment processes

Accomplishments

As the sole IT support for all UK boutiques and the headquarters, I successfully managed and delivered several major projects, including a significant store opening at Bicester Village during the COVID-19 pandemic. This project was completed on schedule, demonstrating my ability to navigate complex challenges and meet tight deadlines under pressure.

In addition, I played a key role in setting up the IT infrastructure for the retail side of the business. Concurrently, I oversaw the successful upgrade of all employees’ devices across the UK, transitioning from desktops to laptops and upgrading iPhones, which enhanced overall operational efficiency and employee performance.

Languages

English
Hindi
Telugu

Timeline

Azure Cloud & Infrastructure Support Engineer

Version1 - ASPIRE Global Service
11.2025 - Current

Windows 11 Migration Engineer

Insight Global -ASMISI
09.2025 - 10.2025

IT Consultant - Mac Support

Wavenet UK
04.2025 - 08.2025

SCCM Desktop Engineer

Cundall
01.2023 - 01.2025

Sr. 2nd Line Desktop Support Engineer

Rivian
04.2021 - 09.2022

L2 IT Technician

VEJES
12.2019 - 04.2021

End User Support Technician L2

QVC
07.2018 - 09.2019

Technical Support Analyst

NTT DATA UK
08.2017 - 06.2018

Service Desk Analyst

Domestic & General
09.2016 - 08.2017

MVNO 2nd Line Support Executive | ID Mobile Operations

Dixons Carphone
02.2016 - 09.2016

IT Service-desk Analyst

Cyntergy
10.2015 - 02.2016

Middlesex University

Master of Science from Computer Systems Networking and Telecommunications
04.2010 - 01.2013

Jawaharlal Nehru Technological University

Bachelor of Science from Electrical and Electronics Engineering
01.2005 - 01.2009

Additional Information

CLOUD INFRASTRUCTURE & PLATFORM
★ Microsoft Azure (VMs, Networking, Storage, Monitoring, Cost Optimization, Hybrid Identity)
★ Microsoft Intune (Configuration Profiles, Compliance Policies, Security Baselines, App Protection,
Conditional Launch)
★ Microsoft Entra ID / Azure AD (Conditional Access, Identity Governance, MFA, Privileged Access Management)
★ Azure Arc, Azure AD Connect, Hybrid Identity Synchronization

ENDPOINT MANAGEMENT & SECURITY
★ Windows Patch Management (WSUS, Windows Update for Business, Intune-driven deployment)
★ Vulnerability Assessment & Remediation (CVE monitoring, risk prioritization, proof-of-compliance)
★ CE+ / Chromium Edge Security (Policy deployment, vulnerability response, browser hardening)
★ Windows Hardening (STIG, GPO configuration, Windows Defender for Endpoint)
★ JAMF / Apple Device Management (macOS Ventura, iOS, MDM enrollment)
★ Imaging & OS Deployment (Windows 10/11, macOS, zero-touch provisioning)

MICROSOFT 365 & COLLABORATION
★ Exchange Online Administration
★ Microsoft Teams Deployment & Troubleshooting
★ SharePoint Online & OneDrive Management
★ Office 365 & Microsoft 365 Apps (Licensing, Deployment, Activation)
★ SARA (Support & Recovery Assistant), Office Deployment Tool (ODT)

COMPLIANCE, SECURITY & OPERATIONS
★ SOC 2 Type II, ISO 27001, HIPAA Readiness
★ STIG Hardening & Security Baselines
★ Incident Management (ITIL-aligned)
★ Change Management & Release Management
★ Problem Management & Root Cause Analysis
★ Runbook & Knowledge Base Creation

TOOLS & PLATFORMS
★ Ticketing: ServiceNow, Jira
★ Monitoring: Azure Monitor, Intune Analytics
★ Configuration: Group Policy Objects (GPO), PowerShell, Windows Admin Center
★ Deployment: Configuration Manager (SCCM), Intune, JAMF, Windows Update for Business

SOFT SKILLS
★ Technical Communication (Stakeholder Management, Executive Briefings)
★ Team Leadership & Mentoring
★ Cross-functional Collaboration (Infrastructure, Security, Vendor Teams)
★ Process Improvement & Documentation
★ Problem-Solving in Ambiguous Environments

Profile

https://bold.pro/my/santosh-lanka

Santosh LankaAzure Cloud & Infrastructure Support Engineer | Intune | Entra ID | Vulnerability Management | Patch Orchestration