Shibli Intaj

Shibli Intaj

Microsoft 365, Identity & Cloud Engineer

I plan and deliver Microsoft 365, Entra ID and Windows Server projects end to end, from assessment through cutover and documentation. Over 8 years I've moved 30+ organisations to Microsoft 365, migrated 15+ servers with near-zero downtime, and secured identity and email across 200+ client environments.

Experience

Project delivery and L3 escalation for managed service providers and their clients.

Sep 2021 – PresentInnovation Technology By Design (ITBD)

Advanced System Administrator

I support 2 MSP partners and their 200+ end-client environments, delivering infrastructure, migration and security projects and acting as the L2/L3 escalation point across Microsoft 365, Azure, Windows Server and networking.

Cloud-native endpoint migration In progress

Moving on-premises AD-joined devices to cloud-only Entra ID join with Intune: device readiness, Windows Autopilot enrollment, compliance and configuration policies, and phased user cutover.

Microsoft 365 email migration

30+ clients, 25 to 300+ mailboxes each, from on-premises Exchange, Google Workspace, IMAP and other tenants using cutover, staged and hybrid methods.

Server migration and modernisation

15+ servers moved from Windows Server 2008/2012 to 2019/2022 with near-zero downtime, including P2V to Hyper-V, new domain controllers, FSMO transfers and functional level upgrades.

File server migration

File shares moved to new Windows file servers and SharePoint Online/OneDrive with NTFS permissions preserved, drives remapped through Group Policy and delta syncs for off-hours cutover.

Email filtering migration

Clients moved between email security gateways and Microsoft Defender for Office 365, with allow/block lists, anti-phishing, Safe Links, Safe Attachments, transport rules, MX records and connectors rebuilt.

Domain transfers and DNS migration

Domains moved between registrars and DNS providers with pre-staged zones and lowered TTLs, keeping MX, SPF, DKIM, DMARC and service records live with no mail or website outage.

Identity and access hardening

Conditional Access policies, MFA rollout, legacy authentication blocking and emergency access accounts in Entra ID, with Entra Connect sync and SSPR.

Email security and incident response

SPF, DKIM and DMARC configuration, and phishing and business email compromise investigations using message trace, audit logs and account containment.

Backup and disaster recovery

Datto BCDR, N-sight and Cove Data Protection deployments with regular restore testing for servers and data.

Endpoint security and licence optimisation

SentinelOne EDR rollout, Datto RMM patch policies, and Microsoft 365 licence audits that removed duplicate and unused subscriptions.

Feb 2020 – Sep 2021Teleperformance

Onboarding Specialist

  • Scoped email migrations by assessing source environments, user accounts, data volume and security.
  • Migrated email, calendars and contacts, and configured accounts, permissions, distribution lists and security settings on the target platform.
  • Updated DNS to cut over mail flow, then tested and resolved data, compatibility and delivery issues.
  • Guided users through Outlook setup and completed post-migration checklists.
Sep 2018 – Feb 2020Concentrix

Technical Associate

  • Resolved Windows, Microsoft Office, printer, driver, network and third-party application issues for end users.
  • Performed Windows installations, hardware replacements and Windows Update troubleshooting.
  • Managed cases through ticketing systems with accurate records and regular customer updates.

Skills

The platforms and tools I work in every week.

Identity and access

  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • Entra Connect
  • SSPR
  • RBAC

Microsoft 365

  • Exchange Online
  • Defender for Office 365
  • Microsoft Purview
  • SharePoint Online
  • OneDrive
  • Licensing

Endpoint management

  • Microsoft Intune
  • Windows Autopilot
  • Entra ID Join
  • Compliance policies

Infrastructure

  • Windows Server 2012–2022
  • Active Directory
  • DNS
  • DHCP
  • Group Policy
  • Hyper-V
  • Azure

Migrations

  • Server and AD
  • File server
  • Exchange to Microsoft 365
  • Email filtering
  • Domain and DNS

Security and tooling

  • SentinelOne
  • SPF / DKIM / DMARC
  • Datto RMM and BCDR
  • Cove
  • Autotask PSA
  • ConnectWise Automate
  • Auvik
  • PowerShell

Certifications

Microsoft certifications, most recent first.

  • SC-300
    Identity and Access Administrator Associate
  • MS-102
    Microsoft 365 Administrator Expert
  • AZ-104
    Azure Administrator Associate
  • SC-900
    Security, Compliance, and Identity Fundamentals
  • AZ-900
    Azure Fundamentals
  • Auvik
    Auvik Certified Administrator

Education

Master's DegreeIndira Gandhi National Open University (IGNOU), 2019–2021
Bachelor's DegreeSri Aurobindo College, 2016–2018

Let's talk

I'm open to Microsoft 365, identity and cloud engineering roles. Reach me by email, phone or LinkedIn.