Advanced System Administrator
I support 2 MSP partners and their 200+ end-client environments, delivering infrastructure, migration and security projects and acting as the L2/L3 escalation point across Microsoft 365, Azure, Windows Server and networking.
Cloud-native endpoint migration In progress
Moving on-premises AD-joined devices to cloud-only Entra ID join with Intune: device readiness, Windows Autopilot enrollment, compliance and configuration policies, and phased user cutover.
Microsoft 365 email migration
30+ clients, 25 to 300+ mailboxes each, from on-premises Exchange, Google Workspace, IMAP and other tenants using cutover, staged and hybrid methods.
Server migration and modernisation
15+ servers moved from Windows Server 2008/2012 to 2019/2022 with near-zero downtime, including P2V to Hyper-V, new domain controllers, FSMO transfers and functional level upgrades.
File server migration
File shares moved to new Windows file servers and SharePoint Online/OneDrive with NTFS permissions preserved, drives remapped through Group Policy and delta syncs for off-hours cutover.
Email filtering migration
Clients moved between email security gateways and Microsoft Defender for Office 365, with allow/block lists, anti-phishing, Safe Links, Safe Attachments, transport rules, MX records and connectors rebuilt.
Domain transfers and DNS migration
Domains moved between registrars and DNS providers with pre-staged zones and lowered TTLs, keeping MX, SPF, DKIM, DMARC and service records live with no mail or website outage.
Identity and access hardening
Conditional Access policies, MFA rollout, legacy authentication blocking and emergency access accounts in Entra ID, with Entra Connect sync and SSPR.
Email security and incident response
SPF, DKIM and DMARC configuration, and phishing and business email compromise investigations using message trace, audit logs and account containment.
Backup and disaster recovery
Datto BCDR, N-sight and Cove Data Protection deployments with regular restore testing for servers and data.
Endpoint security and licence optimisation
SentinelOne EDR rollout, Datto RMM patch policies, and Microsoft 365 licence audits that removed duplicate and unused subscriptions.