PROFESSIONAL SUMMARY:

• Experience in Azure Active Directory, Active Directory, Windows Admin and VM Ware Administration
• Design and implement Active Directory RED Forest.
• Good experience in Windows 10 Modern Management with Intune
• Design ESAE Administrative Forest to implement access and control restrictions.Responsible production support of Active directory (AD), GPO, GPP, Domain users, Users and groups and given appropriate permissions, shares and privilege to access LAN and Domain environment
• Experience in Troubleshooting DNS, DHCP, IIS and Active Directory.
• Extensive experience with the Active Directory tools and Wintel servers.
• Experience with Firewalls, IPs, switches and VPNs configurations.Responsible production support of Active directory (AD), GPO, GPP, Domain users, Users and groups and given appropriate permissions, shares and privilege to access LAN and Domain environment.
• Experience in installing and configuring Windows Failover Clustering servicesExtensive experience in Windows 2016/2012R2/2008R2/2003/2000/NT 4.0 servers at single or multi domain platforms.
• Strong Experience in Data Center Migration.
• Experience in deploying and supporting PKI Infrastructure and certificate management in large organizations (EFS, SCEP, SSL certificates and personal certs for encryption).
• Installed and configured Azure AD, AD Connect, ADFS and ADFS Proxy component, setup ADFS for SSO to support various types of authentication protocols.
• Experience in syncing On - premises Windows Server Active Directory to Azure AD (AAD) using Azure AD connect.
• Experience in installing and configuring Virtual machines in Microsoft Azure Cloud service platform.
• Hardening of Active Directory by implementing security zones.
• Migrated on-premise accounts, mailboxes and public folders to O365.
• Manage deployment and administration of Microsoft 365 product components (Intune, Exchange online, OneDrive, Skype for Business, SharePoint, Microsoft Teams, Groups, etc.)
• Fix sync, mailbox, and licenses related issues for O365.
• Enforce smartcard multi-factor authentication and MFA for all cloud admin accounts.
• Troubleshooting the sync Issues and resolving Azure objects creation error
• Troubleshooting the mail flow using the hub queue and also resolving the issues related to outlook calendar and free or busy.
• Experience in different Microsoft products including Exchange 2013, 2010, 2007, 2003 and O365, Lync, Skype for business and MS office suites.
• Strong Experience on vMotion, Storage vMotion, SCCM (Systems Center Configuration Management), SCOM (Systems Center Operations Management) Infrastructure, Patch Management and Upgrades using VMware update manager.
• Extensive experience with Active Directory, GPO’s, DHCP, DNS, IP, Sub Nets, VPNs, VLAN, Network routing, firewalls, LAN/WAN switching and Backup & Recovery, File & Print Server, IIS (Web Server), FTP, Terminal Server
• Troubleshooting and resolving the Outlook, OWA, Skype/SIP and Exchange Connectivity issues
• Expertise in Migrating Group and Exception Policies from one domain to another domain in AD forest.
• Automation of various AD/Exchange using PowerShell scripts
• Experience in designing and implementing AD Sites Topology, Domain Controller Strategy, and Branch office Infrastructure and Services.
• Roaming profile creation and managing.
• Citrix Apps Installation and hosting.
• Expertise in supporting MS Exchange online 2016,2013 in an Enterprise Environment.
• Expertise in Exchange Active sync and Exchange Hybrid Deployment and Migration with 0365.
• Expertise in Active Directory Setup and troubleshooting for any deleted objects and AD Recycle Bin. Good Experience in designing a Forest and Domain Infrastructure, Group Policy Strategy, Active Directory Permission model and Restructuring.
• Maintain and manage virtualization environment using MSFT Hyper-V, VMWare ESX and VCenter Web client.
• Proven Experience in designing DHCP solution, IP Address Management Solution, VPN, Web Application Proxy Solution, Monitoring Strategy and Direct Access Solution.
• Provided guidance in the planning, gathering requirements, recommendations, and implementation of data migration to Office 365, and configuration best practices.
• Proven Experience in planning and implementing the High Available Network, Storage Solutions, Failover Clustering and Business Continuity and Disaster Recovery Solution.
• Expert knowledge on Azure resource Groups.
• Expert knowledge in migration using Dell Quest Migration Manager for Active Directory and ADMT.
• Experience in planning and implementing Virtualization Hosts, Storage, Networking, VM’s and VM Movement.
• Experience in deploying the standalone software’s and patches using SCCM and WSUS.
• Expert knowledge in Active Directory Migration, consolidation, Integration, Upgrade and Decommission.
• Installing and troubleshooting Monthly patches on the servers using the Microsoft WSUS patch distribution services.
• Responsible for vulnerability scanning and Remediation, Technical Standard Assessment of Domain Controllers and audit of privilege group members.
• Monitoring the entire infrastructure Servers using different monitoring tools like Nagios, SCOM, and Spectrum to ensure all the servers 100% availability.
• Sharepoint administration and managing permissions.

TECHNICAL SKILLS:

Operating Systems: Windows server 2003, 2008, 2012, 2016. Windows XP, Vista & Windows 7/8/10, Citrix Presentation Server & DOS.

Software: MS Office, XP, Remotely Anywhere, MS Outlook, Project Pier, Lan Messenger Internet Explorer, PDQ Deploy, Confidential Maximo, Lotus Notes, Visual Studio 2012, SQL, TFS, FTP, ILO Confidential Director, Tivoli Backup Manager, VMware, MQM Netback up, IIS 6 & 7.0, SCCM and SCOM

Hardware: PC s, Laptops, EMC, Compaq/ Confidential /Dell Server, HP/3Com Ethernet/Fiber Hubs and switches, CISCO Router and Switches Printers, Zip Drives, Network Cards, SCSI devices, I/O Boards, Ram, CD ROM s Sound Card, Modems, Scanners, Quantum Backup, and RV042 VPN.

Special Skills: Azure Active Directory, O365, Skype, AAD Connect Server, Exchange, Intune, Airwatch, ADFS, Ping Federate, IIS and VM ware Application Servers: Windows NT, 2000 and 2003, 2008, 2012, Remote Access Server, DNS, DHCP, WSUS Terminal Servers Hyper V ADDS Antivirus System for server and Workstations, softera, oracle directory, WSUS and SCCM

PowerShell: Windows PS, AD PS, Azure AD PS, MS Exchange online.

Virtualization Software: VMware ESX Server 5.5 5.1, Web client, VMware HA, DRS, SRM, vMotion, Storage.

Tools: & Technologies: Dell Migration Manager for AD/Exchange, Secure copy, Recovery Manager, Change Auditor, Dell Active Roles Identity Manager, ADMT, Office 365, Azure Active Directory, ADFS, V8.8 & V8.10, VMware (ESX, GSX, Server and Workstation), Exchange 2010/2013.

MS Windows Servers: Windows Server 2000/2003/2008/2008 R2/2012R2, and 2016

Tools: Dell Migration Manager for AD/Exchange, Secure copy, Recovery Manager, Change Auditor, Dell Active Roles Identity Manager, ADMT, Office 365, Azure Active Directory, ADFS, V8.8 & V8.10, VMware (ESX, GSX, Server and Workstation)

Workstations: Windows XP, Windows 7 and Windows 10

Power Shell,VB: Scripting and Bash Scripting

Databases: SQL server 2000/2005,2012, DB2 and MS Access

Ticketing Systems: Service Now,CA Service Desk, Lotus notes, Tracer, FCRM, and Remedy

PROFESSIONAL EXPERIENCE:

Confidential, Farmington Hills, MI

IAM Engineer/Office 365 Consultant

Responsibilities:

• Office-365 License Assignation and troubleshooting part.
• Troubleshooting all Microsoft based environments, both on-premise and in cloud.
• Troubleshooting Microsoft O365 tenant, including all 365 platforms and applications
• Experience with AzureAD security controls,Azure AD Conditional Access, Privileged Identity Management, Intune, Cloud Access Security, and DLP
• Tracking and escalation of incidents with Office 365 technical support.
• Creation of cloud only identities (Groups/Accounts).
• Assign admin roles to NP (non person account)/service accounts in Azure AD.
• Grant AZURE AD permissions for web app registrations.
• AAD Connect synch/license related issue.
• Manage Azure AD Directory and Enterprise Applications integration
• Reset and share the password with account owners.
• Edit or modify the properties of identity in Azure.
• Enforce and reset MFA for identities in cloud.
• Assist the user in troubleshooting the issues relates to O365.
• Working knowledge in cloud capabilities and concepts including federation and cloud security, Directory Synchronization, MSFT O365 and Azure AD.
• Provide 2nd level or escalated support for O365 Licensing, Trust relationship and other implementation and operational related issues.
• Provide support for Skype for business, Teams and Stream
• Synchronization of AD with Azure AD and assigned O-365 licenses such as right to Exchange online and installed Office 2016 on computers and devices.
• Handle incoming end user support requests to the identity and access management team
• Resolve issues pertaining to Office 365 tenant and identity
• Troubleshooting the sync issue and resolving Azure objects creation errors
• Troubleshooting and resolving issues with user access to cloud services
• Troubleshooting the mail flow using the hub queue and also resolving the issues related to outlook calendar and Free or busy.
• MFA end user support from initial device registration to back end user/tenant troubleshooting skills.
• Azure tenant end user administration and group based licensing support.
• ServiceNow workflow and ticket management.
• Power shell knowledge to generate reports and make changes to Azure tenant user objects
• Managing Exchange online User Creating,modifying and Deleting Mailboxes
• Recovered Deleted items from user’s mailbox.
• Created Mailbox sharing policy.
• Granting Role based permissions for the users.
• Troubleshooting User’s Outlook web app options and password requirements
• Migrate Mailboxes to O365

Confidential, NJ

Active Directory Engineer

Responsibilities:

• Responsible to analyze & review AD security and reduce excessive admin privileges by segmenting the user’s credentials in to privileged tiers.
• Office-365 License Assignation and troubleshooting part.
• Creation of cloud only identities (Groups/Accounts).
• Assign admin roles to NP (non person account)/service accounts in Azure AD.
• Grant AZURE AD permissions for web app registrations.
• AAD Connect synch/license related issue.
• Creating and managing SIP accounts.
• Troubleshooting the sync issue and resolving Azure objects creation errors
• Troubleshooting the mail flow using the hub queue and also resolving the issues related to outlook calendar and Free or busy.
• Working knowledge in cloud capabilities and concepts including federation and cloud security, Directory Synchronization, MSFT O365 and Azure AD.
• Ability to automate Software Installation, reports generation and cloud connectivity using PowerShell scripting.
• Provide 2nd level or escalated support for LDAP authentication, O365 Licensing, Trust relationship and other implementation and operational related issues.
• Troubleshooting of various tools and technologies that is not limited to DNS, WINS, PKI, GPO’s, Sites and Services, trusts, Azure AD, Azure IAAS, Azure AD Connect, PowerShell and VB Scripting, GPO, MSFT Windows AD, Virtualization, DNS, DHCP, IPAM, VPN, Splunk, Load Balancer Services, PKI and Certificates, PingFederate, SSO, SCCM/SCCM, QMM for AD, Quest Recovery Manager and Commvault.
• Troubleshooting the role based and control restrictions by implementing custom app specific GPO’s to enforce access to servers using restricted groups.
• Responsible for vulnerability scanning and Remediation, Technical Standard Assessment of Domain Controllers and audit of privilege group members.
• Identify and Investigate the hardware and software related issues by performing root cause analysis and finally implement an action plan for the resolution and dissemination of conclusions.
• Responsible to provide the support for planning, managing and troubleshooting of High Available Systems, Network, Storage Solutions, Failover Clustering, Business Continuity and Disaster Recovery Solution.
• Deep level understanding of GPO modeling, Privileged groups, OU, Virtualization, all aspects of AD, AAD Connect, Azure AD & O365 services.
• Prepare the runbook to support the operational activities that are executed at the level 2 support, participate in project meetings and coordinate with other technical teams.
• Ability to troubleshoot logon/authentication, Licensing and sync related issues for AD, AAD objects and mailboxes.
• Installed and configured the Dell migration manger version 8.14 on the target domain.
• Migrated objects into the new domain.
• Migrating OU’s, groups, users to target domain using Dell Migration Manager.
• Migration of Computer A/c’s along with the respective user profile from source to the target domain.
• Migrated DFS file shares from source to target domain using Robocopy & replicated the permissions of DFS in target domain using the Dell Resource Update Manager (RUM). understanding on AD replication and how to troubleshoot replication problems.
• DNS as well as the DHCP Scope Migration.
• Printer, File Server Migration and application configuration.
• Gathering user and computer data for migration and prepare for the file to be upload in (QMM) Quest Migration Manager.
• Integration Active Directory on premises with Azure AD.
• Synchronization of AD with Azure AD and assigned O-365 licenses such as right to Exchange online, SharePoint Online and installed Office 2016 on computers and devices.
• Migrated Active user Mailboxes and updated the Exchange settings also addressed unused mailboxes.
• Migrated the public folders, PST files into exchange online.
• Deploy and Configured the Cached Credential Utility (CCU) in order to migrate the Remote Desktop Computer A/C’s over the VPN connection to target domain.
• Installed and Configured the User Profile Migration wizard in order to migrate the Standalone Computers/Laptop A/C’s over the VPN connection to target domain.
• Migrate the computer A/C of servers such as File, Citrix, application, and SQL server using RUM utility from Dell Migration Manager for AD.
• Configured the IP-Helper option and flip the switch of VLAN to use target DNS server meanwhile, disabled the source domain DHCP server and enabled the target domain DHCP server.

Environment: Windows 2012 R2, windows 7 Professional, windows 10 professional, Quest MM for AD, Secure Copy, RUM, Cache Cred Utility, User Profile Migration Wizard, FortiClient VPN, DNS, DHCP and ADLDS.

Confidential, ST Louis, MO

AD & AAD Consultant

Responsibilities:

• Maintaining and managing the Active Directory User and Computer Objects by using the PowerShell and Dell Active Roles.
• Migrating and Syncing the Active Directory objects from on premises AD to Azure AD (Cloud) using the AAD Connect Server.
• Providing the access and updating the user/computer object attributes and container (OU) movements while troubleshooting the sync issues.
• Troubleshooting with the authentication issues to the user while accessing the applications and the computers using Splunk logs and VDI logs.
• Monitoring and checking the replications status, backup status and health of all the Domain Controllers which are both physical and Virtual machines..
• Manual registering/setting the SPN (Service Principal Name) for the SQL services to authenticate with the Active Directory Domain Services.
• Implemented the PowerShell scripts for the bulk modification for the Active Directory user and computer object attributes to facilitate synchronization to Azure AD
• Creating and updating the sync rules in the AD Connect Sync Rule Editor for User, Contact, Groups, Devices and Distribution Groups
• Troubleshoot AAD connect delta and full cycle sync issues as they arise and validate data integrity.
• Building, maintaining and monitoring the various Windows Servers with Operating Systems of windows 2008/ 2012/21016.
• Installing and troubleshooting Monthly patches on the servers using the Microsoft WSUS patch distribution services.
• Running the IQ, OQ, PQ (Installation Qualification, Operational Qualifications, Performance Qualifications Responsible for ensuring that the infrastructure solutions in Development, Test and production Environments adhere to technical standards by working with various other teams.
• Working on various issues and troubleshooting the Operating system level problems related to network, Remote Desktop, Local security policies, services, firewall issues etc.
• Slipstream, Test and deploy windows updates to Domain Controllers and Windows Severs.
• Maintaining the Virtual environment of the servers related to migration, deployments and monitoring of ESXi hosts and Virtual Machines (VM).
• Building the VMs, managing and checking the health through VM vSphere Web clients and Thick clients 5.x to 6.x.
• Host and Datastore Migration of Virtual Machines by doing vMotion and storage vMotion.
• Upgrading the NIC cards for the VMs and the versions of hosts & clients.
• Making sure the VMs are working with resiliency without any disruption using the snapshot, Fault Tolerance, HA and DRS features
• Primary responsibility for the Active Directory Administration to provide strategic and tactical direction for the Active Directory Services, Identity and Access Management, Roles Based Access Control and Segregation of Duties
• Worked on Active Directory (AD) Domain Consolidation. Service delivery of the Azure Active Directory and the Identity Management team within Microsoft cloud platform (O365 Identity, Azure etc.)

Confidential, Denver, CO

Active Directory Engineer

Responsibilities:

• Manage & support a large client base Windows 2000/2003/2008 R2/2012 in a multi domain/forest Active Directory of more than 3500 windows servers on 24x7x365 basis in an enterprise infrastructure.
• Develop new scripts and debug existing scripts to automate the routine tasks.
• Provide technical expertise in all aspects of AD, Azure AD, AADConnect, Conditional Access, Hybrid Identity Model of O365 and overall infrastructure stack in which the company operates and support.
• Perform assessment activities which include identifying, assessing, designing, implementing and supporting complex infrastructure change initiatives across the enterprise.
• Responsible to develop, document and enforce the standards, security procedures and controls for access to ensure integrity of Identity and Authentication systems.
• Provide support with solutions on ping federate for authentication with SAML, OAuth, OpenID and Kerberos.
• Expertise in deployment and troubleshooting of windows 2008 and 2012 R2Domain Controllers in AD.
• Managing and troubleshooting Microsoft windows active directory, DNS, DHCP services on windows server 2003/2008 and 2012 platforms.
• Provide technical support in AD Migration, Consolidation, Integration, Upgrade and Decommission.
• Work with AD dependent application teams to plan and coordinate the upgrade and migration.
• Responsible to provide the support for planning, managing and troubleshooting of High Available Systems, Network, Storage Solutions, Failover Clustering, Business Continuity and Disaster Recovery Solution.
• Review current state of AD DS infrastructure and outline the future state.
• Assist in restructuring of Active Directory objects by performing the inter and intra forest migrations.
• Conduct disaster recovery planning and take timely backups for Bare Metal restoration of OS Established connection from Azure to On-premise datacenter using Azure Express Route for Single and Multi-subscription connectivity.
• Utilized NSGs for layer 4 Access Control List (ACLs) for incoming and outgoing packets. Leveraged VNET system routes and underlying route table that holds Local VNet Rules, On-premise Rules, Internet Rules and IP Forwarding as design basis.
• Configure an ILB listener for Always on Availability Groups in Azure Creating and managing Azure Web-Apps and providing the access permission to Azure AD users
• Proactive planning and managing server hardware, OS upgrades, software drivers and hardware firmware upgrades.
• Defining, implementing Backup-recovery methods and disaster recovery procedures, tests and plans.
• Creating baseline and remediating vSphere, vCenter and ESXi patching/upgrades through VMware Update Manage.
• Performance tuning of VMware servers, Virtual sessions and management of server resources between virtual machines. Troubleshooting virtual machine issues.
• Moving physical machine to virtual machine using p2v converter.
• Root Cause & System Log Analysis and reporting. Troubleshooting problems with the help of Event Logs.
• Distributed power management, Fault tolerance, Data Recovery. Manage Users, Groups, Permissions and roles.
• Data Protection and maintenance of healthy network using different backup and recovery strategies and Automated System Recovery Disk and virtual machine.
• Having Experience on Resolving the Snapshot issues and Clone issues.

Confidential

Systems Administrator

Responsibilities:

• Hands-on experience in Deployment, requirement gathering, Installation administration.
• Maintaining and managing the Active Directory User and Computer Objects by using the PowerShell and Dell Active Roles
• Migrating and Syncing the Active Directory objects from on premises AD to Azure AD (Cloud) using the AAD Connect Server
• Providing the access and updating the user/computer object attributes and container (OU) movements while troubleshooting the sync issues.
• Creating and managing Exchange objects.
• Troubleshooting with the authentication issues to the user while accessing the applications and the computers using Splunk logs and VDI logs
• Monitoring and checking the replications status, backup status and health of all the Domain Controllers which are both physical and Virtual machines
• Manual registering/setting the SPN (Service Principal Name) for the SQL services to authenticate with the Active Directory Domain Services
• Implemented the PowerShell scripts for the bulk modification for the Active Directory user and computer object attributes to facilitate synchronization to Azure AD
• Troubleshoot AAD connect delta and full cycle sync issues as they arise and validate data integrity
• Building, maintaining and monitoring the various Windows Servers with Operating Systems of windows 2008/ 2012
• Monthly installing the patches on the servers using the Microsoft WSUS patch distribution services
• Running the IQ, OQ, PQ (Installation Qualification, Operational Qualifications, Performance Qualifications Responsible for ensuring that the infrastructure solutions in Development, Test and production Environments adhere to technical standards by working with various other teams
• Working on various issues and troubleshooting the Operating system level problems related to network, Remote Desktop, Local security policies, services, firewall issues etc
• Slipstream, Test and deploy windows updates to Domain Controllers and Windows Severs
• Building the VMs, managing and checking the health through VM vSphere Web clients and Thick clients 5x to 6x
• Host and Datastore Migration of Virtual Machines by doing vMotion and SvMotion
• Upgrading the NIC cards for the VMs and the versions of hosts & clients
• Making sure the VMs are working with resiliency without any disruption using the snapshot, Fault Tolerance, HA and DRS features
• Maintaining the HP/Dell hardware by racking up, decommissioning and parts replacement
• Communicating with various vendors and teams to troubleshoot various hardware related issues and in replacing the server hardware
• Bare Metal deployment by installing the required operating system, app installations and joining server to the corporate company domain.