Position: Microsoft Infrastructure services Engineer
Category: Sysadmin
English level: pre
Years of experience: 11

- Implemented and supported Microsoft Endpoint Configuration Manager for device compliance, Microsoft Defender, and BitLocker management for endpoint protection, as well as query-based deployment of patches and updates

- Configured and managed high availability and scalability of Remote Desktop Services for effortless and secure access to company resources. Utilized RemoteApp, Session-based, VDI, and RD Web HTML5 Client based on task requirements

- Deployed high availability and site resilience in Exchange Server 2019 with multiple database and CAS servers, as well as DAG. Also migrated user emails, calendars, and notes from Zimbra Collaboration Suite

- Developed a strategy and provided OneDrive based on SharePoint 2019 with Office Online Server to facilitate collaboration among project teams and department members of the organization, as well as file synchronization across corporate devices. Implemented Search Center and Document Center to optimize large-scale document management (Document IDs, Version Management, Metadata Navigation, Content Organizer, etc.)

- Implemented PKI to protect traffic to internal websites, secure LDAP, and protect user data and email using EFS and RMS

- Configure, manage and maintain servers within a Hyper-V/vSphere virtualized environment, over 200 VMs

- Planned and provided backup solutions via Data Protection Manager

- Created a strategy and designed Group Policy Objects as requested to ensure compliance with company policies for servers and user endpoint devices

- Implementation and governance of Information Security Management System based on ISO 27001

- Developing internal instructions and guides
I am an experienced System Administrator with over 15 years of expertise in Information Technology, gaining valuable insights and skills along the way.

My primary focus has been on the design and maintenance of enterprise-scale Active Directory environments, encompassing multiple forests and domains. I am well-versed in implementing advanced security features such as ESAE, JIT, RBAC, and PKI hierarchy.

With expert-level knowledge of infrastructure services running on the Microsoft Windows platform, including AD, GPO, DNS, DHCP, IIS, NLB, WSUS, RDS, CA etc. I have consistently ensured the smooth operation of critical systems.

Throughout my career, I have been proactive in developing new strategies and IT procedures to enhance efficiency, streamline workflows, and improve customer satisfaction. I have also been involved in the creation and maintenance of multi-year functional roadmaps, ensuring the alignment of IT goals with organizational objectives. 

Additionally, I have excelled in maintaining comprehensive system documentation and have actively contributed to team building by mentoring and motivating other team members. In collaboration with the IT Ops team, I have successfully supported a user base of 1000+ end-users, providing reliable and prompt technical assistance. 

This includes close collaboration with business teams, implementation and support teams, engineering teams, as well as contractors and suppliers.