عرفان أحمد

With over 6 years of experience in IT infrastructure and security, I specialize in securing, optimizing, and managing hybrid and cloud IT environments to enhance efficiency, security, and compliance. My expertise spans Microsoft 365, Azure AD, Entra Connect, virtualization (VMware, Citrix), and core on-premises technologies like Active Directory, DNS, and DHCP.

Key Focus Areas:

✅ Cybersecurity & Threat Protection - Microsoft Defender (Endpoint, Cloud Apps, Identity, Vulnerabilities), CrowdStrike, Genian NAC.

✅ Identity & Access Management (IAM) - Entra Connect, SSO, RBAC, Conditional Access, Privileged Access Management (Delinea PAM).

✅ Hybrid & Cloud IT Security - Microsoft 365, Azure AD, on-premises integration, Zero Trust security models.

✅ Endpoint & Device Management (MDM & BYOD) - Intune, JAMF, policy enforcement, compliance & access control.

✅ Data Loss Prevention (DLP) & Compliance - Microsoft Information Protection, Safetica.

✅ Vulnerability & Penetration Testing - Tenable One, Rapid7, Qualys, SecPoint Penetrator.

✅ Patch Management & Network Monitoring - PDQ, ManageEngine Patch Manager, OpManager, PRTG, SolarWinds.

✅ Networking & Endpoint Security - Cisco, Sophos, FortiGate, Zero Trust Network Access (ZTNA).

✅ Automation & Analytics - Power BI, Power Automate, Microsoft Graph API for workflow automation, reporting, and integration.

I have a strong background in backup & disaster recovery, security compliance, and cloud governance, ensuring businesses maintain resilient and secure hybrid and cloud environments against evolving cyber threats.

I thrive in dynamic and fast-paced IT environments, staying ahead of emerging technologies to implement proactive security strategies. My passion lies in enhancing IT security, optimizing hybrid and cloud operations, and driving digital transformation through the Zero Trust model.

• Effectively managed IT security-related projects for infrastructure rollouts, and implemented upgrades and replacements for server systems (Azure, Vmware, Citrix, Cisco, Fortigate).
• Provided timely and accurate responses for all incidents and requests.
• Simulated attacks on systems to find exploitable weaknesses and implement effective solutions.
• Led multiple projects (Teams, AD, Zoom, Slack) with responsibility for hardware planning and risk management.
• Ensured network security by developing network access, monitoring, control, and performing evaluations.
• Managed company Bring Your Own Device program, onboarding employee devices and verifying absence of inherent security threats.
• During business collaborations, I traveled around various cities in Germany, such as Hamburg, Fintel, and Frankfurt. These trips helped me gain valuable insights into different working environments. I enjoyed contributing to collaborative projects and driving impactful results through effective communication and teamwork.
• Supervised SAP Administration, achieving a 99% accuracy rate in user management, role assignment, and authorization tasks, resulting in zero system downtime due to administrative errors.
• Collaborated with various cross-functional teams to integrate Azure SSO with various cloud applications and services.
• Automated user workflows using Microsoft Graph API and Power Automate.
• Ensured user identities and access permissions in Azure AD, including user and group management, RBAC, Conditional Access Policies, and MFA.
• Analyzed Endpoint Protection ATP, EXO ATP policies, and Email Security to fortify protection, resulting in a 95% decrease in malware infections.
• Utilized MITRE ATT&CK framework to analyze and categorize cyber threats, resulting in a 15% improvement in threat detection and response times.
• Implemented and investigated ATA, DLP, mail flow analysis, information governance, AIP, and SIEM integration, reducing security breach mitigation time by 20%.
• Streamlined enrollment processes using Microsoft Intune and JAMF Pro.
• Evaluated Azure Security Centre, Azure Sentinel, Azure Key Vault, and Azure Advanced Threat Protection to achieve a 99% threat detection rate and ensure compliance with industry standards.
• Managed Azure/Office 365 Security Centre Compliance Manager, ensuring adherence to Azure Benchmark, CIS, Office 365/Azure GDPR, NIST800-207, GRC assessment, ISO, PCI DSS, and SOC report standards resulting in a 100% compliance rate during internal and external audits.
• Managed vendor relationships for procurement of hardware and software, negotiating favorable terms and cost savings.

• Analyzed existing manual processes and developed and implemented improvements.
• Maintained security standards and contributed to evolving security processes and improvements.
• Orchestrated the successful completion of the Quest Domain Migration Project, overseeing seamless migration processes for 5000+ users across multiple domains, resulting in a 20% reduction in user downtime during the migration process.
• Integrated OneLogin SSO with AD resulting in a 30% reduction in user onboarding time in company merger and acquisition and ensuring consistent user access across all integrated systems while maintaining compliance with security policies.
• Carried out the migration of on-premises workloads to Azure cloud, optimizing resource allocation and reducing infrastructure costs by 20%, resulting in an annual cost savings.
• Preserved hybrid identities, Multi-Factor Authentication (MFA), Conditional Access Policy, Azure AD join and configured Self-Service Password Reset.
• Created new environments for development and testing purposes within Azure, resulting in a 30% reduction in development and testing cycle times and a 15% increase in overall software quality.
• Administered Microsoft Teams, proficiently managing groups, channels, and user settings.
• Demonstrated proficiency in Citrix Cloud and Citrix Workspace, optimizing virtual desktop and application delivery solutions for enhanced user experience and productivity.
• Our Managed Firewall and UTM solutions, including Sophos XG Firewall and Sophos UTM, resulted in a 30% decrease in unauthorized network access attempts and a 25% reduction in malware infections.
• Mentored junior administrators, fostering professional growth and strengthening team dynamics.
• Led server infrastructure development, quality assurance, staging and production systems.
• Integrated domain environments (AD, RADIUS, LDAP) and enforced content filtering (IPS, Anti-Virus, Anti-Spam Modules) also Configured VPN protocols (IPsec, L2TP, PPTP, SSL, MPLS) for secure network connectivity.

• Implemented and monitored user access control methods to maintain secure systems.
• Diagnosed and corrected system issues to ensure functional objectives were met.
• Ensured protection of critical IT data with on-site and off-site backups.
• Collaborated with user support teams to effectively manage and monitor all systems.
• Developed PowerShell scripts to automate processes, increasing efficiency.
• Managed assets using Lansweeper and Zoho People, reducing inventory discrepancies by 25%.
• Maintained WSUS servers and conducted regular CCTV backups, reducing data loss incidents by 40%, saving 100 hours of recovery time annually.
• Provided monthly metrics reports via JIRA and ServiceNow using Power BI dashboards for data-driven decision-making.
• Managed 50+ new IT tickets daily and worked to improve the user experience through JIRA and ServiceNow and thoughtful system improvements.
• Utilized Carbon Black for malware threat analysis, tracking, and reporting, enhancing cybersecurity.
• Preserved system documentation logs and assisted in troubleshooting system issues for efficient resolution.
• Applied expertise in Windows Server, Active Directory, Group Policy, VMware ESXi, vSphere, V-Motion, and backups.
• Resolved complex technical issues through effective problem-solving techniques and root cause analysis.
• Resolved issues and escalated problems with knowledgeable support and quality service.

• Managed a successful on-boarding experience for new customers.
• Worked to determine how to best utilize features and functionality to serve their business.
• Diagnosed, troubleshot, and resolved service issues.
• Answered incoming customer support calls and created detailed tickets to track and resolve issues.
• Collaborated with the IT department on upgrades and software roll-outs.
• Provided exceptional computer and technology support to organizations.
• Installed and configured software and hardware for end users.
• Performed remote troubleshooting using diagnostic techniques and relevant questions.
• Worked with customers to determine and implement the best solutions for their issues.
• Provided accurate information on IT products and services.
• Identified and suggested helpful improvements in procedures.
• Performed follow-up calls and visits and updated customer statuses and information.
• Installed and configured laptops, PC’s/desktops, printers, and peripherals.
• Helped achieve 100% compliance with international standards in ISO audits over two years, resulting in zero non-conformities reported.