ICT Consultant
Gems Education
Total years of experience :10 years, 11 Months
• As Intune Administrator responsible for all configuration policy, issue, and new implementation via Intune.
• Set up and uphold patching solutions with Ivanti Security Control and SCCM to maintain security compliance.
• Design action plan for monthly patching via SCCM and Ivanti for 700 Servers.
• Onboarding schools servers to Ivanti Endpoint Management.
• Support school ICT Engineers on Microsoft 365 related issues.
• Suggest ideas for implementing best practices and streamlining processes, such as patch management.
• Windows update compliance reporting via azure log analytics.
• Configure windows update for Business reports.
• Generate customized Windows update reports using Azure Log Analytics.
• Work together with diverse teams, such as system administrators, security personnel, and application owners, to identify patch needs and coordinate deployment timelines.
• Create and execute patch deployment plans tailored for various asset types, encompassing servers, workstations, and applications.
• Conduct thorough testing and validation of patches within non-production environments prior to deploying them on production systems.
• Deployment of BitLocker policy organization wide via Intune.
• Responsible for monitoring system performance.
• Responsible for monitoring IT system operations and storage utilization.
• Prepare the plans for necessary hardware or software upgrades to support system growth.
• Manages user accounts and assets.
• Assigns and updates security permissions on the network according to security policy. Installation, Reinstallation
• Problem, issue, incident Solving Troubleshooting
• Deployment Product upgrade
• Normal day to day administration Fine tuning, configuration change Backup & Restore
• Physical add/ on virtual environment.
• Professional services Network Switch & Router Upgrade
Windows SCCM and MS Exchange Servers reasonability
• Central focal point for all Microsoft 3rd-level matters across the organization.
• Successfully executes our cross-functional tasks, helps with VMWare problem-solving, and oversees performance monitoring through Venter.
• Collaborating on monthly security patching via ManageEngine Patch Manager Plus and vulnerability management for over 200 servers with the security team.
• Implemented LAPs (Local Administrator Password Solution) throughout the organization.
• Supported Environment for deployment and patching software updates, and application updates recommended by Digital e-government UAE.
• Monitoring the SCCM servers OS performance including CPU, Memory, and Disk space utilization.
• Developing and deploying software packages, including custom EXE, MSI, and script/batch files, to manage clients.
• Setting up SCCM infrastructure, covering client agents, site boundaries, core system roles and client management
• SCCM Troubleshooting all Components like Distribution Points and management Points, SUP.
• Deploying patches/applications with approval of the release Process. Test, QA, Pilot Based on the success ratio then we target MASS PRODUCTION ROLLOUT.
• Manage all issues/questions related to the Windows server and client operating systems.
• Generating compliance and non-compliance reports for all SCCM clients and addressing noncompliance issues as required.
• Addressing and troubleshooting the Non-Healthy Clients machines using other SCCM tools like Client Center, PSEXEC and SMS trace log viewer.
• Using SCCM Reporting, SQL queries and Power Shell scripts for creating the custom-based required reports.
• Responsible for very high system availability and is on call on a 24/7 basis.
• Provide L2 & L3 support for Deskside support analysts.
• Managing SCCM site health, configuring maintenance tasks, and performing client remediation.
• Exchange servers 2019 CU updates for on-premises exchange server 2019.
• Analyses technical problems and creates solutions involving the use of existing techniques or tools.
• Monitor Microsoft server performance, run diagnostics, manage backups, and execute cluster failovers.
• Accountable for the availability, reliability, and uptime of all Infrastructure Services.
• Responsible for the infrastructure architecture design including cloud services including Azure AD, Azure Backup, Azure File Sync Azure VMs.
• Responsible for license compliance across all Infrastructure Services.
• Responsible for delivering and maintaining the strategic technology roadmap to ensure that the delivery of services meets the business requirements.
• Design propose and implement IT strategies, guidelines and procedures within broad principles and policies set by the company to meet IT requirements supporting short and long-term business needs.
• Complete necessary tasks through AD/AZURE AD, Office365, and PowerShell batch Scripts.
• Configuring MFA in Azure & Basic understanding of automation in Azure
• Implemented Microsoft Intune Endpoint management, Managing endpoints.
• Managing around 52 servers on HQ office plus 5 remote vessels offshore site via satellite link.
• Ensures business application systems design, selection, development, and maintenance are successfully integrated and operated within the companys business environment.
• Supporting SharePoint online, such as inventory management, and new asset management.
• Leads the technology operations, monitoring and improvement of both existing and new IT processes.
Intune (Enterprise Mobility) Works:
• Setup Initial Autopilot Profiles & Enrollment forWindows & Android.
• Creating profiles like Device Restriction, Administrative Templates, Endpoint Protection, OMA/URI, Identity Protection, Endpoint Security, Custom profiles, and Health Monitoring.
• Applying Endpoint Security Policies like Antivirus, Disk Encryption, Attack Surface, Endpoint Security Defense, Account Protection, and Conditional Access.
• Packaging and Updating Apps for Windows, Android & iOS on a daily requirement basis.
• Hands-on policy creating like Scripts deploys Windows Update, Features & Quality update rings, Compliance Policy, Group Analytics, Policy Sets, Enrollment restrictions, Dynamic Groups.
• Administrating and troubleshooting on Endpoint devices by Status Monitor
• Setup Policies by Following M365 Best Practices & CIS Benchmark.
Office365 Works:
• Creating Users, Groups, Shared Mailboxes, Resources Mailbox, & Rooms.
• Applying policies on Compliance Management like Creating Litigation Hold, Auditing, DLP, Retention Policies, and Retention Tags.
• Basic knowledge of Security and Compliance.
• Preparing Hybrid Environment for Onboarding On-prem Exchange on Office365.
• Worked on Applying Rules, Message Trace, Safe Attachments, Accepted domains, and Connectors.
• Managing Teams and Users in the Group as required.
• Migrating On-Prem File Serverto SharePoint.
Projects:
• Autopilot Zero-Touch Deployment Configuring devices with the right applications, profiles, and security settings for each user.
• Microsoft endpoint management (in-tune) with autopilot, and onboarding of around 355 devices on Azure cloud.
• Bit-locker deployment on company-wide laptops\Desktops with a recovery key on Azure.
• Onboarding around 52 servers on Microsoft Defender.
• App protection policies for managed and unmanaged devices.
• PRTG administration, support, and maintenance
• MDM (Intune)
• Azure Virtual Desktops
• MFA
• Delivery optimization
• Conditional Access Policies
• Responsible for all IT Operations covering two zones in Expo 2020 (Mobility and Jubilee). Including new deployment of IT-related products, onboarding, offboarding hand handle devices etc.
• Managed and deployed all the Technology resources in two zones. (Venue Implementation of the Mobility and Jubilee zones)
• Trained and led a team to deliverseamless technology operations in respective zones.
• Act as the technical focal point forcustomers, partners, and internal teams investigating and analyzing complex customer scenarios and providing innovative solutions fortheir needs.
• Responsible for maintaining and running totem screen kiosks around the site.
• Handle incoming support calls/emails of existing and onboarding customers under defined SLAs.
• Finding creative solutions, possessing out-of-box thinking to unique problems, and capable of thriving under pressure.
• Work closely with the NOC team for all network-related issues, as well as ourglobal customers across multiple pavilions with the expo site.
• Maintains IT infrastructure o f around 100+ desktop and laptop computers, printers, software applications, telephone systems and other information/office technology within a work area to ensure that all IT-dependent activities continue to function without disruption.
• Provided second-level help desk support for problems relating to the active d i rectory. Created user I Ds, roles, groups OU fileshare permissionsetc.
• With guidance, perform patch management, application packaging and distribution, and operating system deployment (OSD).
• Distribution of content to SCCM Distribution Points /collections/packages/applications within an SCCM 2019 environment.
• Manage existing mobile device management systems (iOS\Android) using Intune.
• Setup Initial Autopilot Profiles & Enrollment for Windows & Android.
• Device Restriction, Administrative Templates, Endpoint Protection, OMA/URI, Identity Protection, Endpoint Security, Custom profiles, and Health Monitoring.
• Applying Endpoint Security Policies like Antivirus, Disk Encryption, Attack Surface, Endpoint Security Defense, Account Protection, and Conditional Access.
• Identifies, initiates, supports, and documents procedures and guidelines that have been used repeatedly to i mprove work processes and methods relating to client service delivery and effective team functioning.
• Provides clients with computer and network support in response to specific requests related to various systems software and hardware, printing problems, computerviruses, network connection and usage and otherIT-related matters.
• Ensures that organization systems information and information systems are protected in a mannerconsistent with organizationsystemsinformationsecurity policy, procedures, and standards.
• Manage inventory records, and ensure properchargesformaintenance, and localareanetworkchanges.
• Maintains 200+ Users IT infrastructure desktop and laptop computers, printers, software applications, copiers, telephone systems and other information/office technology within a work area to ensure that all I T -dependent activities continue tofunctionwithoutdisruption.
• Monitor system performance & implement performance tuning and capacity planning. Set up and configure new laptops desktopsand coreservers.
• Ensureallsoftwarepurchasedlicensingisrecordedandmaintained.
• Installauthorizedsoftwareto laptopsdesktopsandcoreservers.
• Ensuresecurityupgradesaremaintainedonlaptops, desktopsandcoreservers.
• Createpurchase requisitionsforIThardware/software.
• Ensure configurationsanddatabackupof servicesandimplement recoveryfromdisaster.
• Windows2012ActiveDirectory, DNS, DHCPandgroup policymanagement.