KAIFI SIDDIQUI

«Solution architect within the Accenture Microsoft Business Group (AMBG), driving initiatives as an
individual contributor and as a people leader in the Cloud First Security Capability.
«Driving the design and leadership of a modern Security Operations Centre (SOC), built on Zero
Trust principles and proactive defence strategies, leveraging SIEM, SOAR, EDR, and Threat
Intelligence Framework technologies.
+ Identity and Access Management (IAM) architect in designing, implementing, and managing
secure authentication and authorization solutions using Microsoft Azure AD/Entra ID. Expertise in
configuring SAML 2.0, OAuth 2.0 and OIDC (OpeniD Connect) for enterprise application Single
Sign-On (S50).
«Designed and deployed the highest phishing-resistant (PR-MFA) authentication methods, including
FIDO2 physical security keys, Windows Hello for Business, and Certificate-Based Authentication
(CBA) for privileged administrators operating on Privileged Access Workstations (PAWS).
«Implemented Passwordless MFA to strengthen authentication for other administrators working on
Secured Access Workstations (SAWS) and using Microsoft Authenticator App.
+ Architected and deployed dedicated computing environments—PAWs and SAWs—to ensure
secure access to sensitive systems and critical organizational data.
+ Architected and deployed a comprehensive Active Directory (AD) Tiered Access Model, designing
up to four tiers of classification (Tier 0 through Tier 3) to enforce privileged access segregation,
safeguard critical assets, and maximize organizational security posture.
+ Worked in industry-standard frameworks and compliance regulations NIST, CIS, ISO, PCI-DSS,
GDPR as per client compliance requirements.
+ End-to-end delivery of the project: from project initiation, through project execution until

+ Designed and deployed the hybrid cloud solution for Active Directory Domain, ADFS, WAP, AAD
Connect, and Azure Application Proxy Connector with Azure Traffic Manager (Global & Local) and Azure
Load Balancer (External & Internal).
+ Designed and implemented Cloud Management Gateway and Cloud Management Distribution for
distributing updates to internet based SCCM clients.
+ Cloud & Hybrid Solution Designed for on-premises file servers migration to Azure File Shares with
Azure File Sync for multiple clients.
«Implemented a structured design process for creating Azure hybrid cloud architectures to include on-
premises ADFS, ADFS Proxy/WAP, AAD Connect Sync, Azure AD Application Proxy architectures.
+ Designed and extended on-premises Active Directory Domain or replicated the Active Directory
Domain Services (AD DS) to Cloud hosted Azure Virtual Machines to provide distributed authentication
services.
+ Configured Azure Sentinel-Cloud Native SIEM and Integration with Microsoft Defender Advanced threat
protection.

+ Enterprise Consultant Active Directory (AD DS), DNS, and DHCP architecture for a multi-domain
infrastructure and responsible for the implementation & development of Active Directory Domain
Service.
+ Design, develop, implement & maintain solutions for Active Directory infrastructure requirements.
Review & analyse network, sites and services information to define infrastructure build and DC
placement.
+ Designing and maintaining the infrastructure, providing L3/L4 technical assistance to client
organizations & users, leading a team of Local AD Engineers globally and managing the AD DS
architecture.
+ Produce enterprise-level designs for Global Active Directory migration as a global initiative to
consolidate the dispersed forests & Domains, following those through to implementation via
collaboration with project and support teams.
«Designing, installation, configuring and troubleshooting Windows RDS 2012 R2 Farm (Formerly Known
as Terminal Server), Remote Desktop Session Host, Remote Desktop Connection Broker and RD Web
Access in high-availability mode.
+ Designed and built cloud service models including Azure Infrastructure-as-a-Service for test and dev
environment as a POC and reduce overhead and infrastructure cost by 18 percent by consolidating and
registering or deploying on-premises applications to Azure Active Directory (AAD) Cloud Platform.
«Responsible for designing and implementing Microsoft Azure cloud-based solutions, including private
and public cloud deployment models for a variety of infrastructure services.

+ Directed end-to-end IT operations across enterprise infrastructure, ensuring 24/7 availability and SLA
compliance. Led cross-functional teams of 30+ engineers, fostering a culture of accountability,
innovation, and continuous improvement.
+ Orchestrated ITiL-aligned processes (Incident, Problem, Change, Release), reducing downtime by 30%
and improving resolution efficiency.
+ SME and being part of the global Infrastructure team, technically responsible for the entire Active
Directory Services, Azure Active Directory, Wintel Servers, VMware & vSphere.