Nawaz Aslam

• Leading cloud security initiatives and designing secure cloud architectures.
• Implementation of Microsoft Defender for Endpoint and deployment of Antivirus policy
on Windows, Linux, and SAP VMs.
• Integrated Security Logs to Splunk (MDE, MDC, Firewall, Entra ID)
• Managed and responded to alerts generated by Defender for Endpoint and Microsoft
Sentinel
• Enhancing Azure security & GCP configurations to improve compliance and risk posture.
• Implementing security baselines for Azure Public Cloud and Azure Stack HCI.
• Managing identity and access controls across cloud environments.
• Azure cloud security support services, including Azure Key Vault and enforcement of
Azure policies.
• Provided design, implementation, testing, and 24/7 managed services support for Azure
cloud and Google cloud security.
• Cloud security posture management with Microsoft Defender for Cloud & Security
Command Centre.
• Managing identity and access controls, including password reset, MFA, SSPR, RBAC.
• Cloud workload protection with Azure Firewall and Web Application Firewall (WAF).
• Vulnerability scanning and continuous monitoring of cloud-based virtual machines.
• Coordinating with other IT teams to remediate vulnerabilities and enhance threat
protection.
• Implementing security best practices, improving secure score, event logging, and
security reporting.
• Liaising with the clients SOC team for incident management and remediation efforts.
• Microsoft Defender for Endpoint implementation and deployment of Antivirus, ASR
policy on Windows, Linux, and SAP VMs.
• SIEM integration and pushing security logs to Splunk (a third-party tool managed by the
client).

• Lead cloud security initiatives across Azure and GCP, designing secure architectures and enforcing
security baselines for Azure Public Cloud and Azure Stack HCI.
• Deployed Microsoft Defender for Endpoint and Antivirus/ASR policies across Windows, Linux, and SAP
virtual machines, strengthening endpoint protection enterprise-wide.
• Integrated MDE, Microsoft Defender for Cloud, firewall, and Entra ID logs into Splunk, improving
centralized visibility and incident response times for the SOC.
• Triaged and remediated alerts from Microsoft Defender for Endpoint and Microsoft Sentinel,
coordinating with the clients SOC team on incident management and remediation.
• Managed identity and access controls across cloud environments including MFA, SSPR, RBAC, and
password reset governance, and administered Azure Key Vault and policy enforcement.
• Delivered cloud security posture management using Microsoft Defender for Cloud and Google
Security Command Centre, improving Secure Score and audit readiness.
• Ran continuous vulnerability scanning of cloud workloads and partnered with IT teams to remediate
findings and reduce risk exposure.
• Provided design, implementation, and 24/7 managed security services for Azure and Google Cloud,
protecting cloud workloads with Azure Firewall and WAF.

IT Analyst with 8+ years of experience in Cloud Infrastructure, Azure, Microsoft 365, Windows Server, Active Directory, Networking, Identity & Access Management (IAM), and Cyber Security. Experienced in managing enterprise IT infrastructure, troubleshooting complex issues, implementing security best practices, monitoring systems, and supporting cloud environments. Strong expertise in Azure administration, endpoint security, system optimization, and delivering secure, reliable IT solutions.

• Led a 12-engineer team responsible for securing cloud and endpoint infrastructure across client
environments.
• Directed network security, endpoint protection, and data protection operations to maintain client
security SLAs.
• Designed proof-of-concepts for Azure and Exchange mailbox migrations, supporting secure cloud
transition planning.

• Managed identity and access management (IAM) operations.
• Delivered official training on mail flow and email security.
• Handled escalation calls and provided security solutions.

• Managed end-to-end identity and access management operations for enterprise clients, including
provisioning, access reviews, and escalation handling.
• Delivered official training programs on mail flow and email security to internal and client teams.
• Resolved escalated security incidents, providing root-cause analysis and remediation solutions.