Sajid Gani

• Directed the implementation of Intune policies to improve device compliance and
enhance organizational security posture.
• Led the end-to-end design and deployment of Microsoft Intune for 3 enterprise
clients, managing 5, 000+ mobile and Windows devices with full MDM and MAM
policies.
• Architected Conditional Access policies integrating Intune compliance, risk signals,
and Azure AD Identity Protection, reducing unauthorized access by 40%.
• Implemented App Protection Policies (MAM) for BYOD scenarios, securing corporate
data within M365 apps without full device enrollment.
• Automated device compliance reporting and remediation using PowerShell + Graph
API, cutting manual audit effort by 70%.
• Managed Windows Autopilot deployment for zero-touch provisioning, reducing device
setup time from 90 to 15 minutes.
• Identity & Access Management Architecture
• Designed RBAC models for M365 and Intune roles, ensuring least-privilege access
across 12 business units.
• Led Azure AD Connect optimization and hybrid identity synchronization for 3
merger/acquisition integrations.
• Implemented Privileged Identity Management (PIM) for just-in-time admin access,
reducing standing privilege risk by 90%.
• Conducted access reviews and identity governance workshops, achieving
compliance with CIS and internal audit standards.
• Team Leadership
• Mentored 5 junior engineers on Intune, Conditional Access, and PowerShell
automation.
• Collaborated with security, network, and application teams to align MDM policies with
business workflows.
• Established identity governance frameworks that ensured secure access
management and reduced unauthorized resource exposure.
• Coordinated cross-functional teams to streamline cloud identity integrations,
improving user authentication reliability and efficiency.
• Optimized device enrollment processes to accelerate onboarding and increase
adoption of mobile device management solutions.
• Defined strategic roadmaps for identity and access management, aligning cloud
initiatives with compliance and business objectives.
• Implemented multi-factor authentication strategies that enhanced user access
reliability and reduced support ticket volumes across enterprise cloud environments.

• Led a team of 20+ IT professionals (including Intune, Exchange, and identity
engineers) to deliver cloud-based endpoint management and identity solutions across
4 global sites.
• Managed $1.2M annual budget for endpoint security and identity tools, achieving
15% cost savings through license optimization.
• Spearheaded Intune migration from legacy MDM (IBM MaaS360) for 3, 000+ devices,
completing rollout 2 months ahead of schedule with 98% user adoption.
• Implemented IT governance framework for mobile devices and identity access,
reducing audit findings by 95%.
• Drove employee retention up 25% through technical coaching, certification
sponsorships (SC-900, AZ-900), and career pathing.
• Orchestrated cross-functional zero-trust initiative, integrating Intune compliance with
Azure AD Conditional Access and Defender for Endpoint.
• Coordinated resource allocation across multiple projects, ensuring consistent service
quality and enhancing client satisfaction through timely deliverables.
• Streamlined communication channels within teams to enhance information accuracy,
resulting in improved client trust and reduced error rates.

• Managed Intune MDM for 1, 500+ devices (iOS, Android, Windows), including
enrollment profiles, compliance policies, and selective wipe on lost/stolen devices.
• Configured MAM policies for Outlook, Teams, and SharePoint, preventing data
leakage to unmanaged apps.
• Administered Azure AD identity lifecycle (users, groups, dynamic membership, self
service password reset).
• Automated user provisioning and license assignment using PowerShell, reducing
onboarding time from 2 hours to 15 minutes.
• Supported hybrid Exchange + Intune integration for seamless conditional access.
• Trained helpdesk teams on Intune troubleshooting and identity management best
practices.
• Automated user access provisioning within O365 environments to accelerate
onboarding processes and improve overall operational efficiency.
• Configured advanced security policies within O365 to protect sensitive data,
significantly enhancing compliance with organizational governance standards.

• Automated tenant-wide identity and license reporting using custom PowerShell
modules, improving audit accuracy by 80%.
• Configured multi-factor authentication (MFA) and legacy auth blocking via Conditional
Access policies.
• Deployed custom retention labels and DLP policies integrated with Azure AD identity
attributes.
• Resolved complex hybrid identity sync issues (Azure AD Connect, UPN mismatches,
duplicate attributes).
• Diagnosed complex system errors to restore operational capacity swiftly, significantly
enhancing overall infrastructure reliability and minimizing service interruptions.
• Enhanced application monitoring systems to proactively identify and resolve
performance bottlenecks, increasing service reliability and user satisfaction.

• Configured and deployed technical solutions to improve system reliability and
minimize downtime for client operations.
• Migrated 10+ legacy Exchange environments to M365 with hybrid identity, including
Azure AD Connect and seamless SSO.
• Implemented role-based access control (RBAC) for Exchange Online and SharePoint
Online.
• Created PowerShell scripts for mailbox permission restructuring and identity
compliance audits.
• Collaborated with cross-functional teams to align technology implementation with
business objectives, enhancing customer satisfaction.
• Diagnosed and resolved complex technical issues, reducing time-to-resolution and
maintaining high service continuity.
• Developed documentation and training materials to increase user adoption and
facilitate seamless technology integration.
• Evaluated existing infrastructure and recommended optimizations to boost
performance and reduce operational costs.

• Managed Exchange Server DAGs, backups (EMC Networker/Avamar), and mail flow.
• Gained foundational experience in Active Directory and on-premises identity
management.
• Configured and maintained backup solutions to ensure rapid data recovery,
significantly increasing system reliability during unexpected failures.
• Automated routine system updates to reduce manual intervention, improving process
efficiency and minimizing potential configuration errors across the infrastructure.