Adrian Johnson

Led the migration and modernization of Universal Music Group’s PKI and AD environment. I also transitioned legacy certificate systems to Microsoft Active Directory Certificate Services (AD CS), streamlined domain controller performance, and established enterprise-wide certificate security policies.

Led a full-scale modernization of the City of San Francisco's AD and PKI infrastructure. I consolidated 50+ legacy domain controllers into a streamlined, secure hybrid Entra ID environment. I also migrated enterprise PKI certificates from unsupported platforms to Microsoft AD CS with zero downtime, enforcing strict certificate policies and TLS compliance.

Eikon Consulting engaged me to modernize and stabilize CBRE’s AD and PKI infrastructure. I focused on consolidating domain controllers, cleaning up replication topology, and migrating legacy certificate services to Microsoft AD CS while enabling scalable, secure identity management.

For a manufacturing client with 1,800 users, I designed a hybrid IAM solution combining on-premises AD with Entra ID.

Key tasks:
• Configured Azure AD Connect for seamless identity synchronization across on-prem and cloud environments.
• Enabled SSO for Microsoft 365 and custom applications, reducing login times by 40%.
• Deployed conditional access policies to restrict access based on device compliance and location, addressing compliance requirements.
• Integrated Entra ID with on-prem applications using Application Proxy, ensuring legacy systems remained accessible.

This project improved operational efficiency and laid the foundation for a full cloud transition.

I’ve also worked with Entra ID’s advanced features, such as dynamic group membership, B2B collaboration, and integration with third-party IdPs like Okta. My approach emphasizes security, scalability, and user experience, ensuring alignment with business objectives.

I led an IAM migration for a mid-sized financial services company transitioning from an on-premises Active Directory (AD) to Entra ID. The project involved 2,500 users and required seamless integration with existing applications.

My responsibilities included:
• Assessment and planning: Conducted a thorough audit of the on-premises AD, identifying user accounts, groups, and dependencies. Used Azure AD Connect to map and synchronize identities.
• Configuration: Set up Entra ID with SSO for 20+ SaaS applications (e.g., Salesforce, Workday) using SAML and OAuth. Configured MFA and conditional access policies to enforce security for remote users.
• Migration execution: Executed a phased migration, starting with a pilot group of 200 users. Used Azure AD Connect to sync on-prem AD with Entra ID, ensuring no downtime. Resolved sync errors related to duplicate UPNs and stale accounts.
• Post-migration: Implemented Privileged Identity Management (PIM) to manage admin roles and conducted user training on self-service password resets. Reduced helpdesk tickets by 30% through automation. The migration was completed in four months with zero disruptions, and the client achieved enhanced security and scalability.