Punnary Menon

The project included building the identity and access from the scratch, migrating the domains from the on-premise data center to Azure Cloud, and creating the monitoring and security around the workloads and services in cloud.

After migrating the identities to Azure, they needed governance so we implemented an identity lifecycle using access reviews, entitlement management, and the entire security was designed as per Zero Trust Security principles using Azure Active Directory Identity Protection, Privileged Identity Management (PIM), and access reviews.

I've migrated many applications from an on-premise VMware environment to Azure/AWS cloud and to other data centers. This involved planning and designing the target resources, migration, adhering to the compliance policies, managing and coordinating the activities among different stakeholders and cross-functional teams.

In this project, I analyzed the security of Office 365 services and the environment and found areas of improvement and ways to reduce the attack surface. I strengthened Identity and Access Management (IAM) security, DLP, network security, storage, and data security using different Office 365 security services.

I migrated the enterprise MDM solution from VMware Air watch to the Microsoft Intune solution. I created and deployed specific mobile device management/mobile application management policies for corporate owned and BYOD devices. I also integrated Intune with Windows 10 for the rollout of the autopilot of Windows 10, enabling the OOB experience for the end users.

I migrated about 4,500 mailboxes from an on-premise Exchange server 2007 in a hybrid environment to Office 365 Exchange Online. I ran pilot migration and then planned and designed the migration of the other mailboxes. After the migration, I then designed the optimal architecture for the exchange online environment in terms of security, data protection, retention, and other compliance features.

I have helped enterprise customers during onboarding to MS Azure by understanding the different cloud models, pricing options, designing the network, storage, computing, and security based on the requirement of the workloads to be onboarded.

For a client, I worked as part of a Windows 10 migration project. I helped end users to upgrade their PCs to Windows 10 and get adapted by moving their profile and configuring their applications. I used SCCM to rollout the images.

Tasks Accomplished:
• Designed the Azure infrastructure from scratch.
• Provisioned workloads and services in Azure and got the apps working.
• Created the security baseline for the workloads deployed in Azure.
• Developed the app service and Azure functions.
• Setup the workflows using Azure Logic Apps.
• Optimized the compute platform.