Senior Cloud & Infrastructure Architect | 14+ Years | Azure, VMware, Entra ID, AWS | Remote

Hello Im a senior infrastructure and cloud engineer with 14+ years designing, securing, and modernizing enterprise environments across hybrid cloud, virtualization, and networking. My work centers on aligning infrastructure with current security standards and reducing long-term operational risk, rather than applying short-term fixes.

Areas of Expertise:

• Azure infrastructure and security, including Azure VMs, VNets, storage accounts, RBAC, Defender for Cloud, Log Analytics, VM backups, load balancing, and governance frameworks.
• Azure networking, including ExpressRoute, VNet peering, and hub-and-spoke topology design for hybrid connectivity.
• Identity architecture via Entra ID, including Conditional Access, MFA, SSO, SAML, OIDC, Enterprise Applications, and App Registrations.
• Endpoint management through Intune, including compliance policy design, configuration profiles, application deployment, and co-management with SCCM.
• PKI infrastructure, including certificate authority administration and full certificate lifecycle management.
• VMware architecture, including ESXi 7 to ESXi 8 migrations, vCenter 8, DRS, HA, distributed switching, vTPM, and cross-site vMotion at scale.
• Storage and SAN integration, including Pure Storage, Nimble Storage, iSCSI provisioning, and volume optimization for large ESXi clusters.
• Windows Server and core infrastructure, including Active Directory, GPO, DNS, DHCP, SCCM, imaging, and automation via PowerShell and Azure CLI.
• Network architecture at Layer 2/3, including VLANs, ACLs, OSPF, and segmentation for security and performance.
• Security hardening practices, including legacy protocol deprecation, firewall policy management, and certificate lifecycle governance.

My background spans infrastructure modernization initiatives from initial architecture through full execution, consistently tying that work back to a stronger security posture. I am open to remote contract engagements, short- or long-term, particularly in environments where technical depth and disciplined security practices are valued.