OPERATIONS.
INSTINCT.
DEFENSE.

Security Operations & Incident Response

• Triaged abnormal user activity, suspicious browser behavior, and identity-related incidents across Active Directory/Entra ID for 3,500+ users.
• Investigated suspicious VPN logins — foreign IPs, mismatched geolocation, MFA failures — blocking unauthorized access attempts.
• Remediated compromised accounts via password resets and MFA re-enforcement, closing confirmed identity incidents.
• Validated and cleaned phishing-exposed endpoints through AV scanning and malware checks.
• Logged and categorized incidents in BMC Remedy with root-cause notes, maintaining escalation workflow compliance.

Monitoring & Alert Triage

• Monitored enterprise infrastructure in BMC TrueSight, Entuity, Site24x7, and NetFlow Analyzer, flagging anomalies and traffic deviations before service impact.
• Triaged first-level alerts — latency spikes, abnormal device behavior — and escalated confirmed incidents to L2/L3.
• Monitored POS, Pumpomat, and NCR retail systems across 800+ locations, sustaining stable and secure operation.

Identity & Access Security

• Administered access controls (privileged accounts, groups, licenses, hybrid identity sync) in Active Directory/Microsoft 365 for 3,500+ users.
• Validated MFA challenges and sign-in anomalies, escalating confirmed cases to L2/L3 security teams.

Recognition

• Earned a Certificate of Recognition (Q2 2023) from ENOC for monitoring responsiveness and incident handling.

• Secured IT operations supporting delegations from 190+ countries during Expo 2020 Dubai.
• Enforced patch and software-deployment compliance via ManageEngine Desktop Central, reducing endpoint attack surface.
• Resolved security incidents across Active Directory, Exchange/Outlook, and Cisco AnyConnect VPN.
• Standardized endpoint builds via Acronis imaging, cutting deployment time and configuration drift.
• Maintained AV, CCTV, and VMS/SMS physical-security systems for continuous operation.
• Managed mobile device compliance via Microsoft Intune and monitored network health via ManageEngine OpManager, flagging incidents for NOC escalation.
• Logged and resolved tickets via ServiceNow and ManageEngine ServiceDesk Plus, maintaining SLA compliance.
• Onboarded endpoints to Microsoft Defender ATP, extending threat-detection coverage across the device fleet.

• Administered identity and access on Windows Server 2012 R2 Active Directory and Exchange Online for 40+ users.
• Managed patching, antivirus, licensing, and backups across the IT asset lifecycle, reducing unlicensed/unpatched exposure.
• Administered firewalls, routers/switches, and biometric access control for facility security.

• Delivered L1/L2 infrastructure support for Daimler Mercedes-Benz's European Data Centre under regulated change control.
• Monitored infrastructure via SCOM and Nagios, flagging service risks before customer impact.
• Administered Active Directory, HP/Dell servers, VMware, SCCM, and LAN/WAN under ITIL-aligned change management.