Case Study VMware Hyper-V Entra ID Microsoft 365 Exchange Online Intune pfSense UniFi

Enterprise Infrastructure Management

Managing and securing enterprise hybrid infrastructure end to end, spanning network operations, firewalls, VPNs, virtualization, Microsoft 365, Entra ID, Exchange Online, Intune, and cloud identity services.

Overview

As a Senior Network & Systems Administrator, I manage and secure hybrid enterprise infrastructure end to end, from the physical network layer through cloud identity and endpoint management. The environments span firewalls, switching, wireless, VPNs, VLANs, and DNS/DHCP; VMware and Hyper-V virtualization; and a Microsoft-centric cloud platform including Active Directory, Entra ID, Intune, Exchange Online, and Microsoft 365.

This isn't a single project. It is full operational responsibility for live enterprise environments, requiring simultaneous management across networking, virtualization, identity, endpoint, and cloud workloads while driving ongoing modernization initiatives.

Infrastructure Areas

Network Infrastructure

→pfSense firewall management — rules, NAT, VPN (site-to-site and remote access), IDS/IPS
→UniFi switching and wireless — VLAN configuration, inter-VLAN routing, access point management
→DNS/DHCP administration across all sites
→Network segmentation — corporate, server, guest, and IoT VLANs with firewall enforcement
→Proactive monitoring, performance tuning, and capacity planning
→VPN, firewall, switch, and wireless administration across the organization
→Meraki infrastructure support for managed-services clients
→Cisco Umbrella DNS-layer protection
→Network and system issue investigation and resolution

Server & Virtualization

→Hyper-V virtual machine deployment, configuration, and lifecycle management
→Ubuntu Server administration — services, updates, security hardening
→Veeam backup and disaster recovery — backup jobs, retention policies, restore testing
→Hardware maintenance — physical servers, peripheral devices, and infrastructure upgrades
→VMware virtualization and Windows Server administration (AD, DNS, DHCP)
→Server and backup monitoring with file-level restores

Identity & Access Management

→Active Directory and Entra ID (Azure AD) administration in a hybrid identity environment
→Conditional Access policies enforcing MFA, compliant device, and location-based controls
→AD Connect sync management between on-premises AD and Entra ID
→Windows LAPS deployment for local administrator credential management
→Role-based access control, group policy, and OU structure management
→Conditional Access administration covering authentication requirements, policy exclusions, and application access
→MFA enforced for external Teams identities, with group-based exclusions for approved non-MFA scenarios
→Entra ID Company Branding across Microsoft 365 sign-in

Endpoint & Device Management

→Intune MDM/MAM for Windows, iOS, and Android device management
→Windows Autopilot zero-touch provisioning for new device deployment
→Win32 app packaging and deployment via IntuneWinAppUtil
→Sophos endpoint protection deployment and policy management
→Apple Business Manager integration for iOS/macOS enrollment
→SCCM/MECM to Intune migration from co-managed to cloud-native with zero-touch Autopilot
→Intune packaging and deployment (Zscaler, CrowdStrike, Keeper, custom RMM)
→Intune configuration policies for app blocking, browser restrictions, and long-path support

Microsoft 365 Services

→Exchange Online administration — mailboxes, distribution groups, mail flow rules
→SharePoint Online management — site collections, permissions, and content migration
→Teams administration — policies, calling, and governance
→M365 licensing automation via PowerShell and Power Automate
→Proofpoint email security integration and policy management
→Phased OneDrive for Business rollout with GPO, access controls, pilots, and staged departmental deployment
→Teams guest and external access security

Automation & Scripting

→PowerShell automation for user provisioning, reporting, and compliance enforcement
→Microsoft Graph API integration for cross-platform device and user reporting
→Power Automate workflows for administrative task automation
→WPF-based GUI tools for helpdesk-facing provisioning workflows

Technology Stack

pfSense UniFi Hyper-V Ubuntu Server Active Directory Entra ID Intune Autopilot Exchange Online SharePoint Teams Veeam Sophos Proofpoint PowerShell Microsoft Graph API Power Automate Windows LAPS VMware Windows Server Group Policy Conditional Access OneDrive for Business Meraki Cisco Umbrella AD Connect Apple Business Manager

← Back to Projects