Provided infrastructure support covering server maintenance, group policy updates, system patching, and Active Directory management. Managed RDS instances including backup, snapshot, and maintenance; deployed and configured EC2 instances and EBS volumes. Managed S3 buckets for data storage and lifecycle policies; implemented CloudWatch monitoring dashboards, alarms, and SNS notifications. Conducted regular vulnerability assessments using Nessus and penetration testing simulations using Kali Linux across web and network environments. Performed advanced IOC scanning to detect malicious IPs, domains, URLs, and file hash indicators; correlated IOCs with firewall, proxy, and DNS logs to identify active threats. Implemented remediation plans for high and critical vulnerabilities, reducing enterprise threat exposure.

Developed and deployed Intune configuration profiles for endpoint protection; implemented BitLocker encryption across managed devices. Managed device enrolments, configuration, and compliance using Intune; resolved enrolment and application deployment issues. Configured Microsoft 365 environments including user provisioning, Exchange, SharePoint, OneDrive, and licensing. Managed Defender for Cloud and Key Vault to enhance security posture and compliance readiness. Implemented and maintained Microsoft 365 security policies including Entra ID, Intune, MFA, and Conditional Access.