Mykyta K — IT Systems Engineer

Summary of Qualifications

• Identity & Access Management - Active Directory, Entra ID (Azure AD), GPO
• Hybrid identity environment via Azure AD Connect, SSO, and Conditional Access policies
• GPO development: enforcing security, access control, updates, and software installation policies
• Cloud Management & Security - Microsoft 365 (Exchange Online, SharePoint, OneDrive, Teams Admin, Defender, Intune, Autopilot), Google Workspace, Jamf Now
• User access and security policy administration across cloud platformsAzure: Administration of virtual machines, virtual networks, resource groups, and NSGs; configuration of on-premises to Azure VPN tunnels;
• implementation of IAM, RBAC, and JIT access for virtual machines; setup of Azure Backup and recovery policies; monitoring and alerting through Log Analytics and Logic Apps; integration with Defender for Cloud; basic infrastructure automation using Terraform. Microsoft Intune & Autopilot:
• End-to-end device lifecycle management - from initial configuration and enrollment to app packaging, policy creation (MDM/MAM), and automated provisioning via Microsoft Endpoint Manager (MEM).
• macOS & MDM: Jamf Now (Blueprints, App deployment, Defender onboarding, security policies), Custom Profiles (.mobileconfig/.pkg)
• Virtualization - Azure IaaS, VMware vSphere, Hyper-V, Citrix StoreFront DaaS, NetScaler
• Administering VMware vSpher: provisioning VMs, resource management for production and testing
• Citrix: application and access delivery via StoreFront, NetScaler, and Virtual Desktops (VDI); SSL updates, app publishing, and user access control.
• Windows Servers - RDS, DFS, Active Directory Certificate Services (AD CS), RADIUS, WSUS, IIS
• Remote server management with Dell iDRAC: provisioning, RAID configuration, OS deployment
• Migration of websites from legacy IIS servers to modern environments
• Linux Servers (Ubuntu, CentOS): administered and maintained systems with RSyslog, MinIO S3 (SAN-backed storage), Elastic, Kibana, MongoDB, and BIND DNS (multi-server chroot setup with zone and config management).
• Monitoring & Management - ELK, Log Analytics, Defender, Zabbix
• Databases - MSSQL (Log Shipping), PostgreSQL (WAL-based backups)
• Networking - Mikrotik, Sophos (RED, SSL VPN, IPsec S2S), DHCP, DNS, Routing
• Backups - Veeam Cloud Connect, Backup & Replication, Service Provider Console
• Configuration of full/incremental backups, replication, and disaster recovery in AWS EC2
• Storage - Dell EMC, HP Storage Utilities, SAN Administration, RAID setup and maintenance
• Scripting - PowerShell, Microsoft Graph API
• Compliance: ISO 27001 alignment, hardening, access control, audit policy configuration.
• Collaboration & ITSM: Jira, Confluence (incident/change management, workflow automation)
• Certifications - Microsoft AZ-900, Sophos Central Engineer, Veeam VMSP/VMTSP, GCP Baseline Infrastructure, ConnectWise Automate & Manage

Professional Experience

IT Systems Engineer, DigitalEdge, New York, USA (Datacenter)

08.2023 - Present

Responsibilities:

• Administration and support of core server infrastructure including VMware, Citrix StoreFront, NetScaler
• Intune full deployment and administration from scratch, including device enrollment, Autopilot setup, application packaging, configuration and compliance policies, and integration with Azure AD and Defender for Endpoint.
• Automation of backup and disaster recovery using Veeam Backup & Replication and Cloud Connect
• Performance monitoring, troubleshooting, and ensuring high availability across systems and services
• Azure infrastructure management and support for hybrid cloud environments
• Implementation of access control policies, SSO, and collaboration with cybersecurity tools
• Participation in infrastructure modernization and integration of new technologies
• Providing technical support to end users and internal teams

System Administrator, Altoverra, Ontario, Canada (IT Security & Development)

(01.2020 - 06.2023)

Responsibilities:

• Secured IT infrastructure by configuring firewalls, VPNs (IPsec/SSL), and implementing MFA and Azure AD policies
• Managed and maintained Veeam backup solutions, planning and executing disaster recovery scenarios
• Supported development environments across Azure, VMware, and Hyper-V platforms
• Automated administrative and security tasks using PowerShell

System Administrator, Musson, Sunled, Live Stream, Kharkiv, Ukraine

(09.2018 - 01.2020)

Responsibilities:

• Windows Server administration, office interconnectivity, and end-user technical support
• Configured local network environments and maintained server performance

System Administrator, IT Group, Kyiv, Ukraine

(02.2010 – 08.2018)

Responsibilities:

• Managed Windows-based servers, domain infrastructure, and backup operations
• Provided helpdesk support, hardware diagnostics, and repair of office equipment

Service Engineer, Infokonsalting LLC, Donetsk, Ukraine

Responsibilities:

• Repair and maintenance of PCs and office equipment
• Performed hardware diagnostics, printer maintenance, and cartridge refilling

Education

• IT Systems and Office Equipment Support - State College of Industrial Automation.

Recommendations

• Nikita was an excellent person to have on my team. He's a hard working individual and he's always willing to learn new skills. Over the past few years he has matured significantly as a systems administrator helping us manage our hybrid cloud environment.

János D., Information Security Expert

(June 29, 2023)

• Nikita is a hard working and experienced IT professional. He consistently demonstrates his dedication and exemplary work ethic and is always eager to assist. Nikita will be a valuable asset to any organization that chooses to take advantage of his skills as he is well versed in many infrastructure areas of IT whether it is Windows, Linux, network and security, or cloud platforms such as Azure.

Serge L., IT and Security Services Engagement Partner

(November 23, 2022)