Mykyta (Nikita) K — Cloud Infrastructure & Security Engineer (Azure / Hybrid Identity)

Summary of Qualifications

• Identity & Access Management: Entra ID (Azure AD), Active Directory, hybrid identity via Azure AD Connect, SSO, Conditional Access, GPO development for security, access control, and software policies
• Intune & Endpoint Management: End-to-end device lifecycle (Windows/macOS/Linux): enrollment, Autopilot, Win32 app packaging, MDM/MAM policies via Microsoft Endpoint Manager. Defender for Endpoint integration, compliance baselines. macOS management via Jamf Now (Blueprints, Defender onboarding, custom profiles)
• Azure Infrastructure & Security: VMs, VNets, NSGs, resource groups, on-prem to Azure VPN tunnels. IAM, RBAC, and JIT access. Azure Backup and recovery. Monitoring and alerting via Log Analytics and Logic Apps. Defender for Cloud integration. Basic Terraform automation
• Microsoft 365: Exchange Online (mail flow rules, message trace, DMARC/SPF configuration), SharePoint (site management, backup, automation), Teams (policies, external access controls), Defender, Intune, Autopilot
• Monitoring & Compliance: ELK stack (Elasticsearch, Logstash, Kibana), Log Analytics, Defender, Zabbix. ISO 27001 alignment including hardening, access control, and audit policy configuration
• Scripting & Automation: PowerShell, Microsoft Graph API
• Virtualization: Azure IaaS, VMware vSphere, Hyper-V, Citrix StoreFront/NetScaler (VDI, app delivery, SSL management)
• Windows & Linux Servers: Windows Server (RDS, DFS, AD CS, RADIUS, WSUS, IIS), Dell iDRAC remote management. Linux (Ubuntu, CentOS): RSyslog, MinIO S3, Elastic, Kibana, MongoDB, BIND DNS
• Email security: DMARC, SPF configuration and enforcement - progressive rollout from monitoring to quarantine to reject based on traffic analysis
• Networking: Sophos (RED, SSL VPN, IPsec S2S), DHCP, DNS, routing, Mikrotik.
• Storage, Backup, Disaster Recovery: Veeam Cloud Connect, Backup & Replication, disaster recovery in AWS EC2. Dell EMC/HP SAN administration
• ITSM & Collaboration: Jira, Confluence - incident/change management, workflow automation
• Certifications: Microsoft AZ-900 (certified), MS-102 Endpoint Administrator (in progress), Sophos Central Engineer, Veeam VMSP/VMTSP, GCP Baseline Infrastructure, ConnectWise Automate & Manage

Professional Experience

IT Systems Engineer, DigitalEdge, New York, USA (Datacenter)

08.2023 - Present

Responsibilities:

• Currently leading a greenfield Microsoft 365 security project - sole engineer designing and implementing the complete security posture for a new client: Entra ID, Intune policies, M365 configuration, SharePoint, Teams, and all endpoint security baselines from scratch, aligned with Microsoft Best Practices.
• Administration and support of core server infrastructure including VMware, Citrix StoreFront, NetScaler
• Built the company's Intune environment from scratch - device enrollment, Autopilot provisioning, Win32 app packaging, MDM/MAM policy creation, compliance baselines, and full integration with Entra ID and Defender for Endpoint.
• Automation of backup and disaster recovery using Veeam Backup & Replication and Cloud Connect
• Built automation workflows integrating Jira with SharePoint via Azure Functions - automated attachment handling, folder provisioning, and document management. Manage SharePoint backup to Azure with version control across multiple client sites.
• Performance monitoring, troubleshooting, and ensuring high availability across systems and services
• Azure infrastructure management: VMs, VNets, NSGs, VPN tunnels, IAM/RBAC, JIT access, Defender for Cloud integration, Log Analytics monitoring, and basic Terraform automation for hybrid cloud environments.
• Implementation of access control policies, SSO, and collaboration with cybersecurity tools
• Security audits for new client onboarding - assess existing posture against Microsoft Best Practices and design full security policy sets from scratch including Intune, M365, SharePoint, Teams, and endpoint security configurations.
• Participation in infrastructure modernization and integration of new technologies
• L3 escalation support - design, implementation, and complex troubleshooting for hybrid cloud environments. Delegate implementation to L2 where appropriate. Direct end-user and management communication including calls with US-based clients.

System Administrator, Altoverra, Ontario, Canada (IT Security & Development)

(01.2020 - 06.2023)

Responsibilities:

• Secured IT infrastructure across Azure, VMware, and Hyper-V: configured firewalls and VPNs (IPsec/SSL), implemented MFA and Azure AD Conditional Access policies, and automated security tasks with PowerShell.
• Managed and maintained Veeam backup solutions, planning and executing disaster recovery scenarios
• Supported development environments across Azure, VMware, and Hyper-V platforms
• Automated administrative and security tasks using PowerShell

System Administrator, Musson, Sunled, Live Stream, Kharkiv, Ukraine

(09.2018 - 01.2020)

Responsibilities:

• Windows Server administration, office interconnectivity, and end-user technical support
• Configured local network environments and maintained server performance

System Administrator, IT Group, Kyiv, Ukraine

(02.2010 – 08.2018)

Responsibilities:

• Managed Windows-based servers, domain infrastructure, and backup operations
• Provided helpdesk support, hardware diagnostics, and repair of office equipment

Service Engineer, Infokonsalting LLC, Donetsk, Ukraine

Responsibilities:

• Repair and maintenance of PCs and office equipment
• Performed hardware diagnostics, printer maintenance, and cartridge refilling

Education

• IT Systems and Office Equipment Support - State College of Industrial Automation.

Recommendations

• Nikita was an excellent person to have on my team. He's a hard working individual and he's always willing to learn new skills. Over the past few years he has matured significantly as a systems administrator helping us manage our hybrid cloud environment. - János D., Information Security Expert - direct supervisor at Altoverra (2020-2023)
• Nikita is a hard working and experienced IT professional. He consistently demonstrates his dedication and exemplary work ethic and is always eager to assist. Nikita will be a valuable asset to any organization that chooses to take advantage of his skills as he is well versed in many infrastructure areas of IT whether it is Windows, Linux, network and security, or cloud platforms such as Azure. - Serge L., IT and Security Services Engagement Partner - client stakeholder at Altoverra.