Mehdi FATOUAKI

• Implemented and optimized endpoint management solutions using Intune, SCCM, and Autopilot (co-management) • Led Windows 11 migration across enterprise environment, ensuring security and compliance alignment • Designed Cloud Management Gateway (CMG) architecture for secure remote device management • Implemented Windows Update for Business (WUfB) strategy to optimize patch management • Led Autopilot deployment to modernize and secure device provisioning • Contributed to Zero Trust implementation by strengthening endpoint and identity security controls • Ensured operational stability, performance, and security compliance (L3 support) • Collaborated with security teams to align endpoint and identity controls with Zero Trust principles

• Implemented Privileged Identity Management (PIM) and Conditional Access policies using Microsoft Entra ID • Contributed to strengthening identity security by enforcing MFA and access control strategies • Supported the implementation of Zero Trust principles for identity and access management

• Conducted security assessments and defined remediation strategies aligned with CIS and DISA STIG standards • Designed and implemented Identity & Access Management (IAM) solutions using Microsoft Entra ID (MFA, Conditional Access, SSPR) • Defined and deployed Conditional Access policies aligned with Zero Trust principles • Designed endpoint security and compliance architecture using Microsoft Intune and Defender • Led migration of Group Policy (GPO) to Intune, defining modern device management strategy • Implemented vulnerability remediation strategies using SCCM, Intune, and security tools • Designed and deployed Windows Autopatch strategy to automate OS and application updates • Led Autopilot deployment with hybrid Azure AD join for enterprise environments • Conducted cloud transformation projects from on-premises to Microsoft 365 • Developed automation scripts (PowerShell) to improve operational efficiency and security posture

Modern Workplace Engineer • Implemented endpoint management solutions using Microsoft Intune in co-management with SCCM • Deployed Microsoft Defender for Endpoint to enhance device security posture • Contributed to identity migration from on-prem Active Directory to Azure AD (Entra ID) • Led data and collaboration migrations to Microsoft 365 (Exchange, OneDrive, SharePoint) • Implemented Microsoft Teams telephony solutions (Calling Plan, Auto Attendant, Call Queues) • Supported backup and recovery solutions using Veeam for Microsoft 365

As an IT helpdesk professional, I was a member of a dynamic team of three individuals who collaborated to provide exceptional L1 and L2 support to over 4000 end-users. My responsibilities included overseeing and managing access to company resources, troubleshooting software and hardware issues, as well as providing remote technical support via email, phone, or video conferencing. Some of the main responsibilities I had were: Processing request and incident tickets for Level 1 and 2 IT support Managing access to AD, file servers, and Office 365 (Sharepoint, Exchange) Creating VMs on the Azure portal Managing SonicWall anti-spam server.

• Maintain, troubleshoot, repair and administer local area networks (LANs), wide area networks (WANs), mainframe networks, computer workstations, connections to the Internet and peripheral equipment • Evaluate and install computer hardware, networking software, operating system software and software applications • Operate master consoles to monitor the performance of computer systems and networks and to co-ordinate access and use of computer networks • Provide problem-solving services to network users • Install, maintain, troubleshoot and upgrade Web-server hardware and software