Thomas Caulier

Environment: Provided technical leadership for Microsoft platforms within a single global Azure tenant serving 30+ countries, approximately 2,000 users, 2,400 managed endpoints and 130 servers; validated solutions and defined group standards to improve consistency, security and scalability across the estate. Major Projects & Outcomes • Global Endpoint Modernization & Automation: Enabled end-to-end PC provisioning in under half a day and unified endpoint management for 2,400+ Windows devices across 30+ countries by designing and deploying Microsoft Intune from the ground up. Replaced fragmented, sometimes fully manual subsidiary builds with Windows Autopilot and centrally managed application deployment, compliance, Defender, Conditional Access, BitLocker, Attack Surface Reduction rules, Windows LAPS, Remediations and Windows Update for Business controls. • Business Continuity & Disaster Recovery: Reduced recovery risk and established repeatable disaster-recovery patterns by designing, implementing and testing two reusable Azure Site Recovery architectures: cross-region Azure recovery and Hyper-V-to-Azure recovery. Configured replication policies, executed test failovers and produced runbooks and technical documentation, validating readiness against business-defined RTO/RPO requirements. • Azure Platform & Network Modernization: Consolidated approximately 120 public DNS zones from multiple local providers into Azure DNS under a single operating model, simplifying administration and strengthening central control. Improved secure Azure service connectivity through Private Endpoint and Private DNS integration, while designing and operating the compute, storage, backup, monitoring and network services supporting the group platform. • Identity, Security & Information Governance: Reduced exposure from standing privileges and strengthened identity governance by implementing RBAC, PIM, Administrative Units, Dynamic Groups, Conditional Access, Access Reviews and Identity Protection in Microsoft Entra ID. Extended security and information-governance controls across the environment through the Microsoft Defender portfolio, Azure Key Vault and Microsoft Purview retention policies. • Azure Landing Zone for Olanet NEXT MES: Designed the Azure environment for deployment at Schréder Socelec’s Spanish plant, covering Azure VM and SQL Server infrastructure, network connectivity and firewall rules. Coordinated technical integration with Ibernova. • Secure Network & Wireless Transformation: Led the migration from the legacy SD-WAN and Zscaler stack to Cato SASE across eight subsidiaries, including critical manufacturing, logistics and office locations. Designed the solution, configured security policies and coordinated partners, cutovers and final validation within approved maintenance windows. Modernized wireless and branch connectivity by migrating the Cisco 5520 controller to Cisco 9800-CL in Azure and deploying Cisco Meraki solutions at smaller sites.

Administered and modernised Microsoft infrastructure services for the Belgian entities during their transition from traditional on-premises systems to Microsoft cloud and hybrid services. • Administered Windows Server, Active Directory, Group Policy, DNS, DHCP and Hyper-V environments. • Managed Microsoft Azure, Azure AD, Microsoft 365 and Exchange Online services. • Operated SCCM and WSUS for endpoint deployment, patching and lifecycle management. • Supported the adoption of Microsoft Teams collaboration and telephony services. • Contributed to infrastructure upgrades, cloud adoption initiatives and technical migrations. • Provided second- and third-line expertise for complex infrastructure incidents and projects.