Derek Blanchard

-Stand up brand new architecture in Microsoft Azure -Design and implement hub and spoke model -Deploy management groups, subscriptions and resource groups -Develop and implement naming standard for resources -Set up and configure service principal names for applications -Deploying resources both in Azure portal and Azure DevOps -Servers, storage accounts, event hubs, NSGs, networks, etc -Manage CI/CD pipeline and ARM templates -Create and deploy compliance policies. Such as requiring tags -Develop and implement design -Configure baseline NSG rules -Deploy NGFW for network security -Deploy Infoblox DNS and configure DNS on Azure Networks -Deploy resource groups and assign permissions for application teams -Deploy and manage access to key vaults -Deploy and manage App Services -Deploy and manage private endpoints for resources -Manage private DNS zones and their network links -Deploy and configure snadbox environment for POC activities -Configure log shipping to a SIEM from Azure AD -Create custom roles on resources -Work with teams and educate on new cloud technologies -Troubleshoot any outages that may occur -Notify organization if Microsoft has an outage -Setup federated authentication for Google cloud -Setup and configure directory sync from Azure AD to GCP -Tested network tool (Aviatrix) to manage all networks across multiple clouds -Helped develop the cloud road map for the company -Assisted in developing the minimum viable cloud model for company -Assist in designing cost management and charge back model -Assist in design and communication of request process for new cloud infrastructure and technology -Coordinated project with Microsoft and appropriate stakeholders to stand up cloud infrastructure -Setup and communicated process to request certain permissions to Azure resources

-Fulfill requests dealing with active directory group creation and user rights management -Create and manage server rights for users, service accounts and firecall accounts -Edit active directory attributes -Write powershell scripts to edit and report on active directory -Troubleshoot any authentication and LDAP issues -Manage security rights within Active Directory -Assist in domain controller upgrades -Install and configure AD connect application -Determine attributes to sync to Azure AD -Troubleshoot and configure connection from AD connect server to Azure -Create sync rules for AD connect -Create and manage Azure AD accounts and groups -Assign and manage Office 365 licenses -Manage Azure AD roles -Create Azure AD custom roles -Create and manage access packages for Azure AD -Assist setup of Office 365 -Exchange, Teams, Office Tools, PowerBI -Setup WS-Federation authentication for Azure AD with Ping Federate -Switch Azure AD authentication to pass through authentication -Configure and manage conditional access policies -Enable windows 10 machines to hybrid join Azure AD -Manage enterprise applications within Azure AD -Setup SAML connections to SaaS applications -Configure and enable PingID MFA to be used during authentication -Stand up and configure PingOne IDaaS -Set up federated connection between PingOne and PingFed -Configure MFA polices in PingID -Sync directory data from Azure AD to PingOne -Test passwordless authentication with subset of users -Document all processes and procedures -Create change records for anything newly implemented -Authentication

Computer Systems Major with Data Science, Business Administration and Psychology Minors

Hands on experience in carpentry, masonry and electrical construction - Gained experience in problem solving and value of teamwork

Maintained branches in westen New York, fixed desks, walls, ceiling grid, various repairs. Also managed the Amherst branch warehouse. Kept inventory and stocked travel center.

Distance Learning - Completed Liberal Art courses while participating in Junior Hockey programs