Marc Henri Nelson

Microsoft / *ffice *** Engineer

Phone: 602-***-**** Email: ad148b@r.postjobfree.com

PROFILE SUMMARY

I am a seasoned IT professional with over 16 years of technical expertise, boasting nearly 13 years of proficiency in implementing, migrating, and managing Microsoft/Office 365 solutions, encompassing Active Directory, Exchange, SharePoint, OneDrive, and Teams. Key competencies include:

•Messaging Infrastructure Expertise: Skilled in configuring and deploying messaging server infrastructures in highly available scenarios through clustering, DAG, load balancing, pools, and pool pairing.

•Cloud Integration Specialist: Extensive knowledge and hands-on experience with SaaS applications, including Exchange, Teams, OneDrive, and SharePoint. Expertise in private and public cloud integrations and transitions.

•On-Premises Solutions Architect: Proven ability to design and deploy on-premises solutions, with a focus on Azure, Exchange Online, and Office 365 coexistence and migration.

•Migration Experience in Microsoft Teams: Specialize in guiding organizations through transformative journeys, covering assessments, user adoption strategies, content migration, and seamless integrations for enhanced productivity.

•Migration Experience to Teams from Other Collaboration Tools: Specialize in seamless transitions to Microsoft Teams, excelling in holistic data migration and designing targeted training programs to support users in adapting to the new interface.

•High Availability and Disaster Recovery: Design and implementation of high availability and disaster recovery solutions for messaging infrastructure using technologies such as CCR, SCR, and DAG.

•Security Infrastructure Configuration: Hands-on experience in configuring firewalls, networks, and perimeter applications for security, including platforms such as Barracuda, Meraki, IronPort, and Proofpoint.

•Authentication Configuration: Expertise in configuring single sign-on, seamless sign-on, token authentication, and passthrough/password authentication. Proficient in configuring and verifying Active Directory Federation Services as primary domain sources.

•Enterprise Services Configuration: Configuration of DHCP, DNS, WSUS, and DFS services in enterprise environments.

•Active Directory Management: Thorough understanding of Active Directory DC design, schema, OU design, AD replication topology, and DC backup/restore procedures. Experience in managing Active Directory, Microsoft Identity software (ILM, FIM, MIM), Azure AD Connect, and ADFS.

•Monitoring and Alerting: In-depth knowledge of server monitoring tools and utilization of SCOM for monitoring and alerting. Familiarity with the Service Center for task allocation and approval.

•Change Management and ITIL Processes: Knowledgeable about change management and ITIL processes for incidents, change, and requests.

•Virtualization Expert: Experience with virtualization deployment and management via VMware, V-Sphere, and Hyper-V.

•Customer Interaction and Requirements Management: Proven ability to interact with customers and stakeholders to analyze, validate, specify, verify, document, and manage requirements.

•Networking Protocols and Components: Applied knowledge of networking protocols and components, including TCP/IP, DNS, SIP, MAPI, and SMTP.

•Troubleshooting Expertise: Proven ability to troubleshoot technical issues across Exchange and Windows O365, showcasing a strong technical aptitude and excellent communication skills.

I bring a wealth of technical expertise, a strategic approach to system architecture, and a commitment to delivering secure, efficient, and highly available IT solutions in a dynamic enterprise environment.

TECHNICAL SKILLS

Exchange:

DAG, CAS ARRAYS, Load Balancing, Continuous Cluster Replication (CCR), Standby Cluster Replication (SCR), Local Copy Replication (LCR), Hub Transport Server, Exchange management console (EMC)), Transport pipeline, Managed Availability, Exchange Admin Center (EAC), Outlook Web App (OWA)/Outlook On the Web (OOTW) for 2016, Exchange Online Protection (EOP), Exchange Admin Center (EAC), Active Directory Federation Services (ADFS), DirSync, Azure AD Connect, Hybrid, Staged, Cutover

Protocols:

TCP/IP, DNS, SIP, MAPI, SMTP, DHCP/ DNS/ VPN/ TCP/IP, POP, IMAP

Administration:

Email Services, User management, Permissions and authentication, Managed Availability, Critical Access, Mobile Device Management, Exchange Aware Proxy Server, Storage LDAP, Domain Management, Load Balancing, Database availability, Role-based access control, Namespaces, Requesters, Migration, Registry management and editing, Disaster Recovery, Backup Restore, Coexistence, Process Testing, Policy Administration, Distributed Groups, Dynamic Groups, Identity Management

Servers:

Microsoft Exchange Server 2007, 2010, 2013, 2016/Exchange Online/Office 365/Outlook Web App (OWA), Windows Server 2008R2, 2012R2, Windows Server 2019, 2016 Microsoft PowerShell 5.0, 4.0, Microsoft Active Directory, Lync Server, Hub Transport Server, Oracle Virtual Box, Virtual Machine, Microsoft Hyper-V, CAS Servers, Mailbox Servers, Client Access Server, Edge server, Dial-In/Dial-Out, Lync Online, Front End Server, Back End Server, Director Server, Mediation Server, Proxy Server, Cloud Servers

Tools:

Database Availability Group (DAG), DAC Mode, CAS Array, Exchange management console (EMC), PowerShell scripting, Visual Basic Scripting, Microsoft ADFS, DirSync, SCCM and SCOM, Microsoft Identity software (ILM, FIM, MIM, ILM 2007 to MIM 2016), Azure AD Connect and ADFS, Microsoft Federation

Virtualization:

VMWare/vSphere, VirtualBox, Microsoft Hyper – V

PROFESSIONAL EXPERIENCE

Arizona State University, Tempe Arizona June 2022 – Present

Sr. Microsoft O365 Cloud Engineer Expert

(Arizona State University (ASU), stands as a prominent public research university in the Phoenix metropolitan area. Recognized as one of the largest public universities in the United States, ASU boasts significant enrollment numbers.)

•Led the comprehensive design, implementation, and secure operation of Microsoft Azure and Office 365 cloud solutions, ensuring seamless integration into the infrastructure.

•Successfully migrated 10 colleges to Teams Only, designed Teams Phone solutions, and configured 1,500 Teams-certified devices.

•Orchestrated seamless transitions through migration tasks, mastered third-party migration tools, and designed conditional access policies with MFA.

•Mentored IT administrators on Office 365 and Azure, sharing insights to enhance their roles, and engaged in consultations to improve application lifecycles.

•Collaborated with multiple CIS teams and external vendors, swiftly resolving complex incidents within the hybrid Office 365 stack.

•Addressed and resolved Office 365 issues across university entities, providing expert support to Staff, Faculty, Students, and Retirees.

•Programmed PowerShell scripts for Active Directory and Exchange configuration and automation.

•Created and maintained critical documentation, responded to litigation requests, and served as an escalation resource for the CIS Collaboration Team.

•Installed Azure AD Connect and configured it to synchronize Active Directory credentials with 0ffice 365 tenant on the cloud.

•Supervised direct routing implementation, designed baseline security requirements, crafted custom security policies, and managed eDiscovery requests.

•Designed RBAC and tags, streamlining device enrollment and management for over 30,000 devices.

•Used IDFix Tool to detect and correct issues on Active Directory before the migration.

•Matched the Primary SMTP Address with the new UPN using scripts on the Active Directory.

•Created PowerShell scripts to change the UPN for multiple groups of users on the Active Directory.

•Configured PowerShell Scripts to automate processes and tasks.

•Led the architecture of the university's MDM framework, collaborated with Microsoft Intune Engineers for ASU implementation, and facilitated extensive training for administrators.

The Villages, Central Florida Dec 2020 – May 2022

Sr. Microsoft Cloud Engineer

(The Villages HYPERLINK "https://www.bing.com/ck/a p=ee7e1658de30795dJmltdHM9MTcwMDI2NTYwMCZpZ3VpZD0wYWUwZTU1ZC05NGVlLTZlZTQtM2Q3Ni1mNzFkOTUxYzZmZjcmaW5zaWQ9NjI4MQ&ptn=3&ver=2&hsh=3&fclid=0ae0e55d-94ee-6ee4-3d76-f71d951c6ff7&psq=Where+is+The+Villages+located+in+USA&u=a1aHR0cHM6Ly90aGV2aWxsYWdlc2Zsb3JpZGEuY29tLw&ntb=1"is a HYPERLINK "https://www.bing.com/ck/a p=ee7e1658de30795dJmltdHM9MTcwMDI2NTYwMCZpZ3VpZD0wYWUwZTU1ZC05NGVlLTZlZTQtM2Q3Ni1mNzFkOTUxYzZmZjcmaW5zaWQ9NjI4MQ&ptn=3&ver=2&hsh=3&fclid=0ae0e55d-94ee-6ee4-3d76-f71d951c6ff7&psq=Where+is+The+Villages+located+in+USA&u=a1aHR0cHM6Ly90aGV2aWxsYWdlc2Zsb3JpZGEuY29tLw&ntb=1"large retirement community in central Florida).

•Managed mailbox and user data migration to O365, preparing the on-prem Active Directory with IDFix and PowerShell scripts.

•Migrated user data to OneDrive, tested mail flow and authentication with Azure and AD, and classified data for labeling.

•Enabled Teams for users, transitioned accounts from Skype to Teams, and tested Azure VM creation.

•Set data policies in SharePoint, tied permissions to security groups, and automated group memberships. Established SharePoint and OneDrive data policies, managed distribution lists and O365 groups, and configured e-Discovery search and free/busy sharing.

•Ensured security through Azure Information Protection, VPN connectivity, and EOP services.

•Implemented Azure Sync, Threat Protection, Information Protection, and conditional access rules (network location, device compliance, MFA).

•Managed permissions in OneDrive and SharePoint, followed incident response procedures, and troubleshooted hybrid deployment connectors.

•Reviewed and enhanced email security settings, conducted threat analytics, and performed advanced threat hunting and investigations on malicious activities.

•Conducted threat investigations on malicious emails, links, and attachments, ensuring a secure and compliant environment.

Hewlett-Packard, Palo Alto, CA Jul 2018 – Nov 2020

Microsoft Teams Architect

(HP Inc. is an American multinational information technology company headquartered in Palo Alto, California, that develops personal computers (PCs), printers & related supplies, as well as 3D printing solutions.)

HP Inc., is an American Multinational Information Technology Company headquartered in Palo Alto, CA,

•Calculated network bandwidth for Microsoft Teams functions, specified outbound network ports, and determined recommendations for WAN optimizer, proxy, and load balancer usage.

•Configured Tenant Data Upload in Microsoft Call Quality Dashboard and identified licensing requirements for compliance, lifecycle management, guest access, calling, Microsoft Teams Rooms, Common Area Phones, and apps.

•Set up policies for Microsoft 365 Groups, configured expiration and naming policies, and established reporting labels for Teams.

•Managed organizational-level sharing settings for SharePoint and OneDrive, configured meeting policies, and applied security and management policies.

•Selected threat policies and administration roles planned retention policies and sensitivity labels and implemented Data Loss Prevention (DLP) policies.

•Managed Azure AD access reviews executed bulk user operations with PowerShell and handled external file-sharing settings for SharePoint.

•Managed guest users and configured guest access for Microsoft Teams, planned & configured emergency services, and troubleshooted issues using Call Analytics and Azure AD sign-in logs.

Chevron Corporation, San Ramon, CA May 2015 – Jun 2018

Exchange Engineer

(Chevron Corporation, an American multinational energy giant, focuses predominantly on oil and gas. As the second-largest direct descendant of Standard Oil, it was originally known as the Standard Oil Company of California.)

•Led design and implementation of Microsoft Windows and Exchange farms, updating servers and virtual environments for seamless connection between Exchange 2013 and 2016 in preparation for migration.

•Configured highly available messaging server infrastructures through clustering, DAG, load balancing, pools, and pool pairing.

•Developed custom PowerShell scripts for automation, leveraging PowerShell in Exchange and Skype-for-Business environments.

•Implemented critical roles in Microsoft Exchange environment, including Edge Transport and Mailbox.

•Expertly resolved Office 365 tasks using PowerShell, created and tested batches for Exchange migration.

•Ensured Azure Active Directory Connector & server alignment with the internal Active Directory domain.

•Applied expertise in networking protocols and components (TCP/IP, DNS, SIP, MAPI, SMTP) and demonstrated proficiency in Office 365 migrations and hybrid solutions.

•Efficiently resolved tenancy technical issues, automated Office 365 procedures with PowerShell, and crafted policies for Skype-for-Business online in O365.

•Played a key role as an SME, facilitating continuity of service for the user community by acting as a liaison between operations, helpdesk, and networks.

•Navigated Exchange Management Console and Exchange Management Shell for seamless system management, showcasing a comprehensive skill set in ensuring the continuity and efficiency of diverse Microsoft environments.

Freddie Mac, Tysons, Virginia Jan 2013 – Apr 2015

Messaging Engineer

(Freddie Mac, officially the Federal Home Loan Mortgage Corporation (FHLMC), is a publicly traded government-sponsored enterprise (GSE) based in Tysons, Virginia.)

•Administered and fortified the Exchange 2010 environment for optimal end-user functionality.

•Implemented a Database Availability Group (DAG) for high availability of mailbox databases.

•Provided Level I and Level II IT support on-site and created PowerShell scripts for efficient querying of AD distribution groups.

•Conducted monthly database maintenance to ensure health and functionality.

•Ensured uninterrupted communication channels through regular maintenance of telephone systems. Managed user accounts, security groups, and organizational units, configuring transport rules for compliance and key staff requests.

•Utilized DNS, DHCP, and WSUS for modifications, collaborating closely with the firewall team.

•Conducted troubleshooting to address complex technical issues arising from hardware limitations, services, GPOs, and misconfigurations.

•Configured Threat Management Gateway (TMG) for enhanced internal network protection and actively participated in projects and equipment/software testing for future deployment.

•Identified and repaired computer equipment, printers, communication devices, providing monitoring and diagnostics for computer & network equipment.

•Contributed to the purchasing process for computers & communications equipment, installed and configured specialized software, and configured PBX voice gateway for media traversal into the internal network.

Cigna Group, Bloomfield, Connecticut Nov 2010 – Dec 2012

Exchange Administrator

(Cigna Group is a for-profit American multinational managed healthcare and insurance company headquartered in Bloomfield, Connecticut.)

•Managed Windows Server 2008 and 2012, overseeing Exchange 2007/2010 systems, including user mailboxes, security groups, shared access, delegation, and permissions.

•Installed configurations for Exchange Online & Lync online on client machines, facilitating email migrations.

•Configured & implemented Directory Synchronization, Forefront, providing troubleshooting support.

•Established DirSync and ADFS for Active Directory synchronization and single sign-on with Office 365.

•Deployed new Anti-Malware policies for System Centre Endpoint Protection (SCEP)

•Utilized SharePoint for maintaining backup & migration process improvement feedback for Office 365 Managing Distribution Lists.

•Maintained clustered server scenarios via CCR/SCR, ran reports, and performed validation checks.

•Executed mailbox migrations from Exchange 2007 to Exchange 2010, conducted user training on Microsoft Outlook 2010 post-deployment, set up voice policies as per company requirements, and supported end users & server-related issues in Lync 2010 environment with a single front-end pool.

•Conducted a feasibility analysis on the existing monitoring tools for the ground system and determined their impracticality. Explored new tools to address gaps and delved into the MySQL database for additional information.

•Created a Product Tracker, offering operators a graphical summary and delivery details for verification across external interfaces.

•Provided support for Productivity Tool Development and Engineering to the Data Operations Support Team, including performing comprehensive product counts using Python to ensure the ground system's proper functionality.

•Utilized Python and Bash scripting to extract delivery status from the database and present results to operators in a concise, clear, and color-coded format.

•Developed a Python-based image down-sampling tool, reducing JPEG image sizes from 2 gigabytes to 100 megabytes. This enhancement enabled operators to conduct product quality checks in just 5 minutes, a significant improvement from the previous 5-hour process.

J&H COMPUCELL, Spring Valley, NY Jan 2007 – Oct 2010

Computer & Cell Phone Technician

(COMPUCELL LLC is a company that operates in the Internet industry)

•Proficiently managed installation, maintenance, and troubleshooting of intricate internal computer hardware alongside diverse software applications.

•Demonstrated adeptness in swift application development, effectively addressing technical challenges within assigned projects, resulting in high customer satisfaction for delivered software solutions.

•Evaluated system software and hardware, recommending enhancements to diminish latency and enhance overall system performance.

•Implemented software patches and updated versions to mitigate security vulnerabilities and safeguard critical data.

•Provided responsive support to end-users, guiding them patiently through basic troubleshooting procedures.

•Conducted seamless installation and configuration of operating systems and applications.

•Executed comprehensive removal of malware, ransomware, and other potential threats from desktops and laptops.

•Effectively tackled a wide array of technical issues spanning multiple systems and applications for customers and end-users across various time zones.

EDUCATION

Bachelor’s in computer information system security from DeVry University - New York, NY

Associate Degree in Computer Information System from Rockland Community College - Suffern, NY

Contact this candidate