Demarco Wiggins – Azure Architect

301-***-**** ad4rij@r.postjobfree.com Atlanta, Ga.

Microsoft Certified Solutions Associate

Microsoft Certified Professional

Professional Summary Century

Experienced IT Professional with over 17 years in the IT industry.

Azure Architect with 6+ yrs. experience

.Net Architect with 2+ yrs. exp.

Hands-on experience with Azure App Services, Azure Serverless, Microservices on Azure, AKS, Docker, API Management, Azure Storage, Key Vaults and Application Insights, Azure Job.

Experience with Automated Deployment and Scripting for Azure CI / CD, VSTS, Github, YAML.

Experience working with Azure Container Instances, Azure Service Fabric, and Azure

Kubernetes Service.

Experience planning, configuration, optimization and deploying Microsoft Azure solutions Azure IaaS and PaaS components – VM, SQL, User Defined Routes, VNET, ARM, Storage Blob, ExpressRoute, VPN, App Services, OMS, Azure Site Recovery, Azure Backup, Key Vault, Azure Load Balancer, Application Gateways, Availability Sets, Scale Sets, Azure Active Directory, Automation, Network Monitor, Security Center).

Automation in the Cloud, including Azure Resource Manager templates, Azure Automation, Terraform, Infrastructure As Code.

Hands-on experience on writing and understanding complex SQL(Hive/PySpark-dataframes), optimizing joins while processing huge amount of data.

Ability to design and develop optimized Data pipelines for batch and real time data processing

Experience in designing and building solutions using Kafka streams and queues.

Deep experience in Azure Synapse Analytics, Azure Data Factory (ADF), Azure Data Brick, Azure SQL, Azure Data Lake Storage / Analytics, Spark SQL & PySpark.

Developed data catalogues, managed inbound and outbound data transformation, and modernized legacy data analytics processes using modern technology and methods.

Knowledge in older integration and storage tools is beneficial (MS SQL Server, MS SSIS, IBM DataStage, etc.)

Experience with CI/CD pipelines, branching strategies, & GIT for code management.

Implementation and tuning experience of Data Warehousing platforms, including knowledge of Data Warehouse Schema Design, Query Tuning and Optimization, and Data Migration and Integration.

Experience with NoSQL databases, such as HBase, Cassandra, MongoDB.

Implementation and Performance tuning experience on Traditional Data Warehouse, Hadoop & Cloud Ecosystem, including Hadoop Streaming, Spark, Pig and Hive.

Software Installation and Configuration on Azure VMs that are used for Application Developments Visual Studio, SQL Server.

Experienced with VM Build & Management from VHD, establishes policy and ability to create policy.

Experienced with Azure PaaS Configuration, Cost Calculation and Administration of Azure Resources.

Migrated on Premises servers and applications to Azure using Azure Site Recovery, Asure Resource Manager (ARM), Azure Kubernetes Service (AKS), Terraform, Bicep, Bash, Powershell, and Azure CLI.

Expertise in designing High Availability, Security, Disaster Recovery, Backup and retention architectures on Azure.

Knowledge and experience with working on PowerShell, Azure CLI, JSON, XML, Yaml, and Bash.

Ability to propose the right target state on Azure considering cost, performance, and security.

Experience in implementing continuous integration and continuous delivery for Azure.

Good knowledge of Microsoft Azure, Cloud Services, Azure Storage, and Azure performance optimization.

Concentration of experience in Microsoft Exchange technologies (Exchange 2003, 2007, 2010, 2013, 2016, 2019) as well as Office 365 and Microsoft Lync 2010, 2013, and 2015.

Active Directory used to manage user tasks and PowerShell scripting to automate management of Exchange email system and daily tasks on Windows servers.

Versed in leading full-scale migrations to newer versions of Microsoft messaging technologies such as Microsoft Exchange and Microsoft Lync/Skype for Business.

Adept and planning, configuring, deploying, and supporting large-scale deployments of Microsoft Exchange and Microsoft Lync/Skype for Business utilizing Microsoft hyper V for virtual environments as well as Active Directory and PowerShell.

Experience deploying virtual servers using both Microsoft Hyper V and VMWare ESX/ESXi platforms.

Proven experience implementing high availability solutions for Microsoft Exchange and Lync or Skype for Business.

Vast experience troubleshooting and resolving both client and server-side issues in Windows server networks and Microsoft Exchange email and messaging systems.

Successfully deployed and transitioned Microsoft Lync deployments to newer versions such as Skype for Business.

Knowledgeable of Office 365 deployment models and best practices.

Experience with Office 365 migrations and hybrid solutions which take advantage of cloud

Experience assisting migrations using Active Directory and PowerShell

Well-versed in configuring, maintaining and deploying Windows Servers (2000, 2003, 2008, 2012 and 2016).

Skilled at the installation and configuration of hardware and software components of networking environments including Cisco routers and switches, firewalls and VPNs.

Proficient in message tracking and troubleshooting to resolve mail delivery issues.

Experience monitoring message queue and performing Exchange backup and restore.

Implemented Mobile Device Management and conditional access policies via Azure and Intune.

Technical Skills

Servers

Exchange 2003-2019

Lync Server 2010-2013

Lync Server 2015/Skype-for-Business

Windows 2000 – 2016 R2

SQL Server 2000 – 2014

IIS

Unix, Redhat Linux

DHCP

DNS

Cloud Platforms

Office 365

Exchange Online

Azure

AWS

GCP

Scripting

PowerShell

Javascript

.NET

HTML

JSON

Terraform

YAML

Hashicorp

Azure CLI

Virtualization

HyperV

VMware

VSphere

ESXi

Utilities

Azure AD Connect

Symantec Backup Exec

Active Directory

PowerShell

Azure Active Directory

ADFS

Database

Oracle 9i, 10g,

Access

SQL, MySQL

Azure SQL

Azure Data Lakes

Azure Data Bricks

Azure Data factory

Azure Synapse

Hadoop

Spark

Desktops

Microsoft Office Suites 2003 – 2016

Windows XP – 8 - 10

Network & Telecomm

TCP/IP v4 & 6

OSPF

EIGRP

RIP

STP

VLANS

STP

DMVPN

Ethernet

Sonic-Wall

Solaris

FTP

DNS

DHCP

AD

SSL

Work Experience

Azure & Office Architect January 2023 – November 2023

NTT Data Remote

Design and architect Azure infrastructure solutions based on business requirements and best practices, ensuring scalability, reliability, and security.

Configured and managed Azure networking components, such as Azure Virtual Network, VPN gateways, load balancers, Azure Firewalls, Azure Traffic Manager, Site-to-Site VPN’s, and ExpressRoute.

Implemented Web Application Firewall (WAF) deployment, configured rule sets for Azure Front Door and Application Gateway, and Web Application Firewall Policies.

Implemented and managed Azure Active Directory (AAD) and identity management solutions, ensuring secure access control and authentication for Azure resources and applications.

Defined and enforced Azure security and compliance best practices, implementing measures such as Azure Security Center, Sentinel, Azure Policies, and Azure Firewall to safeguard resources and data.

Monitored and troubleshooted Azure infrastructure performance, identifying and resolving issues related to performance, availability, and resource utilization using Azure Monitor and Application Insights.

Planned and implemented Azure resource deployments and migrations utilizing Azure Resource Manager (ARM) templates, Terraform, Bicep, PowerShell, and Azure CLI.

Implemented backup and disaster recovery strategies for Azure resources, ensuring data protection and business continuity.

Implemented Azure Cosmos DB, Azure SQL Databases, and Azure SQL Database Managed Instances.

Planned and Implemented Microsoft Technologies not limited to Azure AD, AD Connect, ADFS, RBAC policy in Azure AD, SSPR in Azure, and MFA using Conditional Access policy in Azure AD.

Build and supported CICD Pipelines, Azure DevOps, Git Actions.

Designed and implemented provisioning of production-grade Azure PaaS services including Azure Data Factory, Azure Databricks, Azure Kubernetes Services (AKS).

Defined and implemented infrastructure migration methodologies and techniques to migrate workloads into Azure.

Planned and managed Replication and Disaster Recovery using Azure Site Recovery.

Azure & Office365 Architect September 2020 – September 2022

National Institute of Health Bethesda, Md.

Worked with stakeholders to understand business requirements and translate them into technical solutions.

Configured and managed Azure networking components, such as Azure Virtual Network, VPN gateways, load balancers, Azure Firewalls, Azure Traffic Manager, Site-to-Site VPN’s, and ExpressRoute.

Confirmed vWAN setup and functionality including routing and ExpressRoute authorizations.

Ensured DNS is configured for the Azure environment and a DNS forwarder is deployed in Azure which connects to on-premises.

Implemented Web Application Firewall (WAF) deployment, configured rule sets for Azure Front Door and Application Gateway, and Web Application Firewall Policies.

Implemented and managed Azure Active Directory (AAD) and identity management solutions, ensuring secure access control and authentication for Azure resources and applications.

Implementation of CI/CD pipelines using GitHub, and Azure DevOps.

Defined and enforced Azure security and compliance best practices, implementing measures such as Azure Security Center, Sentinel, Azure Policies, and Azure Firewall to safeguard resources and data.

Configured Network Security Groups (NSGs), Application Security Groups (ASG), User Defined Routes (UDR), Route Filtering, and Border Gateway Protocol (BGP).

Monitored and troubleshooted Azure infrastructure performance, identifying and resolving issues related to performance, availability, and resource utilization.

Planned and implemented Azure resource deployments and migrations utilizing Azure Resource Manager (ARM) templates, Terraform, Bicep, PowerShell, Bash, and Azure CLI.

Implemented backup and disaster recovery strategies for Azure resources, ensuring data protection and business continuity.

Implemented Azure Cosmos DB, Azure SQL Databases, and Azure SQL Database Managed Instances.

Upgraded to Microsoft plans, implementing critical security features such as Azure Information Protection.

Utilized Microsoft 365 compliance and security features Data Loss Protection (DLP), Information Protection, and eDiscovery.

Utilized Microsoft 365 to monitor and track the process of litigation holds, ensuring timely and accurate adherence to legal requirements.

Implementation of Azure Key Vault and Managed Digital Certificates.

Creation of Private Endpoints and Service Endpoints for PAAS Services.

Planned and Implemented Microsoft Technologies not limited to Azure AD, AD Connect, ADFS, RBAC policy in Azure AD, SSPR in Azure, and MFA using Conditional Access policy in Azure AD.

Create Azure Active Directory Cloud Only and On-Premises Active Directory Sync Groups and corresponding Azure AD & Azure Resource Role Mappings.

Planned the deployment of Virtual Machines including Scale Sets, in a Linux/Windows Environment.

Design and implement provisioning of production-grade Azure PaaS services including Azure Data Factory, Azure Databricks, and Azure Kubernetes Services (AKS).

Defined and implemented infrastructure migration methodologies and techniques to migrate workloads into Azure.

Planned and managed Replication and Disaster Recovery using Azure Site Recovery.

Expert understanding of Exchange Components: (Exchange Database, Outlook Web Access, Offline Address List, Mail Flow, Public Folders, Free/Busy)

Implemented Office 365 security, governance, compliance, e-discovery and encryption.

Created DLP policies, email protection, and managed traffic flow.

Designing, implementing, and supporting Microsoft 365 technologies, including Azure AD, SharePoint Online, Teams, and Exchange Online.

Provided operations and Tier III support for Office 365 (SharePoint, Skype, Exchange, OneDrive, O365 Groups, Planner, Teams, OneNote, Azure AD, project sites, BI sites), Google Cloud, and Google Suites (Gmail, Sites, Docs, Hangouts, OneDrive, Vault) for 5,000+ end users using internal ticketing system ServiceNow.

Responsible for implementing email filtering, DNS, SPF/DKIM/DMARC, including cloud-based email threat prevention platforms and associated procedures and policies.

Monitored and troubleshooted Azure infrastructure performance, identifying and resolving issues related to performance, availability, and resource utilization using Azure Monitor and Application Insights.

Azure Architect January 2020 – April 2020

IIVI Aerospace & Defense Murrieta, CA

Design and architect Azure infrastructure solutions based on business requirements and best practices, ensuring scalability, reliability, and security.

Configured and managed Azure networking components, such as Azure Virtual Network, VPN gateways, load balancers, Azure Firewalls, Azure Traffic Manager, Site-to-Site VPN’s, and ExpressRoute.

Implemented Web Application Firewall (WAF) deployment, configured rule sets for Azure Front Door and Application Gateway, and Web Application Firewall Policies.

Planned and implemented Azure resource deployments and migrations utilizing Azure Resource Manager (ARM) templates, Terraform, Bicep, PowerShell, Bash, and Azure CLI.

Implemented backup and disaster recovery strategies for Azure resources, ensuring data protection and business continuity.

Defined and enforced Azure security and compliance best practices, implementing measures such as Azure Security Center, Sentinel, Azure Policies, and Azure Firewall to safeguard resources and data.

Implemented and managed Azure Active Directory (AAD) and identity management solutions, ensuring secure access control and authentication for Azure resources and applications.

Creation of Private and Service Endpoints for PAAS Services.

Azure Architect November 2018 – October 2019

K-Force Los Angeles, CA

Planned and implemented Azure resource deployments and migrations utilizing Azure Resource Manager (ARM) templates, Terraform, Bicep, PowerShell, Bash, and Azure CLI.

Configure and manage Azure networking components, such as ExpressRoute, Site to Site VPN, Azure Virtual Network, VPN gateways, load balancers, Azure Front Door, and Application Gateways to establish secure and optimized connectivity.

Confirmed vWAN setup and functionality including routing and ExpressRoute authorizations.

Ensured DNS is configured for the Azure environment and a DNS forwarder is deployed in Azure which connects to on-premises.

Implemented Web Application Firewall (WAF) deployment, configured rule sets for Azure Front Door and Application Gateway, and Web Application Firewall Policies.

Creation of Private Endpoints and Service Endpoints for PAAS Services.

Planning and configuration of App Service Plans, Logic Apps, and Function Apps.

Planning and Implementation of Microsoft Identity Manager, Microsoft Azure MFA, RBAC, and

Microsoft Azure SSPR.

Architecture and migration of SQL databases to Azure.

Application migration using Azure Site Recovery, lift and shift, and rebuild.

Implemented Office 365 security, governance, compliance, e-discovery and encryption.

Created DLP policies, email protection, and managed traffic flow.

Upgraded to Microsoft plans, implementing critical security features such as Azure Information Protection.

Utilized Microsoft 365 compliance and security features Data Loss Protection (DLP), Information Protection, and eDiscovery.

Utilized Microsoft 365 to monitor and track the process of litigation holds, ensuring timely and accurate adherence to legal requirements.

Administered Proofpoint to trace email delivery, check message headers, quarantine emails, whitelist email addresses.

Implemented video conferencing solution with Skype for business online with internal and external customers.

Adding and removing storage accounts, disks, blobs, virtual disks, adjusting quotas, disk sizing, attaching, and detaching disk.

Adding and removing virtual instances to Azure Backup, checking validity of backup results, restore and recovery operation and testing.

Provided operations and Tier III support for Office 365 (SharePoint, Skype, Exchange, OneDrive, O365 Groups, Planner, Teams, OneNote, Azure AD, project sites, BI sites), Google Cloud, and Google Suites (Gmail, Sites, Docs, Hangouts, OneDrive, Vault) for 5,000+ end users using internal ticketing system ServiceNow.

Microsoft Azure and Office365 Architect June 2018 – September 2018

USTech Solutions Pleasanton, CA

Architecture and configuration of ExpressRoute circuits, Site to Site VPN, and Virtual Gateways

To connect on Premises network with Azure.

Knowledgeable of cloud and hybrid-cloud implementations including IaaS, PaaS and SaaS.

Planned and implemented Azure resource deployments and migrations utilizing Azure Resource Manager (ARM) templates, PowerShell, Bash, and Azure CLI.

Planned and implemented Microsoft complementary technologies such as Active Directory Federation Service, Azure AD, Azure Active Directory Connect via PowerShell.

Troubleshooted shared mailbox’s, forwarding, delegate permissions, and calendaring for end users.

Implemented video conferencing solution with Skype for business online with internal and external customers.

Provided expert-level onsite and/or remote support services with specialized skills in Microsoft Intune, Microsoft MFA (Multifactor Authentication), Advanced Azure IAAS management & administration.

Provided operations and Tier III support for Office 365 (SharePoint, Skype, Exchange, OneDrive, O365 Groups, Planner, Teams, OneNote, Azure AD, project sites, BI sites), Google Cloud, and Google Suites (Gmail, Sites, Docs, Hangouts, OneDrive, Vault) for 250,000+ end users using internal ticketing system ServiceNow.

Administered Proofpoint to trace email delivery, check message headers, quarantine emails, whitelist email addresses.

Created and administered Conference Rooms, Shared Mailboxes, and Distribution List in Lotus Notes using PowerShell.

Knowledge of DNS, Message Trace Tools, MX and SPF Records, Block Lists, SPAM, Email Filtering and Virus Protection.

Microsoft Azure and Office365 Architect March 2017 – May 2018

University of Southern California Los Angeles, CA

Provided operations and Tier III support for Office 365 (SharePoint, Skype, Exchange, OneDrive, O365 Groups, Planner, Teams, OneNote, Azure AD, project sites, BI sites), Google Cloud, and Google Suites (Gmail, Sites, Docs, Hangouts, OneDrive, Vault) for 100,000+ end users using internal ticketing system ServiceNow.

Migrated about 4000 users to Office365, administered Office 365 (SharePoint, Skype, Exchange, OneDrive, Office 365 Groups, Planner, Teams, OneNote, Azure AD, project sites, BI sites. Google Cloud and Google Suite (Gmail, Sites, Docs, Hangouts, OneDrive, Vault).

Provided expert-level onsite and/or remote support services with specialized skills in Microsoft Identity Manager (MIM / FIM), Microsoft Intune, Microsoft MFA (Multifactor Authentication), Advanced Azure IAAS management & administration.

Implemented Office 365 security, governance, compliance, e-discovery and encryption.

Created DLP policies, email protection, and managed traffic flow.

Administered Proofpoint to trace email delivery, check message headers, quarantine emails, whitelist email addresses.

In-depth knowledge of and supported complementary technologies, such as Active Directory Federation Service, Azure Active Directory Connect, and PowerShell.

Implemented video conferencing solution with Skype for business online with internal and external customers.

Responsible for end user training and materials for services provided from Office 365.

Merged PST from outlook using MessageOps.

Created SharePoint Sites, administered users, and created site quotas.

Troubleshooted shared mailbox’s, forwarding, delegate permissions, and calendaring for end users.

Utilize PowerShell Scripts to automate processes and tasks.

Worked in conjunction with Mobile Device Management teams to troubleshoot sync issues with Exchange mail and calendars.

Patching and updating Azure IaaS VM’s.

Migrated on Premises Application to Azure.

Implemented continuous integration and continuous delivery for Azure Web Apps.

Architecture and configuration of ExpressRoute circuits, Site to Site VPN, and Virtual Gateways

To connect on Premises network with Azure.

Migrated on Premises servers to Azure using Azure Site Recovery.

Installed Office Pro-Plus for mobile devices, and for users on premises, using a file server, and administered licenses.

Microsoft Azure and Office365 Architect August 2016 – February 2017

Southern Edison Corporation San Diego, CA

Implemented Azure IaaS and PaaS components – VM, VNET, ARM, NSG’s, Storage Blob, ExpressRoute, VPN, App Services HDInsight, PowerShell, AZURE stack, OMS, Azure Site Recovery, Azure Backup.

Greenfield installation of Azure Infrastructure.

Provided expert-level onsite and/or remote support services with specialized skills in Microsoft Identity Manager (MIM / FIM), Microsoft Intune, Microsoft MFA (Multifactor Authentication), Advanced Azure IAAS management & administration.

Responsible for Microsoft in the Cloud: MS Azure, Office 365 and Exchange Online as well as on premises systems.

Provided support and consulting for encrypted email strategy, support, and audit using Microsoft Exchange.

Installation of Microsoft Office365 infrastructure, not limited DNS Records, DirSync, IDFix, ADFS.

Configured ADFS based identity federation to provide users with a single sign-on (SSO) experience in the Exchange system.

Set-up Windows Azure Active Directory for directory synchronization.

Installation and configuration of domain controller, DHCP, DNS, Group Policy, Radius Server, IPV6.

Installation and maintenance of Microsoft Web Application Proxy for Security of ADFS tokens.

Created a site-to-site VPN between on premise and Azure, using RAS for secure replication of on-premise domain controller, to the newly created Microsoft Azure domain controller

Installation of San Certificates for Active Directory Federation Services

Creation of Site, Subnets, and site links for replication of on premise to the Microsoft Azure cloud.

Moved the 5 Flexible Single Master Operation (FSMO) roles, so that I could change the primary domain controller.

Managed SharePoint Sites, administered users, and created site quotas.

Experience with automation using PowerShell, Bash.

Added and tested internal and external users to SharePoint, using PowerShell.

Installation of azure resource group, virtual network, Network security group, Virtual Machines, Azure DNS, and gateway for Synchronization with on premise.

Created transport rules, blocked spamming IP addresses and domain names.

Architected and documented all architecture for Microsoft Azure and Microsoft Office 365

Proposed the right target state on Azure considering cost, performance, and security.

Enabled Network Security Groups on subnet and Virtual Machines and restricted access through internet facing endpoints.

Implemented continuous integration and continuous delivery for Azure Web Apps.

Installation, configuration, and testing of Skype for Business Online.

Automated in the Cloud including Azure Resource Manager templates, and PowerShell DSC.

Office 365 Engineer May 2016 – August 2016

ProSource San Diego, CA

Microsoft Exchange Engineer August 2015 – April 2016

Baltimore County Public Schools Baltimore, MD

Senior Microsoft Exchange Messaging Engineer April 2012 – July 2015

Arbitron Columbia, MD

Microsoft Exchange Subject Matter Expert November 2009 - March 2012

Leeway Management Lanham, MD

Microsoft Exchange Messaging Administrator October 2008 – October 2009

American Statistical Association Alexandria, VA

Tier 1 Help Desk Engineer May 2008 – October 2008

PCN Strategies Washington, DC

Microsoft Exchange Administrator September 2006 – May 2008

Bowie State University Bowie, MD

Network Administrator January 2003 – October 2006

Delta Micro Systems Rockville, MD

Education

LAN/WAN Professional

Certified Cisco Network Associate Coursework

Bowie State University

Bachelor of Science – Computer Science

Delta Micro Systems

MCSE Microsoft Certified Systems Engineer 4.0 and MCP Microsoft Certified Professional

Contact this candidate