KEN FRANCOIS

PHONE: 404-***-****

EMAIL: adjw6u@r.postjobfree.com

SUMMARY

A disciplined Microsoft Exchange Engineer with 10+ years' experience -- enabling a workspace of custom email and collaboration services (i.e., Microsoft 365 to include Exchange Server line of products, Skype for Business, Teams, SharePoint Online) that help users get things done while collaborating quickly and efficiently on Windows 10 Enterprise/ Server 2012 R2/ Server 2016 [on-prem and Azure (Cloud)].

Specialist in Microsoft Exchange, Office 365, Skype-for-Business, Active Directory, PowerShell.

Implemented the following roles in a Microsoft Exchange environment: Edge Transport, Mailbox, CAS Array, Hub Transport and Unified Messaging

Effectively deployed Office 365 Infrastructure with ADFS 2.0 Farm & ADFS Proxy servers.

Deploy and Implementation of PowerShell scripts to efficiently fix errors for the customer's support teams found through the Active Directory environment.

Effectively installed, configured, and optimized IT infrastructures to achieve high availability and performance.

Configured Azure AD Connect and ADFS for Active Directory synchronization and single sign-on with Office 365.

In-depth experience in troubleshooting and resolving client/server issues with backup and recovery solutions for planned disaster recovery.

Deployed and implemented the different roles in the Microsoft Exchange environment: Edge transport, Mailbox, CAS array, Hub transport and unified messaging depending of the version.

Planned Size and Capacity for Exchange 2013 by analyzing the Exchange statistic reports before migrating Exchange 2013 to Exchange online.

Deployed Active Directory environment including file shares, CA, AD and DNS zones.

Administration of mid- to Large-scale Exchange production environments where e-mail and messaging services are mission critical.

Installed, configured, and maintained Active Directory and third-party migration products.

In-depth knowledge of Active Directory and LDAP technologies on Windows

Implemented the following roles in a Microsoft Exchange environment: Edge Transport, Mailbox, CAS Array, Hub Transport and Unified Messaging.

Verified user functionality and access to services via Outlook, OWA, and Outlook anywhere and assisted in resolving any issues.

Strong experience in Implementing Active Directory in production environment including GPO's, DNS, WINS, DHCP, and Domain Controllers etc.

Proficient in performing administration tasks and reporting using automation PowerShell scripting.

SKILLS

Full stack Development

Cybersecurity

Cloud Support

Software/Web Development

Database Administration

Azure Information Protection

Azure Identity Protection

Security and Compliance

MS 365 Licensing E3 and E5

Azure Licensing Premium P1 and P2

Skype and Teams

Teams Phone System

Data Loss Prevention

Data Classification

eDiscovery and Content Search

Endpoint Protection Manager

Windows Defender

SharePoint and OneDrive

CASB

System Administration

Azure AD

Azure Cloud services

Azure VM and Storage

Microsoft 365

Exchange Server

Disaster Recovery

Mobile Device Management and Mobile Application Management

Email Security and Encryption

SPF, DKIM and DMARC

Security and Compliance

Azure Information Protection

Azure AD Identity Protection

Privilege Identity Management

Intune policies and enrollment

MDM and MAM

Exchange Online Protection

Azure Sentinel

EXPERIENCE

Microsoft 365 Engineer Rollins Atlanta, GA

JUNE 2020 – PRESENT

Support post migration effort of Exchange to Exchange Online with Microsoft 365. Assigned to Implement Teams, manage messaging, and implement cloud security.

Planned and designed the requirements for the MS 365 Migration through the waterfall model so that stake holders and deployment teams were more in sync toward task completion.

Prepared Mailboxes for cross-forest migration from Exchange 2013 to Exchange Server 2016 with PowerShell with Database Availability Group (DAGs) defining the boundary for replication and Active Directory Domain Services (AD DS) forming the foundation for enterprise networks that run on Windows Server 2012 and 2016

Configured password hash synchronization via Azure AD Connect in sync with Windows Server 2016 Domain Controller from on-premises for the management of hybrid identities with Azure Active Directory (Azure AD) to gradually migrate users and email to Microsoft 365 or Office 365.

Provisioned Privileged Identity Management (PIM) with Tasks, Manage, and Activity options made available to manage and minimize the number of people who have access to secure information or resources in Azure Active Directory (Azure AD), Azure, and other Microsoft Online Services such as Microsoft 365 or Microsoft Intune.

Planned, Installed, and managed Skype for Business Server 2015 on Windows Server 2016 features including presence, IM, voice and video calls, and online meetings among other go-to solutions for Unified Communications and collaboration platforms in Office 365 are Microsoft Teams, Exchange Online and SharePoint Online.

Cloud Migration Engineer Peraton Philadelphia, PA

May 2019 – June 2020

Managed migration of collaboration services to Office 365 for Exchange 2013/2016, SharePoint, Skype 2015. Phased approach taken with batch moves via PowerShell scripts.

Implemented conditional access rules [i.e., network location, device compliance, multi-factor authentication (MFA)] and Azure Identity Protection (i.e., suspicious IP addresses, impossible travel, and anonymous proxies).

Leveraged additional features whereby giving users just in time (JIT) privileged access to Azure resources and Azure AD where the inbound access to the selected ports and requested source IP addresses or ranges on the VMs are locked down automatically for inbound traffic only for the time specified at which point then the Azure Security Center would have restored the NSGs to their previous states and created a Network Security Group (NSG) rule and Azure Firewall.

Prepared Mailboxes for cross-forest migration from Exchange 2013 to Exchange Server 2016 with PowerShell with Database Availability Group (DAGs) defining the boundary for replication and Active Directory Domain Services (AD DS) forming the foundation for enterprise networks that run on Windows Server 2012 and 2016

Planned, Installed, and managed Skype for Business Server 2015 on Windows Server 2016 features including presence, IM, voice and video calls, and online meetings among other go-to solutions for Unified Communications and collaboration platforms in Office 365 are Microsoft Teams, Exchange Online and SharePoint Online.

Office 365 Migration Consultant Weight Watchers New York, NY

AUG 2018 – MAY 2019

Configured rich hybrid between Exchange 2016 and Office 365 tenant. Included updates to OS, records, name spaces, web services, and mail flow.

Addressed network concerns regarding firewalls, load balancers and proxies, bandwidth with the Networking Operations Center (NOC) and acquired the needed licenses for Azure and successfully deployed Office 365 Migration from Exchange Server 2013 to Exchange Server 2016.

Utilized the IDFix app and ensured all queried users were corrected from Active Directory Users and Computers (ADUC) prior to migrating them from on-premises AD to Azure AD

Managed identities on Azure AD through authentication methods such as Directory Sync with Password hash synchronization (PHS), Directory Sync with Pass-through authentication (PTA) and Directory Sync with Federation (AD FS) that are used to meet challenges, both on-premises and in the clouds.

Technical lead on corporate initiative to migrate from Microsoft Exchange to Office 365

Deployment and integration of SharePoint, Skype for Business, messaging and Microsoft Teams

Deployed, configured and installed OneDrive for Business and Office online

Configured, deployed and installed PowerApps, Power BI and Microsoft Flow

Configured, managed and maintained Active Directory, Office 365 groups, Exchange, Skype-for-Business and Microsoft Teams

Managed Office 365 SharePoint portal

Managed SharePoint security, data loss prevention (DLP) and SharePoint permissions

Moved 6000 servers to Microsoft Azure tenant domain for Fred’s

Participation in the planning, implementation and projected growth in the customers’ Azure foundational footprint

Development and execution of Identity and Access Management (“IAM”) and Privileged Access Management (“PAM”) initiative

Administration of Windows Server 2003/2008/2012/2016 and all versions of SQL

Administration of VMware vSphere ESXI 5.0 including HA, vMotion and thin provisioning

SAN, NAS and directly attached storage installation, configuration and support

Review of application security/threat analysis

Ongoing support of NIST CSF framework to strengthen overall corporate security posture

Migrated from SharePoint 2013 to Office 365 SharePoint on line.

Backup administration and data management via Cohesity and Veeam

Azure cloud management including Azure Recovery Services (ASR)

Messaging/Security Engineer Perdue Farms Salisbury, MD

SEPT 2017 – AUG 2018

Performed job duties/assignments and accessed email in support of validation and hardening/engineering of a system with tools such as STIGViewer, SCAP Compliance Checker, STIG Checklist (CKLs), and custom validation tools provided from the DISA website.

Cybersecurity - Perform a complete DISA STIG checklist using a Nessus scanner on Windows, RedHat, CentOS, Solaris, or VMWare ESX 6.5 systems on the RDT&E network. Support IAVM risk assessment efforts utilizing automated DoD-required vulnerability assessment tool (ACAS).

Messaging – Planned and initiated migration of Exchange 2013 to Office 365 for user mailboxes, public folders, and distribution groups. Implemented directory synchronization for user identities. Phased migration with PowerShell batches. Implemented and configured advanced security features for Exchange Online and Azure (Azure threat Protection, Journaling, TLS encryption, and DLP policies) Configured mail retention policies and mobile device enrollment with Intune. Implemented SSO with ADFS servers in a farm deployment via SAML. Configured EWS services and Autodiscover to work properly with Exchange Online for collaboration and sharing.

Set up a Network Address Translation (NAT) network designed to route traffic from an external IP address and port to a much larger set of internal IP addresses associated with an endpoint on the network (virtual machine, computer, container, etc.)

Planning, design, and implementation and troubleshooting of Unified Communication systems, infrastructure and UCCE/ICM environment.

Deployed Skype-for-Business 2015 for 5000 users in a new environment.

Moved users from existing Lync 2013 environment to Skype-for-Business 2015.

Managed and maintained Windows server 2003/2008/2012 infrastructure

Server management using remote tools (ILO/DRAC/Open Manage)

Implementation of application security measures as a result of banking compliance audit

Configuration of High Availability (HA) and clustered environment

Administration of DNS, DHCP and DFS services

VMWare ESX configurations

Maintenance of backup and DR services (HP Data Protector, D2D and Cloud replication.

Troubleshooting issues related to Name resolution, AD replication, Disaster recovery, FSMO role transfers.

Responsible for development and documentation of the global Unified Communication platforms (in particular MS Skype-for-Business.

Manually tested pool pairing features for Skype-for-Business and refined process documentation.

Continued support of Skype-for-Business deployment for IM, conferencing, A/V and telephony connectivity with integrated web services.

Migrated 1050 mailboxes to Exchange Online.

Assigned and revoked licenses to user accounts for services within Office 365.

Enabled test users to Skype for business online, and tested their functionality.

Enabled all users for licenses for Skype for Business and enabled polices and conferencing.

Migrated Blackberry, Android devices using Intune.

Fixed synchronization errors for Active Directory, SMTP and GUID and Immutable ID issues.

Set-up Active Directory infrastructure, created accounts, groups, GPO, etc.

Lead DevOps Engineer Dish Removal Services Philadelphia, PA

AUG 2015 – AUG 2017

Built the website using HTML, CSS, JavaScript, and Shopify's Liquid language; put up compelling and appropriate animated whiteboard videos across social media outlets (YouTube, Facebook, Vimeo, Tumblr, etc.) that improved market share of services offered by the company to its customers.

Software/Web Dev - Prepared Statement of Work (SOW) and the project through an Agile development approach while using Google Docs, Trello Scrum Board, and Azure Cloud Services. Provisioned Search Engine Optimization (SEO) solutions involving page speed and XML sitemaps using Google Analytics that keeps the site in line with Google's best practices for online content which in turn benefits the company's profitability. Utilized Custom Domain HTTPS Support with Azure CDN to enable HTTPS for the custom domain via one-click enablement, complete certificate management, and all at no additional cost.

Cloud / DevOps Support - Implemented DevOps effectively with Microsoft Azure to string together API calls, redirection URLs, webhooks (Finch or Logic Apps), and best practices just to build Shopify apps with the .NET Library and ASP. Net using C#. Began implementation of CD (Continuous Delivery) / CI (Continuous Integration) and/or DevOps solutions or architecture patterns (with VSTS and Git/GitHub) and triggered build of the web application along with Visual Studio 2017 and Azure Cloud Services to be hosted on a publicly accessible, no password-protected website.

Messaging - Established a workspace of custom email and more with Exchange Online from Google’s G-Suite. PST migration of user mailboxes and content to Office 365 tenant. Supported cloud deployment of Exchange online services with user mailbox creations, licensing support, and policy enforcement. Ran health checks on Azure and Exchange services, ran mail traces and e-Discovery searches.

Qualification and Discovery: Evaluation of customer infrastructure, processes and issues to determine the best solution for customer needs.

Project Requirements: Worked with stakeholders and cross-functional team members and internal customers to determine messaging needs to fit strategic goals and needs of organization.

Solution Architecture: Developed an effective solution and compelling proposal leveraging organizational and team resources.

Stakeholder Presentations and gained buy-in and sign-off on project.

Responded to server monitoring system alerts to evaluate and remedy identified problems.

Led and mentored teams to reach project goals within deadline and quality standards

Migrated from SharePoint 2010 to Office 365 SharePoint online.

Identified AD issues using Office 365 HRC and IdFix

Remediated issues in AD and Exchange for readiness to Office 365

Used Azure AD Connect for directory synchronization and federation with ADFS 3.0.

Completed Exchange Online Hybrid deployment using Exchange 2010 servers.

Implemented pilot group for Exchange Online.

Migrated 300 mailboxes to Exchange Online.

Configured public folder infrastructure for access in Exchange Online.

Migrated Metalogix mailbox archives to Exchange Online. Security Lock Distributors

Conducted Exchange assessment.

Identified AD issues using IdFix. • Remediated issues in AD and Exchange for readiness to Office 365.

Used Azure AD Connect for directory synchronization and federation with ADFS 3.0.

Completed Exchange Online Hybrid deployment using Exchange 2010 servers.

Implemented proof of concept mailbox migration group for Exchange Online.

Configured public folder infrastructure for access in Exchange Online

Systems Support Specialist Conrail Philadelphia, PA

FEB 2012 – AUG 2015

Maintained and developed web-based applications and ensured functionality, database structural integrity and quality assurance, and processing of all monthly updates and modern designs.

Web Dev - Use .NET 3.5 or later, .NET C#, Visual Studio 2008 or later, TSQL, SQL, SQL Server 2005 or later, JavaScript, HTML 5, XML, AJAX, OboutSuite Tools set to maintain and develop web-based applications.

Messaging and Systems – Supported Exchange 2010 messaging environment. Deployed HA with DAG and DAC configuration. Managed external DNS records and services. Deployed an additional Edge Server for mail hygiene. Used ESETUL Exchange Database repairs and troubleshooting. Performed data audits utilizing SQL queries, as required to identify user-generated data errors, duplicate information, and increase data quality and data accuracy. Develop, administer, and maintain database and code systems to support program management needs.

Planned for hybrid authentication, network requirements, Exchange pre-requisites, mail flow, public folders, etc.

Configured, deployed and installed Lync 2010 for voice and video integration.

Participated in the Unified Communications Program to integrate the best of breed UC products from Microsoft, Cisco, Tandberg and others to provide a comprehensive worldwide UC fabric

Designed, supported and maintained a complex enterprise level (32000+ user) Exchange 2010 environment including Exchange HA/DR and Backup and Recovery

Designed Office 365 environment for 32000 customers including Exchange online, Lync online and other Office components.

Modified Lync 2010 Monsanto infrastructure for Office 365 deployment.

Configured and installed SQL 2008

Configured, modified and improved existing Active Directory for Monsanto

Configured VM-ware and Hyper-V

IT Support Specialist Department of Defense Fort Totten, NY

OCT 2010 – JAN 2012

Provided Helpdesk Support and ensured hardware, software, and connectivity remained within an acceptable level for collaboration services such as the Army Knowledge Online (AKO) portal and SharePoint Server.

Implemented an Active Directory (AD) Infrastructure and modified its Group Policies in conjunction with Anti-virus Server Software on a Network. Performed a Backup and Restore Procedure on a Database Server and AD.

Migrated to fewer than 2000 mailboxes from Exchange 2007 to Exchange 2010 for the Battalion Staff

Deployed Active Directory environment including file shares and DNS to replace workgroup-based infrastructure.

Equipment handling and inventory

Reimaged several computers and ensured connectivity on the networked printers

EDUCATION

B.S. in Information Science and Technology Temple University

CERTIFICATIONS

●Azure Fundamentals (AZ-900) Certification, Certification #H614-9357

●CompTIA Security Plus (Sec+) Certification, ZLRCFS3FBCR4Q1SF

●CompTIA IT Fundamentals (ITF+) Certification, ZLMBXZRN5DFQ1T5W

Contact this candidate