KYLE C. TREWITT
720-***-**** ■ ***********@*****.*** ■ Denver, Colorado ■ LinkedIn
SUMMARY
Extremely motivated IT professional with a background in network technologies.
Dependable leadership and adaptable communication skills for multiple professional settings. Known for taking initiative and producing results in high pressure environments.
Driven to be a reliable and efficient team member while always seeking to optimize processes. PROFESSIONAL EXPERIENCE
Exxel Outdoors LLC – Broomfield, CO January 2024 – Present IT System Administrator
Took over all IT operations as the sole IT generalist in the company while guiding and supporting one ERP analyst and one EDI specialist
Single internal and external IT point of contact
Provided endpoint support for all users
Hybrid On-Prem/Azure tenant administration
Managed the migration of our entire server and storage infrastructure from VMware to Hyper-V
Ongoing On-Prem infrastructure maintenance and upgrades
Managed the deployment of Microsoft Defender for Office, Endpoint, Identity and Cloud Apps
Cyber Security threat management/mitigation and incident response
Managed continued PCI compliance standards
Designed network topologies for multiple office and warehouse locations
Installed and configured networks at multiple office and warehouse locations. Including servers, firewalls, switches, access points, cameras and cable installation.
Firewall configuration and maintenance on Fortinet, Cisco Meraki, and Ubiquiti appliances
Microsoft Dynamics Business Central and SQL server database administration and maintenance
Proposed and managed projects to upgrade and optimize infrastructure and processes
Vender relationship and engagement management
Department Asset and budgetary management and cost optimization Exxel Outdoors LLC – Broomfield, CO July 2023 – January 2024 IT Helpdesk Support Technician
Consistently exceeded SLAs as the sole IT support technician for an organization of 300 users
Provided technical guidance and education for my user base
Proposed and implemented changes to improve systems. Most notably:
- Configured Entra ID conditional access policies and identity protection
- Deployed Intune for MacOS including PKI Kerberos SSO, Android (RF scanners) and Windows management
Hybrid Active Directory/Azure AD access management
End to end user onboarding and offboarding
M365 exchange management
Mimecast email security solution management
Cyber Security incident response
Company-wide periodic hardware refresh
Network, storage and server infrastructure installation and troubleshooting with Fortinet, Cisco, Ubiquiti, Dell, Synology, and Qnap equipment.
Incident escalation to system administrator when necessary Empower Retirement – Greenwood Village, CO March 2022 – June 2023 ITS Project Engineer - Endpoint Engineering
Company-wide hardware refresh and existing hardware upgrade modifications for 1000+ endpoints
Personally carried out hundreds of one-on-one in person and remote deployments
Provided post deployment support for over 500 users including hardware/software troubleshooting and educating users on new systems
Built software packages/task sequences, and managed user/device collections within SCCM.
Scripted installation and configuration processes for programs such as Apache Maven, SAP, SAS, Bomgar, and device drivers.
KYLE C. TREWITT
720-***-**** ■ ***********@*****.*** ■ Denver, Colorado ■ LinkedIn EDUCATION
Emily Griffith Technical College – Denver, CO
Professional Certificate in Computer Networking, 2021 CERTIFICATIONS
CompTIA A+ CompTIA Net+ CompTIA Sec+ CompTIA Linux+ MTA MCSA PROJECTS
Conditional access Policies and identity protection: Configured and deployed conditional access policies for all users. Included:
- Banning legacy authentication for all users
- Device restrictions and requirements (Domain joined, Entra registered, Intune compliant)
- Geofencing
- User risk policies
Intune configuration and deployment:
Multi-staged project for different supported operating systems. MacOS:
Configured Company Portal enrollment for existing devices. Scripted mobile account to local account conversion. Built public key infrastructure and leveraged Intune Kerberos extension for SSO authentication on AD domain. Configured compliance policies including encryption requirements. Setup self service software availability in company portal. Leveraged Intune enrollment for conditional access security. Windows:
Configured GPO enrollment for existing devices. Configured compliance policies and self service software availability in company portal. Leveraged Intune enrollment for conditional access security. Android:
Simple enterprise enrollment for handheld scanners running android. Used to manage and troubleshoot handhelds in remote warehouses. Configured Velocity app and Wifi profile. restricted user access on enrolled devices. This was largely in anticipation of migrating our ERP system to Microsoft Dynamics 365 SaaS. Used for conditional access and Business Central application for warehouse activities. VMware to Hyper-V server migration:
Ensured full backups of all servers. Detached SAN storage, installed windows and configured hyper-v, MPIO, and windows admin center on physical hosts in sequence. Re-built all virtual servers on hyper-v hosts and re-attached SAN storage as necessary, in sequence ensuring live redundancy of VMware VM’s during migration. Post VM migration, configured hyper-v failover cluster for resiliency. Re-configured regular backups for all servers. Capstone (Emily Griffith Technical College):
Build a virtual Windows Server network environment using Windows Hyper-V. Network includes three Domain Controllers and two server hosts, DHCP and DNS configuration, and Active Directory Domain Services. Test Network functionality - Ping test all hosts, test access to network resources.