Microsoft Solution Architect - M365 & Entra ID

KENNETH KIMBER

Pelham, NH ***** • 603-***-**** • ************@*****.***

PROFESSIONAL SUMMARY

Microsoft-certified Solution Architect with 15+ years of experience designing, deploying, and securing enterprise IT infrastructure across cloud and on-premises environments. Specializes in Microsoft 365, Azure, Entra ID, and Intune, with proven success leading large-scale migrations, managing identity lifecycle at scale, and maintaining compliance in regulated and federal (GCC High) environments. Recognized for cross-functional initiatives that improve efficiency, reduce downtime, and align IT strategy with business goals.

TECHNICAL SKILLS

Cloud & Identity: Microsoft 365, Azure, Entra ID (Azure AD), Intune, Active Directory, MDM, GCC High

Operating Systems: Windows 10/11, Windows Server 2008–2019, macOS

Networking: TCP/IP, DNS, DHCP, LAN/WAN, Network Security

Scripting & Automation: PowerShell, Visual Basic, Autopilot, account provisioning

Tools & Software: Microsoft Office Suite, Adobe, Symantec, Remote Desktop, Print Manager, VSS / enterprise backup

Hardware: Imaging & deployment, system builds, POS systems, troubleshooting

PROFESSIONAL EXPERIENCE

Quality IT (GE Aerospace) — Hooksett, NH 08/2025 – Present

Staff Systems Administration Engineer

•Manage the identity lifecycle for 400+ users in Microsoft 365 GCC High environments using Entra ID (Azure AD), ensuring strict adherence to federal security protocols.

•Powershell scripting to create mapping scripts and quick downloads

•VMware for deploying, managing, and optimizing ESXi and vCenter environments

•Lead M365 migration and PC deployment initiatives in full compliance with IT and security standards.

•Design and test technical architecture, partnering with SMEs to identify and prioritize improvement areas.

•Implement solutions that streamline workflows, reduce downtime, and optimize system performance.

•Administer Microsoft 365 GCC High and Intune for secure, policy-driven device management.

•Provide cross-platform technical support across Microsoft and Apple ecosystems.

•Evaluate emerging hardware, operating systems, and software to keep the environment current and secure.

•Lead the support and continuous improvement of Hooksett site infrastructure (network, servers/virtualization, storage, OTN) serving shopfloor and engineering operations, ensuring availability, performance, and lifecycle health.

•Serve as the technical owner for computing and infrastructure services, improving incident resolution, complex request fulfillment, and change execution.

•Influence and improve site infrastructure designs, architectures, standards, and methods, partnering as needed with DT as well as business and production stakeholders.

•Plan and execute releases and changes (patches, upgrades, enhancements) with impact assessment, mitigation/rollback plans, and stable transitions to production.

•Proactively prevents site interruptions through monitoring, capacity planning, lifecycle management, and risk posture improvements.

•SMB network scanning, Windows File Server/share security, network printer deployment and print queues, Windows Server 2022, Microsoft Graph scripting, and SharePoint, Teams, and OneDrive troubleshooting, Develop and implement standard work and documentation to eliminate repetitive tasks, reduce repeat incidents, and improve supportability.

•Enable connected manufacturing by deploying and supporting machine connectivity, industrial I/O, sensors, IoT devices, data acquisition, and equipment-to-application integrations.

•Troubleshoot end-to-end across network, compute, hardware interfaces, and connected equipment; perform root cause analysis and drive corrective and preventive actions.

BAE Systems — Merrimack, NH 01/2024 – 07/2025

M365 & Intune Administrator

•Deployed and managed devices using Autopilot, Intune configuration, Active Directory, and Azure AD join and reimaging.

•Powershell scripting to create mapping scripts and quick downloads

•VMware for deploying, managing, and optimizing ESXi and vCenter environments

•Migrated the legacy Intune environment to modern Microsoft Intune.

•Managed identity and access for 5,000+ user profiles in Azure Active Directory, including password and profile administration.

•Administered M365 licensing and enforced access through security group memberships in Entra ID.

•Automated account provisioning and permission auditing with advanced PowerShell scripting, reducing manual overhead by 30%.

•Performed deep-dive troubleshooting of network access issues (DNS, DHCP, IP connectivity) across on-premises and cloud resources.

•Upgraded users to Windows 10/11 and deployed replacement machines, including hardware, software, and networking installation.

•Diagnosed and resolved hardware, software, and remote-access issues, coordinating with vendors as needed.

•Provided secure access to shared Azure resources in line with security framework guidelines.

•Developed standardized operational reports to monitor systems and surface issues and advised users on hardware/software purchasing.

•Tracked requests and incidents end to end, maintaining complete case histories through resolution and closure.

Retail Business Services — Middleborough, MA 03/2021 – 12/2023

Technical Administrator

•Served as the POS support liaison between Corporate, the POS vendor, and venue locations.

•Provided onsite and remote POS support including training, configuration, monitoring, and customization.

•Performed root-cause and trend analysis to identify and resolve recurring POS issues.

•Delivered desktop support (hardware, software, and mobile devices) for Hannaford employees.

•Installed, relocated, and reinstalled office equipment as needed.

•Developed and improved documentation to support problem analysis and resolution.

•Performed break/fix repair of supermarket POS and IT computer equipment.

Fresenius Medical Care — Waltham, MA 11/2019 – 03/2021

Corporate Support III

•Diagnosed and resolved hardware and software incidents across Windows and macOS, Active Directory, and Intune.

•Took ownership of issues through problem analysis, applying temporary or permanent fixes to restore service as quickly as possible.

•Installed and configured new IT equipment and managed Active Directory users and permissions.

•Resolved incidents with printers, copiers, and scanners, and upgraded software and hardware as needed.

•Managed AD domains, audited user permissions across platforms, and supported disaster-recovery planning.

•Accurately recorded and documented all requests in the IT service desk system while maintaining a first-class standard of customer service.

Worthen Industries — Nashua, NH 11/2017 – 11/2019

System Administrator

•Responded to support tickets, phone calls, and in-person requests, providing day-to-day support for desktops, laptops, smartphones, tablets, printers, and associated software.

•Built a new server for an ASP.NET application and support internal corporate servers and user desktops.

•Used Volume Shadow Services (VSS) and enterprise backup solutions to perform granular file recoveries and ensure data availability.

•Managed Active Directory domains, audited user permissions, and developed disaster-recovery strategies.

•Maintained compliance with HIPAA and NIST standards during account builds and data access processing.

•Followed controlled drawings and standardized procedures to support printer-product manufacturing in a fast-paced environment.

•Prepared planning documentation and coordinated company resources for efficient project delivery.

Portsmouth (NH) & Pentucket (MA) School Districts 06/2007 – 02/2017

System Administrator

•Evaluated, diagnosed, troubleshot, tested, and upgraded computers for staff, teachers, and student use.

•Installed and configured Windows, Microsoft Office, hardware, and peripherals for student and administrative use.

•Set up, supported, and administered Windows and Mac systems; diagnosed, reformatted, and repaired as needed.

•Managed networking including backups, security management, user accounts, email administration, and internet access.

•Worked in Active Directory managing user profiles and permissions.

•Led rollouts of hardware and software, managing projects to agreed budgets and schedules.

•Assisted the IT Director with network infrastructure.

EDUCATION

B.S., Information Technology (Concentration: Network Management) — Colorado Technical University, Colorado Springs, CO 2017

Computer Technology, A+ and Net+ Certification — Loring Job Corps, Limestone, ME 2001

Associate degree, Computer Science — Wentworth Institute of Technology, Boston, MA 1999

CERTIFICATIONS

•CompTIA Security+ 2024

•CompTIA CASP+ (Security X) 2025

•CompTia Linux + 2024

•Cisco Certified Network Associate (CCNA) 2024

•Microsoft Certified: Azure Solutions Architect Expert 2024

•Microsoft Certified: Azure Security Engineer Associate 2024

•Microsoft Certified: Azure Administrator Associate 2024

•Microsoft Certified: Identity and Access Administrator Associate 2024

•Microsoft Certified: Microsoft 365 Administrator Expert 2024

•Microsoft Certified: Azure Fundamentals 2024

Contact this candidate