Work

Cloud engineering,
enterprise infrastructure.

8+ years designing and operating Microsoft cloud environments across identity, networking, and virtualisation — with a focus on security, cost efficiency, and scalable architecture.

What I do

Cloud design and infrastructure, end to end.

I work with businesses across Australia and New Zealand to help them design, migrate, and optimise their Microsoft cloud environments. My work sits at the intersection of technical depth and practical delivery — understanding what organisations actually need, and building it properly.

My background spans Windows Server, networking, virtualisation, and Azure — with deep specialisation in Microsoft Entra ID, Conditional Access, and hybrid identity. I hold AZ-104, GH-900, MS-100, MS-101, and the MCT designation, with AZ-700 in progress.

Core skills

Technologies & platforms

  • Microsoft Entra ID (Azure AD)
  • Conditional Access
  • Privileged Identity Management
  • Hybrid Identity (Entra Connect)
  • B2B Collaboration
  • Microsoft Azure
  • Azure Virtual Desktop (AVD)
  • Azure VPN Gateway
  • Azure Firewall
  • Application Gateway (WAF)
  • Private Endpoints
  • VNet Peering / NSG / RBAC
  • Microsoft 365 Administration
  • Exchange Online
  • Windows Server / Active Directory
  • Hyper-V
  • DNS / DHCP / GPO
  • PowerShell
  • Linux

Experience

Where I've worked.


Certifications

Learning path.

✅ Achieved

AZ-104

Microsoft Azure Administrator Associate — core Azure infrastructure, identity, networking, and monitoring.

✅ Achieved

MS-100 / MS-101

Microsoft 365 Identity and Services + Mobility and Security. Deep expertise in Entra ID, Conditional Access, and device management.

✅ Achieved

GH-900

GitHub Foundations — version control, GitHub Actions, and modern developer workflows. Expanding into DevOps and infrastructure-as-code.

✅ Achieved

Microsoft Certified Trainer

MCT 2021–2026. Authorised to deliver official Microsoft technical training.

✅ Achieved

AZ-900

Microsoft Azure Fundamentals. The foundation of my cloud journey.

🔄 In progress

AZ-700

Azure Network Engineer Associate — deepening hybrid connectivity, ExpressRoute, Azure Firewall, and advanced networking design. Expected April 2026.


Project spotlight

Real-world scenarios I've worked through.

CSP Migration

EA-to-CSP tenant migrations

Guided A/NZ partners through migrations from Enterprise Agreement and PAYG to CSP models — including subscription transfer, license reconciliation, and Azure Reserved Instance optimisation. The financial and operational complexity of these migrations requires both technical depth and clear stakeholder communication.

Identity Architecture

B2B collaboration and cross-tenant access

Designed and implemented B2B collaboration setups for organisations requiring controlled external access across Entra ID tenants — including cross-tenant RBAC, Conditional Access policy alignment, and guest lifecycle management. Navigated the non-obvious constraints in multi-tenant identity and authorisation flows.

Hybrid Infrastructure

Hybrid identity and Exchange Online migration

Supported organisations transitioning from on-premises Exchange and Active Directory to a hybrid model using Entra Connect, Exchange Hybrid, and Intune device management. These migrations involve careful planning around mail flow, directory synchronisation, and Conditional Access policy rollout to avoid disruption to production users.


Have a cloud challenge?

Whether it's architecture advice, a migration project, or a general conversation about Microsoft cloud — I'm happy to talk.

Contact me