Experience

Career

4 roles, most recent first. Each role lists its projects, with a full case study for each, and the technology used, and the skills section below groups the same tools by area.

1. November 2022 to present

   Associate Consultant

   Tata Consultancy Services · India, then Newcastle upon Tyne, United Kingdom

   India from November 2022 to November 2025, United Kingdom from December 2025.

   • Deliver enterprise infrastructure architecture, design, implementation and operations for utility and professional services clients, with ownership from design through to day-to-day operations.
   • Led Windows Server migrations from 2008 and 2012 to 2019 and 2025 with CIS hardening, removing end-of-support risk and closing audit gaps. Over 800 servers moved inside change windows with no unplanned downtime.
   • Delivered a tenant-to-tenant consolidation of two Entra ID and Microsoft 365 tenants: over 1,000 mailboxes, Exchange Online, SharePoint Online, OneDrive and over 500 Intune devices, with no disruption for users. Existing domain names were kept so devices did not need to be registered again.
   • Integrated SaaS applications with Microsoft Entra ID for single sign-on (SAML, OAuth, OIDC and SCIM), deployed Application Proxy and retired legacy infrastructure.
   • Implemented Zero Trust with Conditional Access, MFA, Azure NPS and Identity Protection, with governance through Privileged Identity Management and Access Reviews.
   • Moved over 10 TB of data to OneDrive for Business and Azure Files with full integrity, using Migration Manager and ShareGate after removing old and duplicate data and mapping legacy permissions.
   • Assessed on-premises servers and migrated them to Azure virtual machines, and manage Azure IaaS for clients.
   • Own a library of PowerShell scripts, kept in Git, for provisioning, dependency analysis, reporting and daily operations across Active Directory, VMware, DNS and Microsoft 365. The operations team still uses them.
   • Built a PowerShell DNS dependency analysis script that found unknown dependencies across over 800 servers and allowed legacy DNS servers to be retired without disruption.
   • Run BAU operations and third-line support for Windows Server, VMware vSphere (ESXi, vCenter, vSAN, SRM, vSphere Replication), Exchange and data centre functions across several clients, meeting a 99.5 percent SLA and KPI target.
   • Designed a repeatable patching process for servers and end-user devices that met compliance SLAs and closed an audit gap. Manage zero-day response and CIS and SOX compliance.
   • Write high-level and low-level designs for on-premises, VMware, Azure, Entra ID and Microsoft 365 platforms, take them through architecture review board and business approval, then deliver the implementation end to end.
   • Explain risks and recommendations to stakeholders in terms of technical fit, cost and timescale, and guide a team of 10 engineers on technical issues and standards.

   Projects in this role

   • DNS dependency analysis tool A PowerShell tool that found unknown DNS dependencies across over 800 servers, so legacy DNS servers could be retired without disruption.
   • Tenant-to-tenant consolidation of two Microsoft 365 tenants Consolidated two Entra ID and Microsoft 365 tenants: over 1,000 mailboxes, SharePoint Online, OneDrive and over 500 Intune devices, keeping existing domain names.
   • Server migration from Windows Server 2008 and 2012 to 2019 and 2025 Moved over 800 servers from Windows Server 2008 and 2012 to 2019 and 2025 inside change windows, with no unplanned downtime.
   • File server data to OneDrive for Business Moved 10 TB of file server data to OneDrive for Business after removing old and duplicate data and mapping legacy permissions.
   • PowerShell automation library A Git-based library of PowerShell scripts for provisioning, reporting and daily operations that the operations team still uses.
   • Zero Trust with Conditional Access and MFA Implemented Zero Trust through Conditional Access, MFA, Azure NPS and Identity Protection, governed with Privileged Identity Management and Access Reviews.

   Technology used

   • Windows Server 2019 and 2025
   • CIS benchmarks
   • Microsoft Entra ID
   • Conditional Access
   • Privileged Identity Management
   • Microsoft 365
   • Intune
   • ShareGate
   • OneDrive for Business
   • Azure IaaS
   • Azure Files
   • VMware vSphere
   • vSAN
   • Site Recovery Manager
   • PowerShell
   • Git
   • SCCM

2. July 2013 to October 2022

   Technology Lead

   Infosys Limited · Chennai and Pune, India, and Milwaukee, USA

   • Led infrastructure operations and modernisation for Fortune 500 clients in financial services and manufacturing, managing Wintel and VMware environments across 7 US sites and 6 global data centres with direct client accountability and full technical ownership.
   • Kept to a 99.5 percent SLA and KPI across EMEA, APAC and North America by managing end-to-end Wintel services: Active Directory, DNS, DHCP, Group Policy, DFS, PKI and Failover Clustering.
   • Ran BAU operations for Windows Server, VMware, Exchange and data centre functions across client sites.
   • Delivered data centre migration, consolidation and modernisation covering over 150 ESXi hosts and over 1,500 Windows servers, including P2V consolidation of over 800 physical servers onto VMware vSphere that reduced hardware footprint and licensing costs.
   • Deployed greenfield Cisco UCS Vblock (converged) and Dell EMC VxRail (hyperconverged) infrastructure, from build and configuration through to handover into operations.
   • Migrated physical file servers to virtual machines on VMware vSphere as part of the data centre consolidation.
   • Managed the vSphere lifecycle: DRS, HA, vSAN, vCenter upgrades, distributed switches, Aria Operations (vROps) and Site Recovery Manager. Completed P2V and V2V migrations, including legacy Windows 2003 servers.
   • Migrated over 300 enterprise applications from ADFS to Entra ID single sign-on (SAML, OAuth, OIDC and SCIM) with Application Proxy, which reduced the attack surface and allowed ADFS infrastructure to be decommissioned.
   • Delivered an IBM file server to NetApp migration, followed by a migration to Azure Files, and a Microsoft 365 cross-tenant consolidation, keeping data intact with no disruption for end users.
   • Managed Azure VM environments. Managed Entra ID and Azure AD Connect in hybrid environments and set up Azure Threat Protection monitoring and retention policies.
   • Designed and administered Exchange 2013, 2016 and 2019 hybrid (DAG) alongside over 70,000 Microsoft 365 mailboxes, with 99.5 percent uptime.
   • Delivered SCCM patching and hardening for over 1,500 servers and fixed zero-day and penetration test findings while keeping SOX and CIS compliance.
   • Improved efficiency with PowerShell automation for onboarding and offboarding, spam remediation, server provisioning and Active Directory operations.
   • Ran BMC Control-M and Operations Control scheduling for a large automobile manufacturer and led a team of 8 to automate business-critical batch processes, which streamlined manufacturing operations and reduced operational risk.
   • Automated BRMS tape backup monitoring and reporting for AS/400 (IBM iSeries) using RPG and DB2, which removed manual checks and gave auditable backup compliance.
   • Maintained and tested disaster recovery documentation and failover procedures for all sites, took part in VMware capacity planning, and supported NetApp, EMC VMAX, VPLEX, VNXe, Avamar and NetWorker storage and backup platforms.

   Projects in this role

   • Data centre migration and consolidation Migrated, consolidated and modernised infrastructure across 7 US sites and 6 global data centres: over 150 ESXi hosts and over 1,500 Windows servers.
   • Exchange hybrid for over 70,000 mailboxes Designed and administered Exchange 2013, 2016 and 2019 hybrid with DAG alongside over 70,000 Microsoft 365 mailboxes at 99.5 percent uptime.
   • Patching and hardening programme A repeatable patching process for servers and end-user devices that met compliance deadlines and closed an audit gap.
   • Single sign-on for over 300 enterprise applications Moved over 300 enterprise applications from ADFS to Microsoft Entra ID single sign-on, using SAML, OAuth, OIDC and SCIM, and retired the ADFS infrastructure.
   • Batch scheduling and AS/400 backup reporting automation Led a team of 8 to automate business-critical batch processing with BMC Control-M for an automobile manufacturer, and automated AS/400 tape backup reporting.
   • Greenfield Vblock and VxRail deployment Deployed new converged and hyperconverged infrastructure from scratch on Cisco UCS Vblock and Dell EMC VxRail, and handed it over to operations.
   • File server migration from physical to virtual Moved physical Windows file servers onto virtual machines on VMware vSphere as part of the data centre consolidation.

   Technology used

   • Windows Server
   • Active Directory
   • VMware vSphere
   • vSAN
   • Site Recovery Manager
   • Aria Operations
   • Entra ID
   • ADFS
   • Azure AD Connect
   • Exchange 2013 to 2019 hybrid
   • Azure Files
   • NetApp
   • PowerShell
   • SCCM
   • BMC Control-M
   • IBM i (AS/400)
   • RPG
   • DB2
   • Cisco UCS
   • Dell VxRail
   • EMC
   • Avamar
   • NetWorker

3. April 2011 to July 2013

   IT Analyst

   Resource Square Solutions (client: Accenture) · Chennai, India

   • Delivered a seamless Windows 7 migration for over 5,000 desktops and laptops across Accenture Chennai, with L1 and L2 server and desktop support covering DNS, DHCP, WDS and MDT imaging, and endpoint deployment. Kept a 95 percent customer satisfaction score.
   • Resolved P1 and P2 incidents quickly for end-user computing and improved endpoint security through desktop hardening to Accenture security standards, including SCCM deployments and encryption client rollouts across the estate.

   Technology used

   • Windows 7
   • SCCM
   • DNS
   • DHCP
   • WDS
   • MDT
   • Disk encryption
   • Desktop hardening

4. November 2009 to April 2011

   FMS Engineer

   CMS Info Systems (client: Bajaj Allianz Life Insurance) · Chennai, India

   • Sole IT contact for 7 regional offices, meeting SLAs consistently across Windows infrastructure, network connectivity, asset inventory, vendor coordination and OS and antivirus patching.
   • Produced weekly and monthly operational reports for stakeholders and trained users on new applications.

   Technology used

   • Windows infrastructure
   • Network connectivity
   • Asset inventory
   • Patching
   • Antivirus
   • Vendor coordination

Projects

Case studies from the roles above. Each one sets out the problem, what I did and the result.

Results

What the work delivered, in numbers.

• 800+servers upgraded with no unplanned downtimeMoved from Windows Server 2008 and 2012 to 2019 and 2025 inside change windows, with CIS hardening on every server.
• 1,000+mailboxes and 500+ devices moved between two Microsoft 365 tenantsConsolidated two Entra ID and Microsoft 365 tenants with no disruption for users, and kept the existing domain names so devices did not need to be registered again.
• 300+applications moved from ADFS to Entra ID single sign-onUsed SAML, OAuth, OIDC and SCIM with Application Proxy, which reduced the attack surface and allowed ADFS to be decommissioned.
• 800+physical servers consolidated onto VMware vSphereP2V migrations that reduced the hardware footprint and licensing costs and simplified infrastructure management.
• 10 TB+of data moved to OneDrive and Azure FilesRemoved old and duplicate data, mapped legacy permissions, then migrated with Migration Manager and ShareGate with full integrity.
• 70,000+mailboxes supported on an Exchange hybrid at 99.5 percent uptimeDesigned and administered Exchange 2013, 2016 and 2019 hybrid with DAG next to Microsoft 365, plus Entra ID and Azure AD Connect.
• 1,500+Windows servers moved in a data centre consolidationCovered 7 US sites, 6 global data centres and over 150 ESXi hosts, with P2V and V2V migrations and tested disaster recovery for every site.
• 99.5%SLA and KPI kept across EMEA, APAC and North AmericaManaged end-to-end Wintel services (Active Directory, DNS, DHCP, Group Policy, DFS, PKI and Failover Clustering) and third-line support for Windows Server and VMware.
• Zero Trustbuilt on Conditional Access, MFA and Identity ProtectionGoverned with Privileged Identity Management and Access Reviews, with Azure NPS extending MFA to network access.
• 800+servers scanned for hidden DNS dependenciesWrote a PowerShell tool that found unknown dependencies so legacy DNS servers could be retired without disruption.
• 1,500+servers patched and hardened with SCCMFixed zero-day and penetration test findings while keeping SOX and CIS compliance, and designed a repeatable process that closed an audit gap.
• 5,000+desktops and laptops moved to Windows 7 at Accenture ChennaiDelivered L1 and L2 support and imaging, kept a 95 percent customer satisfaction score and applied security hardening to Accenture standards.
• 8engineers led to automate business-critical batch processingRan BMC Control-M and Operations Control scheduling for a large automobile manufacturer, and automated AS/400 backup reporting with RPG and DB2.
• 4Azure and VMware certifications: Azure Solutions Architect Expert, Azure Administrator, VCP-DCV and VCP Cloud ManagementHeld alongside VCTA-DCV, the MCSA and ITIL v3 Foundation.

Skills

The same tools, grouped by area. The groups at the top are the ones I use most.

Certifications

Exams passed and courses completed that back up the skills above.

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) Microsoft
• Microsoft Certified: Azure Administrator Associate (AZ-104) Microsoft
• VMware Certified Professional, Data Center Virtualization 2022 (VCP-DCV) VMware
• VMware Certified Professional, Cloud Management and Automation VMware
• VMware Certified Technical Associate, Data Center Virtualization 2022 (VCTA-DCV) VMware
• Microsoft Certified Systems Administrator (MCSA) and Microsoft Certified Professional (MCP) Microsoft
• ITIL v3 Foundation
• VMware vRealize Automation: Install, Configure, Manage v8.3 (training completed) VMware