Technology Lead, Infosys Limited (July 2013 to October 2022)
Moved over 300 enterprise applications from ADFS to Microsoft Entra ID single sign-on, using SAML, OAuth, OIDC and SCIM, and retired the ADFS infrastructure.
Applications signed in through ADFS, which kept legacy infrastructure running and widened the attack surface.
Each application was moved to Entra ID single sign-on with the protocol it supports: SAML, OAuth or OIDC, with SCIM for provisioning where the application allowed it. Entra Application Proxy published internal applications without opening inbound access to the network.
Over 300 applications now sign in through Entra ID. The attack surface is smaller and the ADFS infrastructure has been decommissioned.
Migrated, consolidated and modernised infrastructure across 7 US sites and 6 global data centres: over 150 ESXi hosts and over 1,500 Windows servers.
Designed and administered Exchange 2013, 2016 and 2019 hybrid with DAG alongside over 70,000 Microsoft 365 mailboxes at 99.5 percent uptime.
A repeatable patching process for servers and end-user devices that met compliance deadlines and closed an audit gap.