10/03/2026 updated
100 % available
Microsoft Security Architect | Zero Trust, Entra ID, Sentinel, Azure
Trezzano Sul Naviglio, Italy
Germany +27
Engineer in Automation Control Systems - Kyiv Polytechnic Institute, Ukraine (2010)info: Germany, Austria, Switzerland, United Kingdom, USA, Italy, Liechtenstein, Ukraine, France, Belgium, Denmark, Finland, Ireland, Iceland, Japan, Luxembourg, Malta, Monaco, Netherlands, Norway, Portugal, Sweden, Czech Republic, United Arab Emirates, Cyprus, South Korea, Spain (Canary Islands), Seychelles
About me
Microsoft security architect, 18 years. Zero Trust identity (Entra ID, Conditional Access, PIM), Sentinel and Defender XDR, Intune and Azure hardening, ISO 27001 and NIS2. Ex cyber security lead, EU Advisory Mission Ukraine; Kosovo Specialist Chambers. Remote across Europe, on site in Milan.
NIS 2Zero TrustISO 27001IAMMicrosoft AntivirusMicrosoft AzureCloud Computing SecurityCloud EngineeringInformation Security ManagementSystem Center Configuration ManagerAzure Active DirectoryZero Trust Network AccessVulnerability ManagementGoogle CloudCloud Technologies
Cybersecurity Architecture & Zero Trust
Expertise in designing and implementing defence-in-depth security stacks including SIEM/XDR, vulnerability management, Zero Trust identity with Conditional Access and Privileged Identity Management, as well as full-stack observability across hybrid-cloud environments.
Agentic AI & LLM Operations
Architecture and operation of proprietary multi-agent AI platforms serving as autonomous digital workforces for service desk, security monitoring and executive reporting, with human-in-the-loop governance by design.
Microsoft Security Ecosystem
Deep hands-on command of Microsoft Entra ID, Defender XDR, Microsoft Sentinel, Intune, CASB and Defender for Cloud, including deployment, configuration and governance across enterprise environments.
ISO 27001 & Regulatory Compliance
Establishment of ISO 27001-aligned ISMS benchmarked to CIS Controls IG2, including enterprise risk registers, policy frameworks, security-awareness programmes and EU AI Act conformity assessments, with fluency in NIS2 and GDPR.
Cloud Platforms: Azure, Google Cloud & Cloudflare
Leadership of cloud and AI transformation engagements from strategy through to production-grade delivery on Azure, Google Cloud and Cloudflare, including hybrid identity and infrastructure modernisation.
SOC Leadership & Threat Intelligence
Direction of security operations centres in collaboration with CERT-EU and Airbus SOC, covering threat intelligence, IOC management, detection engineering and 24/7 monitoring capabilities.
Endpoint & Infrastructure Governance
Management of endpoint governance using Intune and SCCM across large device fleets, introduction of EDR capabilities, and infrastructure leadership including VMware/NetApp data centres and Cisco network unification.
ITIL 4 Service Management
Application of ITIL 4 and ITIL v3 frameworks for IT service management, including help desk setup, disaster recovery procedures and service continuity across multinational organisations.
Business Continuity & Disaster Recovery
Design and execution of zero-downtime migrations and disaster recovery strategies for production-critical systems, ensuring high availability and operational resilience.
Team & Vendor Leadership
Leadership and mentoring of cross-functional teams of systems engineers, management of multinational vendors, and ownership of CAPEX/OPEX budgets across international projects.
Expertise in designing and implementing defence-in-depth security stacks including SIEM/XDR, vulnerability management, Zero Trust identity with Conditional Access and Privileged Identity Management, as well as full-stack observability across hybrid-cloud environments.
Agentic AI & LLM Operations
Architecture and operation of proprietary multi-agent AI platforms serving as autonomous digital workforces for service desk, security monitoring and executive reporting, with human-in-the-loop governance by design.
Microsoft Security Ecosystem
Deep hands-on command of Microsoft Entra ID, Defender XDR, Microsoft Sentinel, Intune, CASB and Defender for Cloud, including deployment, configuration and governance across enterprise environments.
ISO 27001 & Regulatory Compliance
Establishment of ISO 27001-aligned ISMS benchmarked to CIS Controls IG2, including enterprise risk registers, policy frameworks, security-awareness programmes and EU AI Act conformity assessments, with fluency in NIS2 and GDPR.
Cloud Platforms: Azure, Google Cloud & Cloudflare
Leadership of cloud and AI transformation engagements from strategy through to production-grade delivery on Azure, Google Cloud and Cloudflare, including hybrid identity and infrastructure modernisation.
SOC Leadership & Threat Intelligence
Direction of security operations centres in collaboration with CERT-EU and Airbus SOC, covering threat intelligence, IOC management, detection engineering and 24/7 monitoring capabilities.
Endpoint & Infrastructure Governance
Management of endpoint governance using Intune and SCCM across large device fleets, introduction of EDR capabilities, and infrastructure leadership including VMware/NetApp data centres and Cisco network unification.
ITIL 4 Service Management
Application of ITIL 4 and ITIL v3 frameworks for IT service management, including help desk setup, disaster recovery procedures and service continuity across multinational organisations.
Business Continuity & Disaster Recovery
Design and execution of zero-downtime migrations and disaster recovery strategies for production-critical systems, ensuring high availability and operational resilience.
Team & Vendor Leadership
Leadership and mentoring of cross-functional teams of systems engineers, management of multinational vendors, and ownership of CAPEX/OPEX budgets across international projects.
Experience
Professional experience10+ years
Freelancer since2025
Languages
EnglishFluentItalianGoodUkrainianNative speaker
Project history
Founded and leads an AI and technology advisory firm for SMEs as a Microsoft AI Cloud Partner. Architected a proprietary multi-agent AI platform, established an ISO 27001-aligned ISMS, engineered a defence-in-depth security stack with SIEM/XDR and Zero Trust identity, and leads cloud, security and AI transformation engagements on Azure, Google Cloud and Cloudflare.
Strategic advisor to the IT Services Unit of an international criminal tribunal handling highly sensitive judicial data. Re-engineered Entra ID and Intune with risk-based Conditional Access and MFA, converted audit findings into remediation roadmaps, and led migration of legacy legal workflows to Microsoft 365 with forensic-grade logging and retention.
Accountable for the cyber resilience of an EU CSDP mission operating in an active war zone. Directed security operations with CERT-EU and Airbus SOC, re-architected the SIEM lifting detection capability by 30% and enabling 24/7 monitoring, and implemented cloud security architecture using Defender for Cloud, Sentinel, CASB and Tenable with 100% CIS-benchmark compliance.