09/21/2026 updated
100 % available
Cloud Security Engineer | Microsoft Azure | Entra ID | Intune | Zero Trust
Athens, Greece
Only remote
Microsoft CertificationsAbout me
Microsoft Identity & Modern Workplace engineer: Entra ID, Conditional Access, Intune, Defender XDR, with automation on Graph API, PowerShell, Azure Automation. SC-300, MD-102, AZ-104, AZ-800/801. Remote B2B within EU, English-speaking teams. Available on 1-2 weeks' notice.
Zero TrustIAMActive DirectoryMicrosoft AzureIdentity ManagementSystem Center Configuration ManagerWindows PowerShellAzure Active DirectoryVulnerability ManagementAzure AutomationMicrosoft InTune
Identity & Access Management
Expertise in Microsoft Entra ID, Conditional Access design, RBAC, PIM, MFA, Identity Governance and Zero Trust. Design and deployment of Conditional Access policies, Intune Compliance Policies and App Protection Policies for BYOD environments, enforcing MFA, device compliance and app-layer data protection.
Endpoint Security & Mobility Management
Proficiency in Microsoft Intune (MDM/MAM), Windows Autopilot, Compliance Policies, App Protection Policies (BYOD), Defender for Endpoint (ASR, MDVM), Defender for Cloud Apps (session policies) and SCCM. Hands-on experience hardening Defender for Endpoint ASR rules and designing Zero Trust access architectures for unmanaged devices.
Security Automation & Engineering
Strong skills in PowerShell, Microsoft Graph API, Graph PowerShell SDK, Azure Automation (Runbooks, Managed Identity), Logic Apps and Power BI reporting. Development of automated governance platforms, bulk remediation tooling and scheduled workflows for enterprise-scale environments.
Microsoft 365 Administration
Administration of Microsoft 365 including identity lifecycle, licensing, Conditional Access, MFA, PIM and RBAC for 500+ user environments in fintech and critical infrastructure sectors.
Windows Server & Active Directory
Administration of Windows Server infrastructure including AD, DNS, DHCP and Group Policy. Background in systems engineering covering virtualisation and on-premises environments applicable to hybrid and cloud migration projects.
Vulnerability Management
Design and operation of Vulnerability Management Operating Models on Microsoft Defender Vulnerability Management and Intune, including remediation SLA definition, exposure score reduction and critical exposure remediation such as Log4Shell and end-of-support platforms.
NIS2 Compliance & Control Mapping
Mapping of security programmes to NIS2 (EU 2022/2555) Article 21 requirements and production of compliance documentation. Use of control-framework methodology mapped to MITRE ATT&CK tactics and NIST CSF functions.
Check Point Harmony Endpoint
Deployment and management of Check Point Harmony Endpoint across corporate devices as part of a layered endpoint security strategy alongside Microsoft Defender solutions.
Experience
Professional experience0 - 5 years
Freelancer since2026
Languages
EnglishFluentGreekNative speaker
Project history
- Independent client projects delivering Azure infrastructure and Microsoft 365 solutions, covering solution design, implementation, application modernisation, cloud migrations and AI adoption.
- Azure Infrastructure & Windows Containerization (completed PoC): Designed and provisioned Azure infrastructure with Bicep, ACR, ACI, Key Vault, RBAC and Managed Identities; containerised a legacy Windows-native REST application and validated Oracle connectivity.
- Microsoft 365 Copilot & AI Agent Deployment (deployed): Planned the pilot, activated licensing, assigned users and deployed role-based AI agents, with guidance on data access, permissions and security.
- Microsoft 365 & Exchange Online Migration (completed): Designed the target tenant for approximately 28 mailboxes across two domains; delivered PST/mailbox migration, Exchange Online Archiving, DNS/MX cutover, MFA, Outlook setup and validation.
- Technologies: Azure, Bicep, Windows Containers, ACR, ACI, Key Vault, Managed Identities, RBAC, PowerShell, Oracle, Microsoft 365, Exchange Online, Entra ID, MFA and Microsoft 365 Copilot.
Leading an end-to-end Security Operations Assessment covering endpoint security posture, vulnerability management and Zero Trust controls for a national critical energy infrastructure operator (NIS2-regulated utility sector). Designed a Vulnerability Management Operating Model on Microsoft Defender Vulnerability Management and Intune addressing 24,871 identified vulnerabilities. Designed and deployed Entra ID Conditional Access policies, Intune Compliance Policies and App Protection Policies for BYOD. Hardened Defender for Endpoint ASR rules and designed Zero Trust access architecture for unmanaged industrial devices. Mapped the security programme to NIS2 Article 21 requirements.
Administered Microsoft 365 and Entra ID including identity lifecycle, licensing, Conditional Access, MFA, PIM and RBAC for 500+ users in a fintech environment. Deployed and managed endpoint security across all corporate devices using Microsoft Defender for Endpoint, Defender for Office 365 and Check Point Harmony Endpoint. Ran SCCM-based patch and application deployment and automated recurring tasks with PowerShell. Administered Windows Server infrastructure (AD, DNS, DHCP, Group Policy), VMware vSphere virtualisation and backup and recovery operations.
Certificates
Endpoint Administrator Associate (MD-102)
Microsoft2026
Cybersecurity Architect Expert (SC-100)
Microsoft2026
Identity and Access Administrator (SC-300)
Microsoft2025
Azure Administrator Associate (AZ-104)
Microsoft2024
Windows Server Hybrid Administrator (AZ-800/801)
Microsoft2024
Teams Administrator Associate (MS-700)
Microsoft2024