08/04/2026 updated
100 % available
Microsoft Entra ID & M365 Security Consultant | Conditional Access, Intune, PowerShell
Porto, Portugal
Only remote
Network and IT Systems ManagerAbout me
Service Delivery Manager by day, running identity and endpoint security for a 3,500-user. I take on focused remote engagements in Entra ID, Conditional Access and Intune. Direct, hands-on, documentation-driven. Based in Portugal, working with EU clients in English.
Active DirectoryMicrosoft Exchange ServerIdentity ManagementWindows PowerShellIT Security StandardsAzure PowerShellMicrosoft InTune
Microsoft Entra ID & Identity Security
Design and administration of Entra ID in a 3,500-user enterprise environment (a major European automotive group's technology subsidiary): Conditional Access policies, MFA rollout and enforcement, Privileged Identity Management, app registrations and enterprise app governance (SSO/SAML/OIDC), identity lifecycle, and tenant security hardening. Resolved production SSO/SAML integration failures and hybrid identity issues (Entra Connect, Kerberos/SSSD on domain-joined Linux).
Microsoft 365 & Exchange Online
Full tenant administration: Exchange Online (mail flow, transport rules, migration and deprecation of SMTP Basic Auth), Teams, SharePoint, security and compliance configuration. Copilot for M365 deployment and access management.
Microsoft Intune & Endpoint Management
Cross-platform device management for Windows and macOS: compliance policies, configuration profiles, application packaging and deployment, Platform SSO for macOS, printer driver rollouts, Autopilot.
Azure Infrastructure & Security
Azure administration with a security focus: network security (NSGs, firewall appliances), Azure Site Recovery failover testing, Key Vault, DNS troubleshooting in hybrid environments. Contributed to ISO 27001 audit remediation for backup and DR controls.
PowerShell & Automation
Advanced scripting for AD/Entra security auditing (custom audit framework with scored HTML reporting), bulk administration, and reporting via Microsoft Graph.
Active Directory (on-prem & hybrid)
GPO management, security hardening, AD/Entra Connect synchronization, integration of Linux servers with AD (SSSD/PAM).
Background: Service Delivery Manager leading a 10-person team (L1-L3) supporting 3,500 users across a Microsoft-stack enterprise environment. ITIL-based operations, SLA ownership, major incident management.
Experience
Professional experience5 - 10 years
Freelancer since2026
Languages
EnglishFluentPortugueseNative speakerSpanishGood
Project history
Leading the IT Support team, ensuring SLA compliance, ticket prioritization, and overall service performance. Acting as the primary escalation point for critical production incidents. Mentoring and developing team members, fostering a collaborative and high-performance culture. Defining technical solutions aligned with strategic business goals and support roadmap definition and project prioritization. Coordinating cross-functional teams to streamline incident response workflows and monitoring service delivery metrics to identify bottlenecks.
Provided advanced production support, resolving complex Tier 2/3 incidents in enterprise environments. Performed team leadership responsibilities, ensuring continuity of service delivery and operational stability. Managed Microsoft 365 services, administered Azure resources, managed Active Directory, administered Microsoft Exchange, installed and monitored Windows and Linux servers, and managed DNS and DHCP services.