A client was hosting a Citrix solution in a 3rd party on-premises datacenter and was looking to modernize that solution by leveraging the Microsoft Azure cloud. I led the design, planning, and migration of the on-premises solutions to the Azure cloud and provided on-going managed support services.

The migration of Citrix VDI to Azure Virtual Desktop

Bennett Adelson

Microsoft Azure is a cloud computing platform that makes it easy to build, test, and deploy applications, services, and data

Microsoft Azure

Migration of Citrix to Azure Virtual Desktop

In this project, I introduced the Office 365 cloud platform as an ongoing effort to improve the security posture and protection of business data.

by requiring additional verification information (factors)

. One of the most common MFA factors that users encounter are one-time passwords (OTP). OTPs are those 4-8 digit codes that you often receive via email, SMS or some sort of mobile app.

To implement an Azure Multi-Factor Authentication (MFA) solution, we must deploy a federation solution or sync on-premises 

. The method I designed here for Azure Multi-Factor Authentication (MFA) is having an sms enabled phone and a secondary email.

I introduced Office 365 to improve the security posture and protection of the business.

Cox Enterprises Inc.

Azure Active Directory

Active Directory (AD) is Microsoft's proprietary directory service

Active Directory

Microsoft Sentinel delivers an intelligent, comprehensive SIEM solution for threat detection, investigation, response, and proactive hunting.

Microsoft Sentinel

Securely sign in to all online accounts using multifactor authentication, passwordless sign-in or password autofill with Microsoft Authenticator.

Microsoft Authenticator

M365 is a cloud-based suite centered around business productivity, which includes apps like Outlook, Word, PowerPoint, and more

Microsoft 365

Azure Multi-Factor Authentication (MFA)

Delivered the governance process framework for certification of application access and introduced transformation standards. The activities included  evaluating and implementing security best practices to protect a healtcare client from internal and external threats.

The goal was to discover any flaw or weakness in system security procedures, design, implementation, or internal controls that could be exercised (accidentally triggered or intentionally exploited) and result in a security breach or a violation of the system's security policy.

4 Steps of the Vulnerability Management Process

Identification and Authentication Failures.

Involved evaluating and implementing best practices to protect a business from internal and external threats.

Quadax Inc.

The cloud version of the on-premises Exchange Server, an email server from Microsoft

Exchange Online

Cyber Security and Vulnerability Implementation 

I orchestrated the refactoring of entire custom in-house access management solution by migrating from homegrown to Azure B2C & Okta. Reduced operation overhead by 22% and cybersecurity insurance by $250k per year. 

Refactored an in-house custom built access management platform with Azure.

Refactoring of Legacy Access Management Solution

I orchestrated a transition from legacy on-prem data center to Azure and M365 while adhering to strict industry regulations in Healthcare. The transition-state architecture included a Hybrid-cloud deployment model with on-prem data centers while integrating a new Identity Management system.

Reduce time to market by avoiding manual migration and minimizing custom development.

Orchestrating a transition from legacy on-premise data center to Azure and M365

PostgreSQL, also known as Postgres, is a free and open-source relational database management system emphasizing extensibility and SQL compliance

PostgreSQL

Visual Studio Code is a free code editor redefined and optimized for building and debugging modern web and cloud applications.

Visual Studio Code

Azure API Management is a hybrid, multi-cloud management platform for APIs across all environments.

Azure API Management

Azure DevOps provides an integrated set of services and tools to manage your software projects, from planning and development through testing and deployment.

Azure DevOps

Redis is an in-memory data structure store, used as a distributed, in-memory key–value database, cache and message broker, with optional durability

Redis

Postman is an API platform for building and using APIs

Postman

Digital Transformation Journey to The Cloud

I recently had a client needing to upgrade their existing KMS 2012 to 2022 since we recently upgraded the internal PKI. I wanted to capture the key information about KMS and the steps I used to migrate.

Key Management Services (KMS) uses a client-server model to active clients and is used for volume activation. KMS clients connect to a KMS server, called the KMS host, for activation. The KMS host must reside on a local network.

KMS hosts do not need to be dedicated servers, and KMS can be cohosted with other services. You can run a KMS host on any physical or virtual system that is running a 

 Windows Server or Windows client operating system. A KMS host running on a Windows Server operating system can activate computers running both server and client operating systems, however a KMS host running on a Windows client operating system can only activate computers also running client operating systems.

To use KMS, a KMS host needs a key that activates, or authenticates, the KMS host with Microsoft. This key is sometimes referred to as the KMS host key, but it is formally known as a Microsoft Customer Specific Volume License Key (CSVLK). You can get this key from the Product Keys section of the 

 for the following agreements: Open, Open Value, Select, Enterprise, and Services Provider License. You can also get assistance by contacting your local 

Steps on how to upgrade KMS server from Windows Server 2012 to Windows Server 2022.

Key Management Services Upgrade

Upgraded a Windows 2012 PKI environment to new Windows 2022 Servers. This included an "offline" CA Root server and two "online" intermediary servers.

Upgraded a Windows 2012 PKI environment to new Windows 2022 Servers.

Everyday is great to be alive!

Contact Me

Project Category security

Selected Category

Everyday is great to be alive!

Contact Me

Subscribe

Project Category security

Selected Category