Usama Anwar

System and Network Security Engineer

IT Consulting and Services • Temps plein

Jun 2024 - Present • 1 yr 11 mos

Site/Client: Mari Energies ● Deployed and managed Microsoft Defender for Endpoint for over 1,000 endpoints across hybrid environments, automating rollout via PowerShell and reducing deployment time by 70%. ● Deployed and managed Microsoft Defender for Cloud for on-premises and hybrid servers using Azure Arc, enabling centralized update management, vulnerability assessment, and advanced server protection. ● Implemented and configured Microsoft Intune Autopilot with Hybrid Entra ID (Azure AD) for zero-touch device provisioning, cutting Help Desk workload by 60% through automated enrollment and policy assignment. ● Enhanced enterprise endpoint security by deploying EDR (Endpoint Detection & Response), ASR (Attack Surface Reduction), and Device Control policies, strengthening compliance and protection. ● Monitored security alerts, performed incident response, and executed remediation actions using Microsoft 365 Defender and Defender for Endpoint, leveraging SHA-256 app controls and IoC-based web filtering to improve threat detection and response by 80%. ● Managed Intune application deployment (Win32, Line-of-Business, and Microsoft Store apps) and enforced unauthorized application removal through automated compliance policies. ● Integrated Intune and Microsoft Defender onboarding workflows, enabling automated, zero-user-interaction enrollment across all managed endpoints. Remote/Client: Continental Biscuits Limited ● Implemented and configured Microsoft Intune with Hybrid Entra ID (Azure AD) and on-premises Active Directory Group Policies to enable zero-touch device enrollment and unified endpoint management. ● Integrated Intune and Microsoft Defender onboarding workflows, enabling automated, zero-user-interaction enrollment across all managed endpoints. ● Managed and provided technical support for Microsoft Intune and Defender for Endpoint (EDR), ensuring endpoint compliance, threat monitoring, and device security across hybrid environments.