Lead and run day-to-day security operations and incident response for a Microsoft-centric environment. Manage SOC/MDR partners, coach a security operations team, maintain runbooks, perform root cause analysis and threat hunting, drive incident lifecycle and KPIs, support data protection and governance, and manage third-party cybersecurity due diligence and asset inventory.

Design, implement, and support core infrastructure with emphasis on Microsoft 365/Azure, identity, and endpoint management. Lead identity platform, Intune/Autopilot endpoint management, enterprise SSO/SCIM, Windows server maintenance, security audits, vulnerability remediation, documentation for compliance, and automation projects. Resolve advanced incidents and collaborate cross-functionally to improve reliability and deliver complex technical projects.