ABOUT ME

Hi, I’m Brett - a Systems Engineer with over a decade of experience architecting, securing, and operating hybrid IT infrastructure. My background spans multi-cloud administration, enterprise network routing, identity access management, and hypervisor virtualization.

From identity management and cloud tenant administration to hypervisor orchestration and segmented network security, I specialize in building resilient, zero-trust infrastructure that ensures operational uptime and seamless scalability.

I originally built this site as part of the Cloud Resume Challenge to document hands-on deployments across Microsoft Azure, automation pipelines, and cloud security controls. Today, it serves as an active environment showcasing my cloud architecture, production lab infrastructure, and ongoing systems engineering projects.

Updated September 2026.

Certifications

Azure Fundamentals AZ-900

July 2023

Azure Fundamentals AZ-900 Certification

Skills

Cloud & Identity Architecture: Microsoft Azure, Entra ID, Microsoft 365, Intune, Azure Front Door, Cloudflare DNS, Conditional Access, RBAC, Managed Identities

Systems & Virtualization: Proxmox VE, Hyper-V, Windows Server, Active Directory, Docker, Linux (Ubuntu/Debian)

Networking & Zero Trust: OPNsense, pfSense, Ubiquiti UniFi, VLAN Segmentation, Site-to-Site VPNs, Tailscale Mesh VPN, DNS/DHCP

Automation & DevOps: PowerShell, Infrastructure as Code (IaC), GitHub Actions (CI/CD), Azure Functions, Cosmos DB, Python, REST APIs

Storage & Disaster Recovery: TrueNAS SCALE, ZFS Architecture, RAIDZ, Automated Snapshots, 3-2-1 Backup Strategy, Offsite Replication

Security & Governance: Zero Trust Architecture, Endpoint Hardening, Secrets Management (Azure Key Vault), Threat Mitigation

Work

Mural Consulting

Microsoft Teams Rooms and Devices Engineer• Sep 2023 - Sep 2024

  • Managed Intune-based application deployment and configuration for 150+ Windows and Android certified Teams Rooms devices across diverse client environments.
  • Resolved 40+ complex Tier 3 issues monthly across Intune, Teams Admin Center, and Pro Portal, reducing overall escalations by 20% through deep log file analysis and diagnostic context gathering.
  • Hardened endpoint security by configuring Entra ID Conditional Access, RBAC, and modern authentication policies aligned with enterprise cloud standards.
  • Diagnosed and resolved underlying network routing, media flow (QoS), and SIP/VoIP signaling failures to ensure high service availability for meeting infrastructure.

    • Microsoft 365 Technical Business Advisor• Jun 2023 - Sep 2023

  • Advised 200+ business clients on M365 tenant deployments, identity management, security baseline configurations, and custom DNS setup.
  • Achieved #1 rank in client satisfaction out of global team members (48+ verified positive ratings in a single month).
  • Reduced client licensing overhead by 10% to 35% through subscription optimization and feature consolidation.
  • Promoted to Systems Engineer role within 3 months based on technical execution and performance metrics.

    • SingularisIT

    Systems Administrator • Sep 2017 - Apr 2020

  • Managed multi-site IT infrastructure, network security, and endpoint management for education (K-12 charter) and commercial client environments.
  • Spearheaded a $250K end-to-end hardware and cloud migration, deploying Jamf Pro MDM for macOS and Google Workspace for Chromebook fleets to streamline device provisioning.
  • Designed and deployed segmented network architectures using Ubiquiti UniFi switches/APs and pfSense firewalls, implementing VLANs, secure SSIDs, and traffic shaping to eliminate congestion.
  • Installed and maintained an enterprise 60+ camera IP surveillance system, engineering local storage pools and offsite replication following strict 3-2-1 backup strategies for maximum uptime.
  • Implemented PRTG Network Monitor to establish real-time SNMP/packet tracking, proactively identifying bottlenecks and preventing critical system outages.

    • Evolve IP

    Network Operations Center (NOC) Technician / IT Specialist • May 2013 - Apr 2017

  • Handled end-to-end IT infrastructure support, network security, and application delivery for 30+ regional client locations (veterinary clinics and healthcare facilities).
  • Transitioned client operations during company acquisition by Evolve IP, aligning legacy infrastructure with corporate standards and maintaining high service availability.
  • Deployed and configured WatchGuard firewalls, establishing secure site-to-site VPNs, firewall policies, and threat protection protocols across remote sites.
  • Conducted on-site technical assessments, infrastructure upgrades, and hardware installations, migrating local setups to Citrix virtual application environments.
  • Managed Active Directory domain environments, GPOs, and user access controls, reducing authentication and permission-related support tickets.
  • Standardized asset tracking and RMM workflows using ConnectWise and Continuum to accelerate hardware provisioning and ticket resolution.

    • James Madison University

    Senior Technical Consultant • Nov 2011 - Mar 2013

  • Provided Tier 2/3 hardware and software diagnostic support for 1,000+ university-issued student and faculty laptops across Windows 7, Windows 8, and macOS platforms.
  • Architected and deployed a custom Microsoft Deployment Toolkit (MDT) image, cutting system staging time by 50% across campus endpoints.
  • Trained, mentored, and supervised 10+ Tier 1 service desk technicians, establishing standard operating procedures for malware removal, hardware repair, and OS recovery.
  • Performed component-level hardware repairs, board replacements, and data recovery for compromised student endpoints.

    • Education

    Liberty University

    B.S. Management Information Systems• Dec 2013

    Projects

    Azure Cloud Infrastructure & Automation

    Cloud Architecture & DevOps• Ongoing

  • Cloud Edge & Security Architecture: Provisioned a globally distributed static web application on Azure Storage integrated with Azure Front Door and Cloudflare DNS, securing custom endpoints via Azure Key Vault SSL/TLS certificate management and private keys.
  • Serverless Data & Telemetry: Engineered an event-driven serverless backend using Python Azure Functions and Cosmos DB to ingest, process, and persist telemetry data from external endpoints, utilizing Managed Identities for zero-trust access control.
  • Infrastructure as Code & CI/CD: Automated cloud resource provisioning using IaC templates and built automated deployment workflows with GitHub Actions to streamline web asset delivery and serverless backend updates.

    • Personal Systems & Production Lab Environment

    On-Premises Systems & Network Security• Ongoing

  • Network Architecture & Security: Engineered a segmented zero-trust network environment using OPNsense firewall routing, isolated VLANs, and SDN controllers to enforce strict traffic policies.
  • Virtualization & Compute Orchestration: Deployed enterprise hypervisor clusters on Proxmox VE and Docker runtime environments to orchestrate high-availability Linux VMs and containerized services.
  • Storage Administration & Disaster Recovery: Configured TrueNAS SCALE ZFS storage pools featuring automated snapshot policies and encrypted offsite replication aligned with 3-2-1 data protection standards.
  • Zero-Trust Access & Edge Infrastructure: Engineered zero-trust remote access architecture using Tailscale overlay mesh networking to secure node-to-node connectivity, API endpoints, and local machine learning inference workloads without exposing open WAN ports.