Azure · AWS · Entra ID · Microsoft 365 · Security

Dhanush VelgondaCloud Infrastructure, Identity & Security Engineer

I operate and secure production cloud and hybrid infrastructure across Azure, AWS, Microsoft 365 and Entra ID, with a focus on identity, platform reliability and practical automation.

Sydney, NSW · Cloud operations · Identity · Security engineering

IdentityEntra ID · IAM
SecurityDefender · IR
AutomationGraph · IaC
AZAzurecloud operations
AWSAWSinfrastructure ops
VMVMwarevirtualisation
OSSystemsWindows · Linux
production experience + portfolio engineering

Selected production experience

Work delivered in real environments

A concise view of the infrastructure, workplace and security work behind the portfolio.

CLOUD INFRASTRUCTURE & RESILIENCE

VMware workloads migrated to AWS

Supported the movement of virtual servers from on-premises VMware into AWS, including migration execution, validation, monitoring and post-migration operational support.

VMwareMigrationAWSValidate

Maintained service continuity while improving cloud operations and recovery readiness.

AWSEC2CloudWatchVMwareVeeam
IDENTITY & WORKPLACE AT SCALE

1,400-laptop Autopilot deployment

Introduced Windows Autopilot during an overseas acquisition, creating deployment profiles, policies and supporting access controls so employees could provision new devices through organisational sign-in.

PrepareProfilesUser sign-inManaged

Enabled a user-driven zero-touch deployment model for 1,400 Windows laptops.

IntuneAutopilotEntra IDNamed locations
SECURITY & OPERATIONAL CONTROL

Investigation, containment and repeatable response

Investigate identity, endpoint and Microsoft 365 security events, coordinate critical incident response and improve analyst guidance for consistent triage and escalation.

AlertInvestigateContainDocument

Turned operational knowledge into clearer investigation paths, containment checks and reusable runbooks.

DefenderCrowdStrikeSentinelPurview

Selected projects

Architecture and automation, made inspectable

Each project page starts with the business problem, then opens the technical decisions, safety controls and implementation details.

Public project

Manage-UserLOA

A PowerShell module for repeatable leave-of-absence workflows across hybrid Active Directory and Microsoft 365, with validation, operational summaries and restoration logic.

PowerShellHybrid ADExchange OnlineIAM lifecycle
Explore the project
Open source

Ryuk Memory OS

A local-first AI memory system designed around trust boundaries, deterministic sanitisation, human approval, provenance and Git-backed Markdown storage.

PythonLocal-firstProvenanceTrust boundaries
Explore the project

Engineering range

Broad infrastructure experience, specialist identity depth

Production responsibilities are separated from project and current-focus skills so the level of experience remains clear.

Production experience

Cloud & infrastructure

  • Azure and AWS operations
  • EC2, S3, IAM and CloudWatch
  • VMware and server migration
  • Windows Server and Linux troubleshooting
  • Backup and recovery operations
Production experience

Identity & access

  • Entra ID and hybrid AD
  • Conditional Access and MFA
  • IAM lifecycle operations
  • SSO administration
  • Access revocation and audit support
Production experience

Modern workplace

  • Microsoft 365 administration
  • Intune and Windows Autopilot
  • Exchange Online
  • SharePoint and Teams
  • Endpoint compliance and deployment
Production experience

Security operations

  • Defender and CrowdStrike
  • Sentinel and Purview triage
  • Phishing and sign-in investigation
  • Vulnerability remediation
  • Incident coordination and runbooks
Current build focus

Automation & IaC

  • PowerShell and Microsoft Graph
  • KQL investigation workflows
  • Terraform project implementation
  • Git and GitHub documentation
  • Architecture decisions and testing

About & credentials

A career built across operations, infrastructure and identity

My career has moved through regional IT operations, production application support, cloud infrastructure operations, and cloud identity and security. That progression shapes how I approach systems: availability and recovery matter as much as access control, and operational processes should be clear enough for another engineer to follow safely.

Regional IT operations Production application support Cloud infrastructure operations Cloud identity & security

My workflow combines hands-on research, iterative testing and AI-supported refinement to develop and validate practical solutions.

dhanz@labs:~$ whoami
Cloud Infrastructure, Identity & Security Engineer
dhanz@labs:~$ cat focus.txt
Azure · AWS · Entra ID · M365 · security · automation
dhanz@labs:~$ cat location.txt
Sydney, NSW, Australia
dhanz@labs:~$

Selected certifications

SC-300
Identity and Access Administrator AssociateMicrosoft · issued 2026
AZ-104
Azure Administrator AssociateMicrosoft · issued 2023
AWS
SysOps Administrator – AssociateAWS · issued 2024
MD-102
Endpoint Administrator AssociateMicrosoft · issued 2025
RHCSA
Red Hat Certified System AdministratorRed Hat · issued 2025
ISC2
Certified in CybersecurityISC2 · issued 2023
Automox Level III Pro · 2024 Jamf 100 · 2024 Fortinet Certified Associate Cybersecurity · earned 2023, expired 2025 Cohesity Platform Foundations · 2024

Full credential history is available on LinkedIn.

Contact

Let’s connect.

Based in Sydney and interested in teams working across cloud infrastructure, identity and security engineering.