Dhanush Velgonda

• Manage Microsoft 365, Azure, Entra ID, hybrid Active Directory, Intune, Autopilot, Exchange Online, SharePoint, Teams and endpoint administration.
• Own identity lifecycle operations covering security groups, SSO administration, offboarding, access revocation, license reclamation and mailbox access.
• Investigate Defender, CrowdStrike, Sentinel and Purview events, including phishing, suspicious sign-ins and endpoint alerts.
• Coordinate critical incidents and improve repeatable triage, escalation and containment documentation.
• Build and test identity lifecycle automation and KQL investigation workflows with validation and operational review.

• Managed cloud and on-premises infrastructure across servers, virtual machines, backup systems, IAM, licensing and business-critical platforms.
• Migrated virtual servers from VMware to AWS while supporting planning, validation, continuity and post-migration operations.
• Delivered vulnerability assessment, patch remediation and backup and disaster-recovery improvements.
• Supported AWS, VMware, Veeam, monitoring, Windows and practical Linux troubleshooting in infrastructure operations.

• Introduced Windows Autopilot during an overseas acquisition and coordinated a user-driven zero-touch deployment of 1,400 laptops.
• Created deployment profiles, policies and supporting access controls for managed device provisioning.
• Supported endpoint vulnerability management, patching, user access and advanced escalation.

• Delivered Level 2/3 support for business-critical streaming and real-time statistics platforms in a 24/7 incident-response environment.
• Monitored production applications, performed root-cause analysis and coordinated service restoration against SLA and KPI targets.

• Supported 400+ users across endpoint, network, file-server, access and infrastructure environments.

• Led Level 2/3 regional IT operations across identity, devices, networks, infrastructure and service restoration.

Azure Entra Zero Trust Landing Zone

Terraform-driven Azure and Entra reference implementation covering Conditional Access, emergency access, policy guardrails, least privilege, threat modelling and architecture decisions.

Manage-UserLOA

PowerShell module for repeatable leave-of-absence workflows across hybrid Active Directory and Microsoft 365, including validation, mailbox handling, operational summaries and restoration logic.

Ryuk Memory OS

Local-first memory system with deterministic sanitisation, human review, provenance, controlled writes and Git-backed Markdown storage.

Graduated with Distinction.