Pavlo Serdiuchenko

Cloud & Infrastructure Support (Tier 2/3) • Azure Administration M365 • Intune • IAM • DLP • Azure DevOps (Terraform/Bicep)

I keep hybrid Microsoft environments secure, reliable, and fast by owning enterprise technical support, endpoint management, and Azure operations. I reduce MTTR, enforce Zero Trust access, and automate repetitive work so teams stay productive and compliant.

Tier 2/3 Support & Endpoint Management
Resolve escalations across Windows, macOS, Linux. Manage onboarding/offboarding, licensing, and identity. Govern devices with Intune/Endpoint Manager (compliance, config profiles, BitLocker, update rings, Autopilot) and streamline software packaging & patching.

Cloud Security & Access Control
Implement IAM with Entra ID (Azure AD), RBAC, MFA, and Conditional Access. Apply DLP with Microsoft Purview across Microsoft 365 and Azure; align with Zero Trust and regulatory compliance; support audits and policy hygiene.

Azure DevOps & Infrastructure as Code
Build CI/CD pipelines in Azure DevOps (YAML, Git) and provision infrastructure with Terraform, Bicep, ARM templates. Use PowerShell/Azure CLI and Ansible to standardize changes and prevent configuration drift between dev and prod.

Operations Excellence
Work within ITIL/SLA practices (incident, problem, change). Maintain asset inventory, write clear KB/runbooks, publish metrics (ticket volume, backlog, MTTR), and deliver short enablement sessions that raise user confidence.

Impact Highlights
• Cut manual software deployment effort by ~40% via Intune Win32 packaging & update rings.
• Increased device compliance with Conditional Access/MFA/RBAC and baseline policies.
• Reduced release friction with IaC and standardized CI/CD, improving environment consistency.

Core Stack & Keywords:
Azure • Microsoft 365 • Entra ID (Azure AD) • IAM • DLP • Zero Trust • RBAC • Conditional Access • MFA • Intune/Endpoint Manager • Exchange Online • SharePoint/OneDrive/Teams • Terraform • Bicep • ARM Templates • Azure DevOps (YAML/CI/CD/Git) • PowerShell • Azure CLI • Ansible • Windows Server • Linux • VMware (vSphere/ESXi/vCenter) • DNS/DHCP/VPN/VLAN • Microsoft Defender/EDR • CSPM/Defender for Cloud • Azure Monitor/Log Analytics (KQL) • ServiceNow • Jira • Autotask • Datto RMM • Documentation/Runbooks • ITIL/SLA • Incident/Problem/Change.