Jeff Randle

• ● Collaborated with multiple engineers across a variety of projects to implement new landing zones in Microsoft Azure for clients across several industries.

• ● Created Terraform templates to orchestrate the automatic deployment of the various components of landing zones including virtual networks, virtual WANs, firewalls, firewall policies, network security groups, user-defined route tables, private DNS zones, private DNS resolvers, Azure Bastion instances, VPN gateways, ExpressRoute gateways, log analytics workspaces, Azure Sentinel, management groups, and various platform components while adhering to best practices of a well-architected cloud adoption framework.

• ● Modernized updates management for on-premises and Azure-based virtual servers using Azure Automation Accounts and the Azure Monitor agent.

• ● Architected and implemented an enterprise-scale Azure Virtual WAN solution spanning 7 branch offices and over 50 remote locations as well as over 20 virtual networks in Azure spanning 25 subscriptions all with different, varying access needs.

• ● Architected and implemented a certificate-based, passwordless smartcard authentication practice for administrative users. This allowed for higher complexity of passwords, separation of roles and privileges across several tiers of administrative account, and a more secure modernized approach to privileged access management.

• ● Modernized updates management for on-premises and Azure-based virtual servers using Azure Automation Accounts, Azure Updates Management, and Azure Maintenance Configurations based on Azure Log Analytics. This greatly drove down the cost of datacenter management by allowing for the removal of SCCM licenses in favor of the free Updates Management solution in Azure.

• ● Collaborated with Network engineers to implement a modern per-app VPN solution using Azure AD authentication, group-based routing and access policies, and a more secure "app proxy" approach. This drastically increased security over traditional full tunnel VPN solutions that did not incorporate multi-factor authentication or conditional access.

• ● Collaborated with Security engineers to institute a highly granular Privileged Access Management process for both on-premises and Azure AD-based access and authentication using Azure AD privileged roles, privileged access groups, and frequent access reviews. This allowed for a much tighter application of the principles of least privileged access.

• ● Developed and implemented a department-wide training and upskilling initiative utilizing bite-sized content interest sessions, training and certification baselines, and learning paths for all departments.

• ● Mentored 4 junior engineers and administrators in the Systems Infrastructure team.