Automated Secure Landing Zone
A modular infrastructure-as-code solution that deploys a secure, compliant Azure Landing Zone with network segmentation, automated security policies and identity integration.
View on GitHub (opens in new tab)Rome, Italy
Azure & Microsoft 365 security engineer.
I secure and run Microsoft 365 and Azure for enterprise tenants: Entra ID, Conditional Access, hybrid migrations and the automation behind them. I am now growing into DevOps with Terraform, Bicep and CI/CD, with an applied-mathematics background behind how I model and optimise.
5+years supporting enterprise tenants
50+organisations supported
15+zero-downtime Exchange and hybrid migrations
35%faster identity provisioning through automation
About
Five years in Microsoft Premier Support and cloud administration taught me how enterprise systems fail and how identity is attacked and defended: Exchange Online, Entra ID, Conditional Access, RBAC, disaster recovery and monitoring across more than 50 tenants. I am now building DevOps skills on top of that, with infrastructure as code, automated pipelines and security policy built into Azure deployments.
I am completing an MSc in Applied Mathematics and Computer Science at the University of L'Aquila (expected December 2026), after a BSc in Aeronautical Engineering. The mathematics adds optimisation, statistics and machine learning, which I use on security problems such as phishing detection and to reason about reliability.
Experience
-
Feb 2026 – Present
Cloud Systems Engineer
Microsoft (via Upwork)
- Resolve Tier-3 escalations across Microsoft 365 and Azure environments.
- Configure Entra ID governance, SharePoint permissions and Exchange Online mail flow for enterprise B2B clients.
- Maintain 90%+ SLA compliance with top-tier customer satisfaction scores.
-
Aug 2024 – Jan 2026
Cloud Administrator & Systems Optimizer
Lepton Actuarial & Consulting
- Administered multi-tier cloud infrastructure with security and regulatory compliance policies.
- Designed disaster recovery, automated backups and failover testing for zero data loss.
- Built telemetry monitoring and performance analytics with Azure Monitor.
-
Jun 2021 – Jul 2024
Senior Technical Support Engineer (Premier Support)
Microsoft, via Wicresoft · Shanghai, China
- Supported Exchange Online, SharePoint, Teams, OneDrive and Entra ID for 50+ enterprise tenants.
- Led 15+ Exchange Online and hybrid migrations with zero data loss.
- Cut identity lifecycle deployment time by 35% with PowerShell and Azure CLI automation.
- Troubleshot identity synchronisation with Azure AD Connect and ADFS; applied Conditional Access and RBAC.
Projects
Hands-on work where I am building DevOps and automation skills alongside security.
Azure VM Deployment with Bicep
Automated deployment of a Windows virtual machine in Azure using Bicep infrastructure-as-code templates.
View on GitHub (opens in new tab)Phishing Website Classification
A machine learning model that detects phishing websites using features from the UCI dataset, with data preprocessing, feature selection and model evaluation.
View on GitHub (opens in new tab)Avionics Cybersecurity Simulation
A simulation environment for avionics systems covering threat scenarios, intrusion detection experiments and resilience testing.
View on GitHub (opens in new tab)Exchange Online Technical Support Report
A PowerShell script that generates diagnostic reports and automates common support tasks for Exchange Online environments.
View on GitHub (opens in new tab)Secure Authentication with Node.js & PostgreSQL
A secure authentication system built with Node.js, Express, bcrypt, JWT and PostgreSQL, following best practice for password storage and session management.
View on GitHub (opens in new tab)Skills
Microsoft 365 & identity
Entra ID · Azure AD Connect · ADFS · Exchange Online · SharePoint · Teams · Conditional Access · RBAC · MFA/SSO · OAuth
Azure & security
Azure · Azure Sentinel · Azure Monitor · Log Analytics · KQL · Key Vault · AIP policies · Azure CLI · Windows Server · Linux · TCP/IP
Automation & scripting
PowerShell · Python · Bash
DevOps (developing)
Terraform · Bicep · GitHub Actions · Git · CI/CD principles
Mathematics & data
Optimisation · Statistics · Python · Pandas · Scikit-learn · Matplotlib · Azure ML · MATLAB · SQL
Education & certification
MSc, Applied Mathematics and Computer Science
University of L'Aquila, Italy
BSc, Aeronautical Engineering
Nanjing University of Aeronautics & Astronautics, China
AZ-104 Azure Administrator Associate
Microsoft
Contact
Open to Azure, Microsoft 365, cloud security and DevOps engineering roles. The quickest way to reach me is email or LinkedIn.