01
Cloud and identity
Administer Microsoft 365 and Microsoft Entra ID services, including licensing, role-based access, Conditional Access, authentication methods, SSO, access reviews, and Privileged Identity Management.
Systems Administration · Security Operations
Secure systems. Steady operations.
I build and maintain dependable Microsoft environments by connecting thoughtful administration, disciplined security practices, and automation that makes day-to-day operations more resilient.
info@mitchellstewart.caOperating focus
Identity and access control
Endpoint security and compliance
Detection, response, and recovery
Technical scope
Administration with security built in.
Strong administration is a balance: services must be available and usable while identities, devices, data, and changes remain controlled.
02
Endpoint operations
Manage Windows endpoints with Microsoft Intune, including configuration, compliance, application deployment, patching, remediation, and device lifecycle support.
03
Security operations
Investigate security alerts, suspicious email, endpoint vulnerabilities, and SIEM incidents across Defender for Endpoint, Defender for Office 365, Defender XDR, and Microsoft Sentinel.
04
Reliable platforms
Keep enterprise applications and services supportable through monitoring, documentation, change coordination, vendor management, and practical automation.
Security focus
Reduce risk through everyday practice.
Security is part of the operating rhythm: protect access, maintain healthy devices, notice unusual activity, and make the response repeatable.
Identity protection
- Review elevated-role activations and administer privileged access with least-privilege principles.
- Manage Conditional Access, MFA, SSO integrations, authentication methods, provisioning, and access reviews.
- Monitor licensing and account changes to keep access aligned with business needs.
Detection and response
- Investigate Defender and Sentinel alerts, suspicious email, endpoint vulnerabilities, and security incidents.
- Apply mitigations, document findings, and escalate to a third-party SOC MSP when specialized response is required.
- Develop incident-response plans and coordinate technical actions with affected teams and vendors.
Security improvement
- Administer phishing simulations, security orientation training, and Microsoft Purview data loss prevention policies.
- Coordinate patching and remediation work across managed devices to reduce operational and security risk.
- Review software and website security risks and translate findings into practical improvements.
Representative work
Projects that improve resilience.
The goal is not only to keep systems running, but to make the environment easier to protect, understand, and improve.
Identity · Cloud security01
Secure Microsoft 365 administration
Managed Microsoft 365, Entra ID, Exchange Online, Conditional Access, authentication methods, SSO integrations, and privileged access controls across the organization.
Microsoft 365Entra IDConditional AccessPIM
Endpoint · Vulnerability management02
Managed endpoint security
Administered Intune configuration, compliance, application deployment, and remediation policies while monitoring patching and operational health for 800+ managed devices.
IntuneWindows 11Defender for EndpointPatching
Detection · Incident response03
Security monitoring and response
Administered Defender XDR, Defender for Office 365, and Sentinel SIEM; investigated alerts and incidents, applied mitigations, and coordinated escalation when needed.
Defender XDRSentinelSIEMIncident response
Governance · User enablement04
Security awareness and data protection
Developed incident-response plans, administered phishing simulations and security training, and supported Purview data loss prevention policies to strengthen security awareness.
Purview DLPPhishing simulationsSecurity trainingDocumentation
Role experience
From administration to security response.
Microsoft 365 and Identity Administration
Maintained the cloud services, identities, permissions, and access controls that people rely on every day.
- Administered Microsoft 365 services, enterprise applications, user accounts, licensing, and role-based access.
- Managed Entra ID, Conditional Access, authentication methods, SSO integrations, Azure roles, and Privileged Identity Management.
- Performed access reviews, monitored elevated-role activations, and reviewed software and website security risks.
Endpoint and Infrastructure Administration
Supported a consistent, secure endpoint experience through policy, deployment, patching, and operational health management.
- Administered Intune configuration, compliance, application deployment, and remediation policies for managed Windows endpoints.
- Maintained Windows 11, Windows Server, Exchange Online policies, email security controls, and third-party platforms.
- Coordinated Microsoft and third-party software patching and monitored device vulnerabilities.
Security Operations and Automation
Connected security operations with automation and documentation so recurring work could be handled consistently and at scale.
- Investigated security alerts, suspicious email, endpoint vulnerabilities, and SIEM incidents; applied mitigations and coordinated escalation.
- Automated auditing, reporting, remediation, and administrative work with PowerShell, Python, Power Automate, and Microsoft 365 tools.
- Created system, procedural, and incident-response documentation to improve repeatability, supportability, and change management.