Brandon J. O'Driscoll

Enterprise Infrastructure Modernization

• Architected and standardized the organization's Azure Local platform across distributed edge environments, establishing deployment standards, automation frameworks, and operational procedures supporting a long-term enterprise modernization strategy exceeding 200 planned sites.
• Led the enterprise deployment of Azure Local across 32 production clusters, replacing legacy VMware VxRail infrastructure with a standardized hybrid cloud platform supporting new construction and lifecycle modernization initiatives.
• Designed end-to-end infrastructure architecture including networking, firewall integration, Microsoft Entra ID authentication, Azure registration, cluster deployment, compute architecture, and operational readiness for geographically distributed edge environments.
• Directed migration of approximately 140+ production virtual machines utilizing Azure Migrate while maintaining business continuity across enterprise production environments.
• Built and maintained three dedicated Azure Local laboratory environments to validate production deployment scenarios, lifecycle migrations, software updates, and edge-case configurations prior to enterprise rollout.
• Contributed to an enterprise infrastructure modernization initiative delivering multimillion-dollar infrastructure savings through virtualization platform standardization.

Infrastructure Automation & Platform Engineering

• Designed and developed a Terraform Infrastructure as Code (IaC) framework from the ground up, reducing virtual machine provisioning time from 3–5 days to just 22 minutes, representing a 98–99% reduction in deployment time while improving deployment consistency across enterprise environments.
• Developed reusable Terraform modules for Azure Local virtual machine deployment, Azure resource provisioning, resource groups, and role assignments, enabling standardized infrastructure deployments.
• Currently designing a fully automated Azure Local deployment framework utilizing Terraform, Ansible, Dell iDRAC, and Redfish Virtual Media APIs to automate bare-metal provisioning, operating system deployment, cluster configuration, and post-deployment infrastructure standardization.
• Automated administrative workflows utilizing PowerShell and Azure CLI, reducing manual engineering effort and improving deployment reliability through repeatable automation.

Architecture & Technical Leadership

• Served as the organization's Azure Local Subject Matter Expert (SME), providing architectural guidance, platform standards, and technical leadership throughout enterprise deployment initiatives.
• Authored High-Level Designs (HLDs), Low-Level Designs (LLDs), enterprise architecture diagrams, deployment SOPs, and operational documentation within Confluence supporting long-term platform lifecycle management.
• Presented solution architecture, security design, deployment strategy, and modernization initiatives to engineering leadership and cybersecurity stakeholders.
• Defined enterprise deployment standards and operational procedures adopted across Azure Local production environments.
• Mentored engineers on Azure Local administration, platform operations, monitoring, lifecycle management, and enterprise support best practices.
• Collaborated with networking, cybersecurity, infrastructure, and application engineering teams throughout architecture, implementation, migration, testing, and production transition phases.

Identity & Security Engineering

• Provide engineering support for hybrid identity infrastructure supporting 50,000+ enterprise users across Microsoft Entra ID and Active Directory.
• Designed and implemented enterprise authentication solutions utilizing SAML, OAuth, OpenID Connect (OIDC), SCIM provisioning, Conditional Access, and Multi-Factor Authentication (MFA).
• Implemented Microsoft Entra ID tenant backup and recovery utilizing Rubrik Security Cloud to strengthen enterprise identity resiliency and disaster recovery capabilities.
• Serve as a senior escalation resource and subject matter expert for enterprise authentication, federation, and identity management technologies.

Current Engineering Initiavtive

• Maintained optimal staffing levels by tracking vacancies and initiating recruitment and interview processes to identify qualified candidates.
• Directed hiring and onboarding programs for new employees.
• Interviewed potential hires, negotiated salaries and benefits and performed reference checks.
• Evaluated human resources structure and plan for continual improvement and offered individuals professional and personal growth opportunities.
• Educated employees on company policy and kept employee handbook current.
• Structured compensation and benefits according to market conditions and budget demands.

• Led the development of a comprehensive IT security policy and procedures framework for a leading accounting firm, ensuring alignment with regulatory requirements and industry best practices.
• Achieved a 60% reduction in account creation time through automation, using PowerShell scripting, Active Directory, and Exchange Server administration
• Spearheaded the setup of Microsoft Intune for a diverse client base, addressing their unique mobility and security requirements.
• Configured Intune policies for device enrollment, application deployment (MAM), and security compliance, ensuring seamless integration with clients' existing IT infrastructure.
• Successfully implemented SAML SSO in Entra ID for our biggest healthcare client, ensuring seamless authentication and access management for SaaS applications, all within the designated timeline and budget.
• Configured automatic user provisioning in Entra ID. Streamlined account creation processes for our client.
• Troubleshooting of Virtualization Technologies (VMWare, Hyper-V, Citrix, etc.)
• Troubleshooting/installation of Cisco Meraki, SonicWall, Ruckus
• Microsoft Entra ID management, M365 Defender, Google Workspace, GoDaddy DNS management
• Windows Server 2008, 2012, 2016 and 2019
• Cloud Solutions (Azure, AWS), Auvik SaaS management

• Worked with Microsoft Azure team to design and develop robust solutions to meet client requirements for functionality, scalability and performance.
• Project #1: Worked with team on an IP scanning service utilizing Azure cloud technologies. Tech stack includes Azure Functions, Triggers, Linux containers, Azure Storage, Azure Key Vault, Azure Container Instances, ARM templates (familiar with Terraform), Docker, KQL, Nmap, and Geneva Monitoring/Metrics. Languages used: Powershell and C#.
• Project #2: Attended and completed Microsoft's Azure Boot Camp fundamentals. Attended and completed Microsoft's Azure SWE Boot Camp.
• Brought exceptional value to our projects by coordinating and scheduling cross-functional team discussions to potentially reduce costs and enhance product development.
• Participated in SDLC. For example, planning (Why documents) to Analysis (POC's) and Design (How documents).
• Participated in architectural design reviews with principal engineers and project managers to define solution requirements.

• Managed access to information to include troubleshooting and problem resolution to user community (over 50,000 users) and Service Desk.
• Responsible for remote access, file service and application access control for key business applications including Windows Active Directory (ARS), PeopleSoft, Oracle EBS, Control 2010, and Microsoft Dynamics CRM.
• Management and creation of access security groups in ARS.
• Managed privileged user accounts, shared user accounts, and service accounts used by network services and applications, based on approved service requests.