Kahlil Acosta

• Led operations for enterprise environment supporting 10,000+servers and endpoints
• Improved SLA adherence and operational efficiency, contributing to>99.9% system availability
• Managed monitoring and alerting using SCOM, reducing incidentresponse times by 25%
• Lead hybrid cloud and Azure infrastructure operations for enterprise clients managing Microsoft 365 tenants, Azure AD, and endpoint compliance at scale. Drive cloud-based endpoint management through SCCM and Intune, ensuring policy compliance across distributed device fleets.
• Oversee Azure-integrated SCOM monitoring, executive reporting, and SLA delivery across global engineering teams.
• Oversaw SCCM operations, improving endpoint compliance andreporting across global teams
• Developed SOPs used by 40+ engineers globally, reducingonboarding time and operational inconsistencies
• Led TLS and encryption remediation across hundreds of servers,eliminating insecure protocols
• Reduced critical vulnerabilities by 30–40% through remediationinitiatives using Qualys and Nessus
• Hardened server environments using Group Policy and IIS,improving compliance posture
• Validated encryption standards using OpenSSL and Nmap to meetsecurity requirements
• Managed vulnerability workflows in ServiceNow, improvingremediation turnaround time
• Supported SCCM and SCOM operations across 10,000+ enterprisesystems
• Implemented patching strategies that improved compliance rates by20%+
• Supported infrastructure modernization and cloud integrationinitiative
• Managed Azure-integrated infrastructure supporting 10,000+ Windows servers — cloud-first patch management, compliance, and security hardening. Led on-prem to SharePoint Online migrations; enforced Azure AD Conditional Access policies across hybrid endpoints.
• Maintained DNS and DHCP services with high availability andminimal downtime
• Mentored junior engineers, improving team efficiency and reducingescalations

• Enhanced system performance and scalability by designing private cloud environments for enterprise clients.
• Integrated Azure networking and VPN solutions to boost remote access reliability and connectivity.
• Architected VMware vSphere 7.x setups with hybrid cloud connectivity for improved operational efficiency.
• Hardened configurations on-premises and in Azure based on Microsoft security standards.
• Built VMware vSphere environments that supported multiple site infrastructure deployments.
• Achieved reduction of manual operations via automation and standardization across infrastructure components.

• Managed Microsoft 365 and Azure environments supportingthousands of users and systems
• Reduced phishing impact by 25%+ through proactive threatdetection and remediation
• Architected Microsoft 365 security infrastructure: Exchange Online security, EFD, and tenant-wide phishing remediation. Led migration from Basic Authentication to Modern Authentication (OAuth 2.0), materially improving Azure AD identity security posture. Managed BCDR planning, governance, and compliance standards in collaboration with Information Security leadership.
• Administered Microsoft Purview to classify, label, and protect sensitive enterprise data across hybrid Microsoft 365 environments.
• Configured and maintained Microsoft Purview Data Loss Prevention (DLP) policies to prevent unauthorized sharing of confidential corporate information.
• Discover and classify sensitive data across:
• SharePoint Online
• OneDrive
• Exchange Online
• Apply sensitivity labels
• Created DLP policies to prevent:
• SSNs
• Credit card data
• Student information (FERPA-related)
• Supported vulnerability management initiatives improving overallsecurity posture
• Contributed to disaster recovery and business continuity planning
• Maintained system uptime and performance across cloud services
• Managed day-to-day security operations for cloud and server systems, including email security, vulnerability management, and remediation of critical vulnerabilities.
• Monitored, investigated, and remediated phishing and malicious email threats in Microsoft 365, including tenant-wide reviews and threat removal.
• Administered Email Fraud Defense (EFD) services, ensuring email deliverability, authenticity, and protection against spoofing and fraud.
• Reviewed and assessed system backups, cloud capabilities, and data protection controls to ensure integrity and availability of data.
• Ensured cloud systems and applications met availability, reliability, and service delivery requirements.
• Collaborated with Information Security and IT teams to define and maintain server system policies, procedures, and architecture standards
• Assisted in the development and maintenance of disaster recovery (DR), business continuity (BC), and resiliency plans for server systems.
• Coordinated installations, upgrades, and ongoing support of cloud and server environments.
• Responded to service desk tickets, providing regular status updates and timely resolution.
• Planned and executed system and application upgrades, ensuring minimal service disruption.
• Developed implementation, testing, and training plans for new systems and applications to ensure operational reliability.
• Established and maintained security procedures to protect systems from unauthorized access, environmental risks, and user misuse
• Executed approved change management activities to improve performance and system availability.

• Supported cloud and server environments, improving systemstability and reliability
• Managed Microsoft 365 security operations and threat remediation.
• Administered Azure AD, Intune, Conditional Access, and M365 services for multi-client environments across healthcare, finance, and SMB verticals.
• Assisted in DR/BC planning improving system recovery readiness
• Reduced recurring issues through proactive maintenance andpatching
• Self-motivated, with a strong sense of personal responsibility.

• Supported multiple client environments simultaneously (10+environments)
• Reduced ticket resolution times by 20% through efficienttroubleshooting and automation
• Managed networking infrastructure including firewalls, VPNs, androuting
• Designed M365 tenant environments, Azure AD hybrid configurations, Exchange Online mail flow rules, and TLS/SSL connectors. Implemented Barracuda spam filtering, MFA, and PowerShell automation reducing administrative overhead across Azure environments.
• Performed migrations and backups ensuring data integrity andsystem continuity

• Managed IT operations for 75+ users, ensuring high systemavailability and performance
• Designed M365 tenant environments, Azure AD hybrid configurations, Exchange Online mail flow rules, and TLS/SSL connectors. Implemented Barracuda spam filtering, MFA, and PowerShell automation reducing administrative overhead across Azure environments.
• Reduced manual administrative workload by 30% throughPowerShell automation
• Led Microsoft 365 migration impacting entire organization withminimal downtime
• Improved system uptime by implementing failover and resiliencysolutions
• Managed Cisco Meraki infrastructure supporting secure and stablenetwork operations
• Delivered executive-level reporting for leadership decision-making
• Coordinated infrastructure upgrades and vendor-managed projects

Engaged in project-based contracts to expand practical skills across enterprise IT cloud and infrastructure domains.

Acquired hands-on experience with virtualization technologies (VMware/Hyper-V), Microsoft 365, and hybrid cloud fundamentals.

Utilized PowerShell and Bash scripting to improve task automation within system administration roles.

Oversaw DNS, DHCP, VLANs, and patching operations across various IT environments.

Developed foundational expertise in cloud platforms along with identity and access management concepts.

Leveraged ConnectWise and other IT service management platforms to enhance ticketing efficiency and service delivery quality.

Broadened understanding of networking principles, particularly the TCP/IP stack and OSI model for effective troubleshooting.

Supported advanced IT operations while gaining insight into enterprise standards, security measures, and multi-client settings.