Microsoft 365 & Cloud Security
Securing Cloud.
Protecting Identity.
Microsoft 365 & Cloud Systems Administrator focused on hybrid Entra ID, Zero Trust Conditional Access, and endpoint security. Passionate about identity protection, threat response, and hardening cloud environments at scale.
Identity & Access
- Entra ID & Hybrid Identity
- Conditional Access & MFA
- FIDO2 · RBAC · Zero Trust
Security Operations
- Microsoft Defender
- Threat Investigation
- Incident Response
M365 Administration
- Exchange · Teams · SharePoint
- Licensing & Mail Flow
- Intune Device Management
Endpoint & Automation
- PowerShell + Graph
- AD → Entra Migration
- VDI & Modern Print
Tools & Technologies
About Me
Building security into everything I do.
Microsoft 365 & Cloud Systems Administrator based in the Greater Toronto Area, securing hybrid environments across a multi-company organization.
Security is not just my profession, it's my passion.
I'm Alex Philip, a Microsoft 365 and cloud systems administrator with hands-on experience managing hybrid Microsoft Entra ID environments across a multi-company organization. I led the migration of corporate endpoints from on-premises Active Directory to Entra ID and designed Zero Trust Conditional Access architecture spanning MFA, named locations, and session controls.
Currently at The Plus Group, I administer M365 services for 250 users across 6 companies, raised the Microsoft Secure Score from 35% to 80%, and collaborate closely with the CTO on IT policies, security controls, and operational improvements.
Tenant Hardening
Raised Microsoft Secure Score by remediating identity, device, and data recommendations across the tenant.
Technical Skills
Skills That Strengthen Security.
A comprehensive toolkit of technologies, frameworks, and methodologies I use to build secure, resilient cloud environments.
Identity & Access
- Microsoft Entra ID (Azure AD)
- Conditional Access / Zero Trust
- MFA · FIDO2 · RBAC
- Hybrid Identity & Active Directory
Microsoft 365
- Exchange Online & Mail Flow
- Teams (incl. Teams Phone)
- SharePoint & OneDrive
- Licensing & Identity Lifecycle
Security Operations
- Microsoft Defender for Endpoint
- Threat Investigation & IR
- Endpoint Hardening
- Security Baselines
Cloud & Infrastructure
- Azure (VMs, Networking, VPN)
- Windows Server 2016–2025
- DNS · DHCP · TCP/IP · Firewalls
- Universal / Azure Print
Automation & Scripting
- PowerShell
- Microsoft Graph API
- JSON Reporting
- Workflow Automation
Device & Endpoint Mgmt
- Microsoft Intune / MDM
- Atera RMM
- Compliance & Config Profiles
- Imaging · BYOD · Autopilot
Tools & Technologies
My Experience
Experience That Drives Security.
A journey of building secure systems, defending against threats, and delivering resilient cloud and security solutions that make an impact.
Experience Timeline
IT Specialist — Systems Administration & Cloud Security
CURRENTThe Plus Group
Administering a hybrid Microsoft 365 environment across a multi-company organization, hardening identity and endpoints.
- Provided Tier 2–3 technical support in a hybrid Microsoft 365 environment, supporting end users across Windows endpoints, cloud services, and identity platforms.
- Improved tenant security posture by raising the Microsoft Secure Score from 35% to 80% (a 45-point gain) by remediating identity, device, and data recommendations.
- Administered Microsoft Entra ID (Azure AD) including user provisioning, group management, role assignments, and Conditional Access policy enforcement.
- Managed Microsoft 365 services (Exchange Online, Teams, SharePoint, OneDrive), including mailbox issues, permissions, licensing, and service troubleshooting.
- Collaborated closely with the CTO on implementing IT policies, security controls, and operational improvements.
- Migrated on-premises server infrastructure to a fully cloud-based environment, improving scalability and system availability.
- Secured enterprise identity by managing Entra ID access controls including MFA, FIDO2, Conditional Access, RBAC, and security-group management.
- Led infrastructure upgrades, including modernization of on-premises network environments across multiple offices.
- Configured and maintained network infrastructure across multiple offices, including routers, switches, and firewalls, ensuring stable and secure connectivity.
- Deployed, configured, and managed endpoints using Intune and Atera, including device onboarding, configuration profiles, compliance policies, and update management.
- Configured and monitored Microsoft Defender for Endpoint, investigated security alerts, performed threat analysis, and remediated compromised or non-compliant devices/users.
- Enforced MFA across the organization; performed resets, troubleshot authentication issues, and reviewed sign-in risk events.
- Investigated and responded to phishing, spoofing, and suspicious email activity, including message tracing, user education, and remediation actions.
- Dealt with VPN connectivity issues, network access problems, and identity-related sign-in failures in hybrid environments.
- Performed regular updates, system checks, and managed server infrastructure.
- Collaborated with DevOps teams to support development and deployment of custom internal tools and applications.
ITS Student Lab Monitor & HyFlex Ambassador
Seneca Polytechnic
Supported computer labs and HyFlex classrooms, ensuring operational readiness and quick issue resolution.
- Resolved technical issues with computers (AIOs), Crestron touch panels, AV gear, projectors, screens, and more.
- Managed inventory for IT equipment, ensuring accurate tracking and availability.
- Reimaged and deployed laptops for professors and students during the hardware sale.
- Installed and configured computers in classrooms, reimaged classroom computers, and teacher podiums to meet institutional standards.
Service Desk Analyst — Level 1 & Level 2
Esri Canada
Delivered tier 1 & 2 IT support across hardware and software platforms, aligned with ITIL practices.
- Provided tier 1 & 2 IT support across various hardware and software platforms, ensuring alignment with ITIL practices.
- Created and managed user accounts in Active Directory (AD) and performed access control based on company policies.
- Provided comprehensive IT orientations to all new hires, ensuring a smooth onboarding process.
- Successfully managed corporate laptop builds, mobile device reimaging, and deployment processes.
- Conducted hardware asset tagging and managed records through SAP.
- Worked closely with Dell for multiple part replacements, ensuring efficient and effective resolution of hardware issues through collaboration with external vendors.
Experience Highlights
- 🔐Secured cloud identity and enterprise systems
- 🎯Detected and responded to complex threats
- ☁️Migrated infrastructure to the cloud
- 🤝Collaborated cross-functionally with the CTO
Core Strengths
Tools & Technologies
My Projects
Projects That Build Secure Futures.
A collection of cloud and security initiatives designed to solve real-world problems and strengthen security at every layer.
Cloud Migration
Hybrid AD → Entra ID Migration
Migrated corporate endpoints from on-prem Active Directory domain join to Microsoft Entra ID across 6 affiliated companies — rebuilding laptops as Entra-joined devices and resolving duplicate-profile and authentication issues.
Identity Security
Conditional Access & Zero Trust
Designed an Entra Conditional Access architecture enforcing MFA, named/trusted locations, sign-in frequency, persistent-session controls, and VDI bypass groups — hardening identity security organization-wide.
Cloud Administration
Microsoft 365 Administration
Administered Exchange Online, Teams, SharePoint, and OneDrive across multiple business units — managing shared mailboxes, mail flow, licensing, and identity lifecycle across 6 companies.
Security Operations
Cybersecurity Ops & Incident Response
Investigated and contained over 200 phishing, spoofing, and payroll-fraud incidents using Microsoft Defender, Exchange Online message tracing, email-header analysis, and audit-log review.
Automation
Endpoint Signature Automation
Built a PowerShell + Microsoft Graph solution deployed through Intune to standardize Outlook email signatures org-wide, and provisioned VDI, Azure resources, VPN, and modern print services.
Security Operations
Secure Score Hardening
Raised the tenant Microsoft Secure Score from 35% to 80% by remediating identity, device, and data recommendations and enforcing security baselines across the M365 environment.
Certifications
Credentials That Prove Expertise.
Industry-recognized certifications in cloud and cybersecurity.
Azure Fundamentals (AZ-900)
Microsoft
May 2025
CompTIA Security+
IN PROGRESSCompTIA
Expected August 2026
ISC2 Certified in Cybersecurity (CC)
ISC2
October 2024
Introduction to Cyber Security
Cisco
June 2023
Computer Engineering Technology (ECT) — Advanced Diploma
Seneca Polytechnic (Newnham Campus) · North York, ON
May 2022 – April 2025
Get In Touch
Let's Build a More Secure Future.
Have a question, project idea, or just want to connect? I'd love to hear from you.
Send Me a Message
Fill out the form below and I'll get back to you as soon as possible.