Sami Amine

Handle the installation and configuration of new infrastructures and servers. Windows. • Creation of groups and users and assignment of licenses (Office 365). • Processing requests and incidents via Apsynet and Unity platforms. • Creation and management of SCCM collections. • Deployment of applications, packages, and task sequences via SCCM. • Deployment of scripts via SCCM. • Deployment and monitoring of Windows Server and Windows 10 patches. • Active Directory administration. • Fixing vulnerabilities detected by the Qualys solution. • Creation and configuration of GPOs. • Creation of VMs under VMware. • Installation, configuration, and publication of Citrix VDIs. • Installation of monthly updates for a SQL Server cluster. • Installation of monthly updates for an Exchange Server 2016 cluster. • Administration of Veeam Backup & Replication. • Creation and management of users and groups on Microsoft ENTRA ID. • Creation of enterprise applications on Microsoft ENTRA ID. • Management of access to enterprise applications Entra ID. Configuration for SSO with SAML. • Creation of custom roles. • Synchronization of objects with Azure AD Connect. • Creation and management of roles (RBAC). • Assigning policies. • Creation and administration of Azure resources (Storage, VM, Load Balancer). Projects • Migration of servers from 2012 R2 to 2019. • Migration of SEP agents (Symantec End Point) to the main company's SEP group. • Migration of SCCM devices to the main company's SCCM. • Migration of file servers. • Hardening of Windows servers.

• Ensure the optimal operation of Microsoft components and services. Ensure the life cycle of Microsoft Windows Server operating systems. • Define, maintain, optimize, and document operational standards for Microsoft Components (Microsoft Windows Server, Microsoft Active Directory, Microsoft Active Directory Certificate Services). • Handle incidents on EasyVista or anomalies from internal requests. • Incident diagnosis, identification, formulation, and follow-up of its resolution. • Certificate management (PKI). • NTFS rights management. • Installation of new 2022 domain controllers. • Creation and configuration of GPOs. • Write technical documentation. • Lead technical workshops with different entities. • Creation and management of users and groups on Microsoft ENTRA ID. • Creation of enterprise applications on Microsoft ENTRA ID. • Configuration of automatic provisioning of user identities. • Implementation of SSO for applications on Microsoft ENTRA ID. • Convert federated domains to managed. • Manage access to ENTRA ID applications. Projects: • Securing Active Directory. • Migration of SSO for applications from ADFS to Microsoft ENTRA ID. - Implementation of GMSA service accounts. - Hardening CIS benchmarks.

Main activities: Installation, configuration, and maintenance of the DELL IDRAC physical server environment. Installation, configuration, and maintenance of the VMWARE environment. Document design specifications, installation instructions, and other system-related information. Installation and configuration of hardware and software. Monitor system operation to detect potential problems (PRTG). Work closely with other IT teams in an international environment. Windows Server: Implementation, deployment, setup, administration, migration, and troubleshooting of server, storage, backup, and system solutions. Management of the IT infrastructure based on Microsoft. Windows Server system administrator. AD administration. Creation of users, management of groups and organizational units with Powershell. Execute and modify Powershell scripts. Administration of access rights to internal NTFS resources. VMWARE: ESXI hypervisor installation. Install and configure virtual machines. Management of access rights to VMs. Import VMs in OVA format. Create datastore. Configure auto-start of VMs. Move VMs with VMOTION. Configure DRS, HA, FT. Management of SSH, NTP services under ESXI. Automate VM restarts with CRONTAB. Configure ISCSI for storage sharing. VMware VAPP management. VMware audit and report creation. Configure and review backup reports. Microsoft Azure: Deploy and manage virtual machines on Azure. Manage Azure resources. Configure and manage virtual networks (VNET). Configure Azure DNS. Creation and Configuration of Load Balancer (BackendPool and HealthProbe). Create availability set and zone. Creation of VM backups on Azure. Configure VMSS. Manage network security at the VM level (NSG).