Biswajit Biswas

About Biswajit Biswas

I’m an IAM consultant with 19 years of experience designing and securing enterprise environments across finance, banking, manufacturing, and IT services. My expertise centers on Microsoft Identity and Security - Active Directory, Entra ID, Microsoft 365 (Defender, Purview & Intune), Okta and PKI - where I help organizations strengthen security, enable compliance, and modernize identity platforms Cost & Entitlement Optimization: Led Microsoft 365 and Active Directory entitlement and licensing optimization across enterprise tenants, using automated, data-driven analysis to identify underutilized and misaligned SKUs (E3/E5/F1/F3, EMS, add-ons) and unused AD/M365 access entitlements, enabling targeted remediation that reduced annual licensing spend and limited excessive access risk Over the years, I’ve led large-scale migrations, hybrid identity deployments, and automation initiatives that reduced manual effort by up to 80% through PowerShell, Microsoft Graph API, and DevOps pipelines. I’ve also built On-Prem PKI infrastructures to support secure authentication and encryption for thousands of users, integrated on-prem AD with cloud services, and improved compliance posture for regulated industries. My focus is always on combining deep technical expertise with practical solutions that reduce risk and improve efficiency with automations Designed and implemented an identity-driven endpoint security architecture using Defender for cloud,Intune, WHfB and MDE with Conditional Access based device trust and automated device inventory reporting Experienced in implementing advanced identity and access management solutions, including Conditional Access policies, Windows Hello for Business for secure authentication, and Microsoft & Okta Ecosystem Integration​ Designed standardized runbooks for critical IAM and M365 services, improving operational consistency and mean time to resolution I bring a mix of hands-on technical skills and strategic perspective, having worked with global enterprises like LinkedIn, IBM, Wipro, and Cognizant. I thrive in environments where security, automation, and scalability are critical, and I’m passionate about enabling businesses to adopt modern identity solutions with confidence |, & |, & | 36•••••00, &

Experience

1. Iam Consultant

   Cyderes

   Mar 2024 — Present · IN

   Security Posture Reporting Framework: Designed and implemented a Microsoft 365 security and compliance posture reporting framework using PowerShell and Microsoft Graph APIs. The framework evaluates tenant configurations across Entra ID, MDE, Intune, Microsoft Defender, Purview, Teams, and SharePoint, including areas such as Privileged Identity Management (PIM), DLP, Insider Risk, and Information Protection. Findings are mapped to CIS Benchmarks and Microsoft security benchmarks, with risk-based scoring and clear, executive-ready reporting to support prioritization and decision-making. Integrated Okta as an external authentication provider for Microsoft Entra ID using Entra EAM. Enterprise Directory Management: Managed multi-domain and multi-forest Active Directory infrastructures, including trust relationships, schema upgrades, and Exchange integration, supporting enterprise operations. Automation at Scale: Built automation frameworks in Azure to manage directory and identity tasks across domains, streamlining hybrid operations and reducing manual effort. Seamless Migrations: Delivered migrations of ADDS, ADCS, and Microsoft 365 workloads, minimizing downtime while ensuring data integrity. Large-Scale Auditing: Audited groups, privileged accounts, and ACLs across AD and Microsoft 365, enforcing least privilege, stronger password policies, and access controls to reduce risks. Microsoft 365 Security: Implemented Defender for Office 365, Defender for Cloud Apps, and Advanced Threat Protection to mitigate phishing, ransomware, and data loss. Configured Conditional Access, MFA, and DLP to strengthen compliance and reduce identity-based incidents. Integrated Solutions: Delivered integrations across Microsoft 365, Azure, and on-premises AD, enhancing performance, resilience, and overall security posture.

Education

• University of Calcutta

  Bachelor's degree, Bachelor of Science

  1998 — 2001

• Scottish Church Colligiate School

  BSC, Information Technology

Skills

• Active Directory
• Servers
• Windows Server
• Dns
• Group Policy
• Vmware Esx
• System Deployment
• Microsoft Technologies
• Disaster Recovery
• Cluster
• Powershell
• Microsoft Exchange
• Troubleshooting
• Technical Support
• Windows
• Infrastructure
• Microsoft Sql Server
• Software Installation
• Antivirus
• Microsoft Powershell
• Quest Powershell
• 2008 R2
• Data Migration
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2008 R2
• Windows Server 2008
• Windows Server 2003
• Windows Server 2003 R2
• Admt
• Migration
• Adds Design & Implementation
• Infrastructure Planing & Designing
• Powershell Module
• Quest Password Manager
• Adds Schema Upgrade
• Active Directoty Multi Domain & Multi Forest
• Pki
• Active Directory Infrastructure Design
• Citrix