Gazal Goel

WORK HISTORY

ABOUT GAZAL GOEL

Cloud & Endpoint Security Engineer with 10+ years of enterprise IT experience and 8+ years supporting Microsoft Global Clients across large-scale, complex, and security-sensitive environments.I specialize in securing identities, devices, cloud workloads, and enterprise platforms through Azure Security, IAM (SC-300), Intune/MDM (MD-102), OS deployment (SCCM/Autopilot), patch governance, virtualization, and enterprise encryption (BitLocker/MBAM). My background spans security engineering, modernization, migration, troubleshooting, and global-scale operations.My strength lies in bridging cloud identity + endpoint security + OS platform engineering, helping organizations reduce risk, improve compliance, and operate securely under Zero Trust principles.Core Technical Strengths Identity & Access Security: Conditional Access, MFA, Passwordless, RBAC, PIM, SSPR, Identity Protection Cloud Security: Entra ID/Azure AD, secure authentication, access governance, Zero Trust enforcement Endpoint Security (Intune): Device compliance, App Protection, Autopilot deployment, Defender for Endpoint OS Deployment & Platform Engineering: SCCM, MDT, WDS, OSD, PXE boot, image engineering, update rings, servicing Patch & Vulnerability Management: WUfB, automated patching, compliance tracking, baseline enforcement Virtualization: Hyper-V replication, live/storage/quick migrations, VM lifecycle management Encryption & Hardening: BitLocker, MBAM, recovery key governance, secure configuration baselines Automation & Optimization: PowerShell scripting for deployments, servicing, compliance, and reportingCareer Achievements Delivered secure modernization for 8+ years across Microsoft Global Clients Increased endpoint compliance to 95–98% via Intune and Conditional Access enforcement Reduced unauthorized access incidents through MFA, Passwordless, and Zero Trust controls Improved patch compliance by 35% with automated servicing and governance workflows Reduced device onboarding time by 40% through Autopilot + OSD modernization Served as SME for BitLocker, Windows Servicing, Intune, Hyper-V, and Secure DeploymentsI bring a blend of security expertise, enterprise engineering experience, and strong execution capabilities. Immediate Joiner — open to Cloud Security, IAM, Endpoint Security, and Azure Engineering roles globally.