Sesto San Giovanni, Lombardy, Italy
Infrastructure and Cloud Systems Engineer with several years of experience managing and evolving enterprise Microsoft environments across hybrid on-premises and cloud architectures. Strong background in Windows Server, Active Directory, Microsoft Entra ID, Microsoft 365, Intune, and Azure-based identity and collaboration services. Experienced in designing and implementing secure hybrid identity solutions, Conditional Access policies, and endpoint management strategies in complex enterprise and regulated environments, including banking infrastructures. Proven ability to lead infrastructure modernization initiatives such as cloud migrations, system upgrades, server relocations, and disaster recovery implementations. Skilled in IT operations and support across first to third line, with a strong focus on troubleshooting, root cause analysis, and service stability across large-scale Microsoft and networking environments. Regularly collaborate with security and audit teams to address compliance requirements, perform gap analysis, and remediate findings. Strong automation mindset with hands-on experience in PowerShell scripting, infrastructure automation, and patch management at scale (including BigFix), leveraging modern AI-assisted development tools to improve operational efficiency and reporting.
Manage, optimize, and modernize enterprise Microsoft infrastructures supporting internal services and banking perimeter environments, including Active Directory, DNS, DHCP, Group Policy, Domain Controllers, ACLs, hybrid cloud components. Design, develop, and maintain PowerShell automation for infrastructure operations, reporting, application dependency analysis, configuration management, and operational efficiency, leveraging AI-assisted development tools such as GitHub Copilot and ChatGPT. Administer enterprise patch management and automation through BigFix by developing custom analyses, relevance, actions, and deployment workflows across large-scale Windows Server infrastructures. Perform infrastructure security hardening and vulnerability remediation in collaboration with SOC and Security teams, implementing configuration changes through Group Policy, registry settings, privilege management, and operating system patching. Investigate complex infrastructure issues, perform root cause analysis, and implement corrective actions to improve service availability, operational resilience, and platform stability. Work directly with IT managers from multiple banking institutions to analyze requirements, design technical solutions, coordinate implementation activities, and lead infrastructure modernization and upgrade projects.
Continued supporting Vivienne Westwood while providing Microsoft infrastructure consulting services to multiple enterprise customers. Managed hybrid Microsoft infrastructures, including Active Directory, Microsoft Entra ID, Windows Server, Microsoft 365, Microsoft Intune, and Azure-based identity services. Designed and implemented hybrid identity solutions, Conditional Access policies, Microsoft Intune device management, and Microsoft 365 administration across enterprise environments. Planned and delivered infrastructure projects, including Microsoft Intune rollout, on-premises to cloud data migrations, backup verification, and disaster recovery validation using Veeam Backup & Replication and Azure Backup. Developed PowerShell scripts to automate administrative activities, generate reports, and improve operational efficiency across Microsoft environments. Provided second-level technical support for Windows and Microsoft infrastructures, performing root cause analysis, troubleshooting complex issues, and leveraging AI-assisted tools to accelerate diagnostics and documentation. Collaborated with internal stakeholders to evaluate technical requirements and implement secure, scalable Microsoft infrastructure solutions.
Managed Microsoft infrastructure services across Windows Server, Active Directory, Microsoft 365, networking, VPN, firewall, Ubiquiti networking, and endpoint management environments. Administered Microsoft 365, Microsoft Teams, Microsoft Entra ID, Conditional Access policies, and hybrid identity services while supporting enterprise collaboration platforms. Designed and implemented Microsoft Intune for enterprise device management and participated in infrastructure migration and modernization projects, including physical server relocation and on-premises to cloud data migrations. Coordinated external security audits and gap analyses by working directly with auditors, providing technical evidence, addressing security findings, and implementing remediation activities. Provided first- and second-level infrastructure support, performing troubleshooting, problem analysis, and root cause investigation across Microsoft platforms, networking, and enterprise endpoint environments.
Incident and request management in the Retail sector and more generally on the Microsoft Windows suite.
I have been involved in the technical management of various events and experiences for young people over the years, including concerts, summer oratories and basketball tournaments.