Azure Projects

Performed in-place enrollment of 200+ laptops used daily by end users into Entra ID without requiring devices to be wiped, preserving all existing data and applications. Each conversion involved wiping Immutable IDs, reassigning NuWave DIDs, and establishing Microsoft Authenticator MFA — achieving 100% MFA coverage across the organization. Coordinated timing with end users and upper management to minimize disruption throughout the rollout.

Created internal IT documentation and a runbook for capturing hardware hashes for Windows Autopilot enrollment on already-provisioned domain joined devices — without re-imaging. This non-standard approach saved significant time, avoided data loss, and enabled seamless Intune enrollment across the device fleet. The process was later used as the standard for all domain-joined device onboarding.

The organization's demo and showroom servers were running on aging VMware infrastructure hosting critical workloads including the ERP system, door security, file shares, and demo environments. As the hardware approached a decade of use, NIC failures began occurring alongside a change in direction from VMware, forcing a decision to lift these workloads into Azure before a full outage could impact operations. Adam contributed to the planning and led the execution of this migration, spinning up virtual machines in a dedicated Azure subscription and rehosting all affected workloads in the cloud. This eliminated the hardware failure risk entirely and contributed to the modernization which the foundation of the business ran on.

Prior to this project, remote access to showroom and demo environments relied on Pulse Secure for site-to-site connectivity — which granted broad access into the production network — and TeamViewer for engineers to remote onto machines. Both tools were deprecated as part of this initiative. Adam built out the full Azure network stack including a virtual network, subnets, gateway subnet, Virtual Network Gateway, and Network Security Group rules to block all production VLAN traffic from reaching Azure, completely isolating the demo environment from production. A Site-to-Site VPN was established through the Meraki dashboard to connect all showroom VLANs to Azure. RBAC roles were configured so that systems engineers can now RDP directly onto the Azure virtual machines and authenticate using their Entra ID credentials — eliminating TeamViewer entirely and replacing broad Pulse Secure access with a controlled, identity-based remote access model.