Mathew Dailey

Govern a Microsoft cloud estate of 25+ Entra ID tenants serving state and county courts and judicial agencies, where live-courtroom uptime makes change control mission-critical.

• Lead and mentor engineers on the team, delegating workstreams, reviewing their work, and coaching them on Azure governance, Entra ID, and PowerShell, with runbooks they can run independently
• Established the corporate tenant's identity and endpoint governance baseline prior to the Tyler acquisition: Conditional Access policies, Intune device compliance, Windows LAPS, macOS configuration profiles, and an authentication-methods audit
• Co-authored FTR's enterprise security policy framework, translating identity, access, device, and data-protection requirements into documented standards and visual policy maps for leadership
• Built read-only governance audits across every subscription to identify Owner-access gaps and orphaned privilege, separating actionable risk from expected cases for remediation
• Led Microsoft 365 license governance with the CSP partner via GDAP, inventorying per-tenant usage of Teams Phone, Audio Conferencing, Office 365, and Azure resources to right-size NCE renewal commitments and avoid unneeded term lock-in
• Run a change-controlled tenant lifecycle and decommission program, auditing M365 license assignments, groups, apps, devices, and Azure resources across 14 tenants in phased waves before retirement
• Enforced an endpoint security baseline after acquisition, deploying CrowdStrike Falcon to 880 of 888 Azure VMs across 11 customer subscriptions and sustaining coverage with Azure Policy DeployIfNotExists assignments
• Integrated tenants with the parent company's Tenable Cloud Security platform, granting scoped Azure RBAC roles and Microsoft Graph application permissions per tenant in partnership with the acquiring security team
• Advised executive leadership on M&A integration risk, assessing the security impact of moving from cloud-only Entra ID/Intune to a hybrid-joined Okta and Workspace ONE stack and preparing briefing topics for the COO and CEO
• Protected production by applying CanNotDelete resource locks to business-critical resource groups, and provisioned an Azure data platform (ADLS Gen2, Data Factory, Azure SQL) for Business Central analytics
• Partner with Sales on Virtual Justice forecasting, supplying VM counts, reserved-instance status, and licensing terms per customer, and own customer exit planning for non-renewing tenants

Phoenix-based student loan refinancing fintech. Administered Azure and Microsoft 365, supporting secure, compliant cloud operations in a regulated financial-services environment.

• Established Azure governance by designing and implementing Azure Policy assignments and an RBAC roles-and-responsibilities model, setting compliance guardrails and least-privilege access across the environment
• Helped build the Invessio application, provisioning and securing its Azure infrastructure and partnering with the development team and CTO through delivery
• Delivered structured knowledge transfer and documentation to the internal technology team at contract completion

Global relocation management firm.

• Built Azure Recovery Services vaults protected by resource locks and implemented Veeam backups for vCenter appliances, minimizing downtime and data-loss risk
• Migrated Datrium SAN to Pure Storage, implementing iSCSI over 25 Gb Ethernet for high-speed data access
• Established Key Vault and Managed Identity patterns so resources and Git pipelines connect securely without shared credentials
• Designed and implemented Entra ID Conditional Access policies that gate access to organizational resources on user and device compliance
• Reduced Azure spend by implementing Reserved Instances and budget tracking without sacrificing operational efficiency

Major U.S. airline. Embedded cloud platform engineer responsible for identity, security, and cloud infrastructure.

• Automated SPN lifecycle management for both Enterprise apps and App Registrations, reducing manual interventions and enhancing operational efficiency
• Administered Microsoft Intune for Mobile Device Management (MDM) and Mobile Application Management (MAM), ensuring streamlined end-user device deployment and compliance
• Deployed Azure Synapse, Kubernetes Service, Data Factory, Virtual Machines, and Front Door with ARM templates for consistent, repeatable environments
• Developed and managed security policies for Microsoft 365 services, including Exchange, Teams, SharePoint, OneDrive, and Power Platform, to ensure compliance and safeguard organizational data
• Configured Azure private endpoints to establish secure communication pathways, enhancing data protection and minimizing exposure within cloud environments

Fortune 500 manufacturer.

• Provided expertise in SQL and IIS technologies during corporate divestiture, ensuring uninterrupted application functionality
• Led the migration of corporate Windows and mobile devices to Microsoft Intune, overseeing application deployment and security policy enforcement for compliance
• Spearheaded Azure AD adoption for Active Directory Federation Services (ADFS) SAML-based authentication, improving access control
• Designed disaster recovery and business continuity using Zerto replication, VMware Site Recovery Manager, and vSphere Replication
• Developed CI/CD pipelines with Visual Studio Team Services, accelerating delivery cycles for development teams
• Deployed Azure Kubernetes Service (AKS) clusters for machine learning workloads, enabling advanced data analysis

Healthcare technology company focused on remote patient monitoring.

• Automated IIS, SQL Server, and custom application deployments with ARM templates and Desired State Configuration
• Set up Nutanix and VMware ESX servers for secure integration of health data at co-located facilities
• Configured SolarWinds and Splunk monitoring and supported CI/CD for home health applications