Open to opportunities

Bahruz Abseynov

@bahruzabseynov

Message

Lead System Administrator and Senior Cloud Engineer specializing in Microsoft Entra ID and Intune.

Azerbaijan

Message

What I'm looking for

I am seeking a senior cloud/identity role focused on Entra ID, Intune and IaC where I can drive secure, automated, large-scale identity and endpoint operations, collaborate with cross-functional teams, and continue professional growth.

I am a Lead System Administrator and Senior Cloud Engineer with 15 years of experience administering Microsoft 365, Entra ID, Intune, hybrid AD and enterprise SSO. I hold Microsoft 365 Administrator Expert and SC-400 certifications and have led large-scale identity and device rollouts.

I have led national Intune and AAD Connect deployments managing ~1M identities across 90k+ security groups, implemented Terraform-based Azure IaC, and centralized SSO and SSPR to stabilize hybrid sign-ins. My work reduced provisioning time, cut escalations, and improved enrollment and access hygiene.

My strengths include conditional access, PIM, SCCM, WSUS, imaging and patch baselines, secure operations for Windows and Linux, and automated runbooks that improved incident response and onboarding. I deliver audit-ready recoveries and cost governance alongside monitoring and backup baselines.

I communicate effectively with ministries, vendors and security teams to align enrollment, access policies and change windows. I seek roles where I can apply identity, endpoint and cloud automation skills to drive secure, scalable, and maintainable infrastructure.

Experience

Work history, roles, and key accomplishments

Current

Lead System Administrator

Current

Azerbaijan Airlines

Nov 2024 - Present (10 months)

Automated Azure IaC with Terraform modules, cutting VM provisioning time 40% and reducing configuration drift; centralized SSO and SSPR for hybrid identities to tighten access controls and stabilize application logins.

Terraform Entra ID SSO PowerShell Conditional Access Intune

Senior Cloud Engineer

LTIMindtree

Sep 2023 - Nov 2024 (1 year 2 months)

Authored Entra ID and cross-tenant sync runbooks, cutting escalations 30% and accelerating engineer onboarding; resolved PIM, AD Connect, and consent incidents to restore service continuity across regions.

Entra ID AAD Connect PowerShell Identity Management Cross Tenant Sync Incident Response

Microsoft 365 Enterprise Administrator

Azedunet LLC

Jul 2022 - Sep 2023 (1 year 2 months)

Implemented Intune and AAD Connect for the Ministry of Education, ensuring reliable sync and access for ~1M users and administering 90k+ security groups with automation to enforce least privilege.

Intune AAD Connect Entra ID Group Policy Automation)MFA SSO Training

Senior System Administrator

Azintelecom LLC

Feb 2022 - Jul 2022 (5 months)

Deployed OpManager and Remote Desktop Central to centralize patching and monitoring for 500+ endpoints; modernized Windows Server estate with DFS and GPO hardening to improve logon reliability.

OpManager WSUS GPO Windows Server DNS Patch Management

System Administrator

Veyseloglu Group of Companies

Oct 2020 - Feb 2022 (1 year 4 months)

Maintained hybrid Azure-Exchange estates and aligned WSUS, GPO, and cost controls to improve stability and governance; standardized SCCM imaging and patch baselines, raising compliance to 95%.

SCCM WSUS GPO Imaging Patch Management Compliance Azure

System Administrator

Rapid Solutions

Apr 2019 - Sep 2020 (1 year 5 months)

Led upgrades for WSUS, AD, Exchange, and File Services with rollback plans to safeguard availability; validated Veeam recovery and Exchange backups quarterly with runbooks to ensure repeatable RTOs.

WSUS Active Directory Exchange Backup Ads)

System Administrator

Caspel LLC

Jul 2010 - May 2018 (7 years 10 months)

Progressed from helpdesk to system administration supporting tax, banking, and civic clients including a France branch launch; managed AD, Exchange, and server infrastructure.