Identity & access management, cloud security

Randy Malvoisin

Download resume View projects

Securing the front door to the enterprise.

I'm a cloud security professional with 5+ years securing identities, endpoints, and networks across Microsoft Azure and hybrid environments, specializing in identity and access management. I led an Active Directory to Microsoft Entra ID migration, deployed FIDO2 phishing-resistant MFA organization-wide, and resolved 6,000+ security incidents a year across 50+ client environments.

I build and automate identity controls across Okta, Entra ID, AWS, and Google Cloud, using PowerShell, Microsoft Graph, Okta Workflows, and Power Automate.

Years in IT and security
5+
Users supported
15,000+
Security incidents a year
6,000+
Active certifications
10

Experience

  1. Apr 2025 – presentCurrent

    Threshold Rehabilitation Services

    Reading, PA

    Senior IT Support Specialist, Identity & Access Management

    • Led the migration of on-premise Active Directory to Microsoft Entra ID, centralizing identity for 300+ users and enabling single sign-on (SSO) to cloud applications.
    • Deployed FIDO2 phishing-resistant MFA organization-wide, reducing credential-based security incidents and hardening the organization’s authentication posture.
    • Registered and configured 20+ enterprise applications in Microsoft Entra ID, integrating them through OAuth 2.0 and OpenID Connect (OIDC) for secure, centralized sign-on.
    • Designed and deployed 10 Conditional Access policies in Entra ID, enforcing MFA and access requirements across users, cloud applications, and admin roles.
    • Lead identity administration and IT operations with a team of 2 technicians supporting 300+ users across cloud and on-premise environments.
    • Built 10+ Power Automate flows that automated manual administrative and data-entry workflows, making processing 20% faster; documented each build with a troubleshooting runbook for reuse.

  2. Sep 2022 – Apr 2025

    Netrix

    Remote

    Senior Security Analyst

    • Investigated and resolved 6,000+ security incidents annually, including unauthorized access, credential compromise, and account takeover, across 50+ client environments.
    • Monitored authentication activity and detected anomalous access behavior using Microsoft Sentinel, CrowdStrike, Elastic EDR, and Carbon Black.
    • Used Microsoft Defender for Cloud to assess security posture and remediate cloud misconfigurations across client Azure environments, and built Conditional Access policies to harden client sign-in controls.
    • Engineered 100+ threat detection rules and dashboards, improving visibility into identity and security events and reducing investigation time by 30%.
    • Built and maintained 30+ security and access-control runbooks that automated account lockdown and access revocation, cutting average resolution time by 25%.
    • Performed risk assessments on 100+ business applications and systems, identifying and remediating high-risk access and configuration findings.

  3. Jan 2021 – Jun 2022

    Omega Systems

    Reading, PA

    Security & Network Operations Engineer

    • Administered Active Directory and Azure AD (Entra ID) identities, group policies, and user access permissions for managed client environments.
    • Investigated and responded to security incidents, alerts, and suspicious network activity using SIEM platforms, resolving 100+ incidents monthly at 95% SLA compliance.
    • Managed endpoint security protecting 750+ workstations and servers from malware and unauthorized access.
    • Administered firewall policies, NAT rules, ACLs, and traffic filtering to enforce network security controls across multiple client sites.

Bachelor of Science, Information Technology, Western Governors University

Certifications

Identity and access

  • SC-300Microsoft Certified: Identity and Access Administrator Associate
  • OktaOkta Certified Administrator
  • SailPointSailPoint Certified IdentityNow Engineer / Professional

Cloud

  • AZ-104Microsoft Certified: Azure Administrator Associate
  • AWS CCPAWS Certified Cloud Practitioner

Foundations

  • Security+CompTIA Security+
  • Network+CompTIA Network+
  • A+CompTIA A+
  • Project+CompTIA Project+
  • ITIL 4ITIL 4 Foundation

Skills

Identity and access

Microsoft Entra ID, Okta, Active Directory, SSO, SAML 2.0, OAuth 2.0 / OIDC, Federation, Conditional Access, MFA / FIDO2, DUO, RBAC / ABAC, PAM / PIM, Access Reviews, Provisioning / Deprovisioning

Cloud platforms

Microsoft Azure, AWS, AWS IAM, Google Cloud Platform, GCP IAM, VMware

Security and monitoring

Microsoft Sentinel, Defender for Cloud, CrowdStrike, SentinelOne, Carbon Black EDR, Elastic EDR, Splunk

Scripting and automation

PowerShell, Microsoft Graph, Okta Workflows, Okta Management API, Power Automate, Python, Bash, HTML5, CSS, JavaScript

Governance and compliance

HIPAA, ITIL 4, Risk Assessment, Audit Documentation & Reporting

Open to identity, security, and infrastructure roles.

LinkedIn Resume (PDF)