Kanaan Wray

Austin, TX · kanaanwray@gmail.com · LinkedIn · GitHub

Download PDF

Technical skills

  • Cloud platforms: Azure (VMs, Storage, Azure Monitor, IAM), Entra ID, AWS EC2 (basic), Microsoft 365 admin
  • Endpoint management: Microsoft Intune, Windows Autopilot, compliance policies, configuration profiles, app packaging and deployment, Jamf, Google Workspace Admin
  • Infrastructure: Windows Server, Active Directory, Group Policy, WSUS, VMware vSphere / ESXi, DNS, DHCP, VPN, Azure virtual networks
  • Identity & access: Okta, SAML / SSO, MFA policy management, RBAC, least-privilege enforcement, identity lifecycle management, Zero Trust, Conditional Access
  • Security & compliance: Microsoft Defender, Nessus, Veeam Backup, SOC 2 aligned endpoint hardening, vulnerability management
  • Automation: PowerShell (identity provisioning, access control, system configuration), Python (basic), Docker (basic), Terraform (basic)
  • Monitoring: Azure Monitor, Log Analytics, Datadog

Professional experience

IT Support Engineer II (Endpoint & IAM Engineering) · TheZebra

September 2025 – April 2026

  • Built Intune endpoint management from the ground up, transforming a loosely enforced environment into a standardized, secure system with defined compliance baselines across 300+ endpoints.
  • Led enterprise migration of 300+ endpoints from Windows 10 to Windows 11 through staged deployment rings, compatibility testing, and phased rollout with minimal user disruption.
  • Eliminated standing local administrator access across 300+ endpoints by implementing RBAC and privileged access workflows, reducing attack surface and aligning with security best practices.
  • Packaged and deployed enterprise applications via Intune, replacing ad hoc installs with standardized, auditable software distribution.
  • Administered Okta, Entra ID, and Google Workspace for identity lifecycle management, SSO, and access control; enforced SOC 2-aligned identity and device security controls.
  • Automated routine tasks using PowerShell: group access provisioning, mailbox modifications, printer SMTP deployment, and policy automation.

System Administrator · FirstDay Foundation

March 2024 – August 2025

  • Administered hybrid Windows Server infrastructure supporting ~2,000 users across 180+ virtual machines in VMware vSphere environments spanning multiple data center sites.
  • Administered Windows Server environments including Active Directory, Group Policy, and WSUS patch management; performed routine hardening and vulnerability remediation using Defender and Nessus.
  • Monitored infrastructure health and built custom alerting dashboards in Azure Monitor and OPMAN, providing real-time visibility across hybrid on-prem and cloud environments.
  • Supported core infrastructure services including DNS, DHCP, and VPN, ensuring reliable network connectivity across hybrid on-prem/cloud environments.
  • Managed Entra ID (Azure AD) as core cloud identity platform, enforcing access policies, RBAC, and conditional access across hybrid environments.
  • Developed and maintained documentation for system configurations, operational procedures, and infrastructure topology.

IT Helpdesk Technician · MVM Inc

March 2022 – March 2024

  • Supported launch of 4 remote sites and deployed 100+ endpoints (laptops, mobile devices, printers) with asset tracking and monitoring.
  • Provided 24×7 on-call support in rotating schedule; diagnosed and resolved system, network, and peripheral issues for remote and on-site users.

IT Help Desk Technician · QA Systems Inc

August – October 2022

Tier 1–2 remote support across 126 Austin ISD schools.

Education & certifications

  • Associate of Computer Science — Northeast Lakeview College, 2023
  • CompTIA Security+
  • Microsoft Azure Fundamentals (AZ-900)
  • Azure Administrator Associate (AZ-104)