/ resume

Shawn Tavares

Systems Engineer · Azure & M365 Specialist

Experience
  1. Oct 2022 — Present

    Systems Engineer

    Greater Essex County District School Board

    • Migrated applications and users from ADFS to Azure cloud-based authentication, consolidating identity under Entra ID.
    • Managed Azure enterprise applications, IdP configurations, and Azure Virtual Desktop environments.
    • Deployed Netskope and Zscaler; implemented Microsoft Defender ATP with web-content filtering indicators and Attack Surface Reduction rules.
    • Renewed Root CA infrastructure and redeployed certificates across all production servers, workstations, and users.
    • Rolled out Azure Arc Update Management across the server fleet for automated patch compliance.
    • Developed custom PowerShell tooling for technicians to automatically upload hardware hashes into Windows Autopilot.
    • Created and managed Intune configuration and compliance policies; administered iOS and macOS device management.
    • Automated recurring tasks via PowerShell, reducing manual effort across IT operations.
  2. Oct 2020 — Oct 2022

    Client Systems Architect

    Greater Essex County District School Board

    • Constructed and maintained Azure Virtual Desktop as a cost-saving measure for high-end computing needs; implemented Nerdio for AVD automation and integrated Teradici.
    • Managed Azure AD and Active Directory; enforced Group Policy for local devices and configuration policies for Intune-managed devices.
    • Implemented Attack Surface Reduction rules board-wide through Microsoft Defender.
    • Wrote PowerShell scripts for security remediations, application deployments, and registry changes.
    • Built and maintained SCCM task sequences including installed applications, drivers, and Windows build management.
    • Maintained server hardware and services across 72 schools; assisted with SAN rebuild at the Disaster Recovery site.
    • Managed AirWatch MDM platform — profile building, application license management, and device restrictions.
    • Rigorous testing of cloud and local applications; created technician and end-user documentation.