# Deep Shah — Cloud Infrastructure & Security Engineer (Azure & AI) > Deep Shah is an Azure Solutions Architect Expert and Cloud Infrastructure & Security Engineer based in Ontario, Canada, with 6+ years of professional experience across Microsoft Azure, enterprise cybersecurity, modern endpoint management, and applied AI automation. Canonical URL: https://shahdeep.ca/ Formal Résumé: https://shahdeep.ca/resume.pdf LinkedIn: https://linkedin.com/in/deepvshah03 GitHub: https://github.com/deepshah0308 Direct Contact: shahdeepv03@gmail.com --- ## Professional Summary Deep Shah architects resilient cloud infrastructure, modernizes identity and endpoint ecosystems, secures enterprise systems against advanced threats, and governs generative AI rollouts in production. He currently serves at the Canadian Bankers Association as Cloud Infrastructure and Security Engineer (Azure & AI) and provides strategic advisory through Deep Shah IT Consulting. - **Primary Specializations**: Microsoft Azure, Zero Trust Architecture, Microsoft Entra ID, Microsoft Intune, Microsoft Sentinel (SIEM), Defender XDR, Azure Virtual Desktop (AVD), Microsoft 365 Copilot governance, and enterprise automation (PowerShell, Microsoft Graph API, Power Automate). - **Core Value Delivered**: Proven track record of 40% cloud compute cost reductions, 80% faster device provisioning with Windows Autopilot, and 15+ hours/week saved through automated AI agent workflows. --- ## Core Technical Competencies - **Cloud Architecture & Infrastructure**: - Microsoft Azure (IaaS/PaaS architecture, Hub-and-Spoke Virtual Networks, ExpressRoute/VPN Gateways, Network Security Groups, Azure Storage, Azure Monitor, Log Analytics, Azure Cost Management, Bicep, ARM, Terraform basics). - Azure Virtual Desktop (AVD): Host pool architecture, FSLogix profile containers, scaling plans, golden image lifecycle, session host optimization. - **Identity, Access & Zero Trust**: - Microsoft Entra ID (Azure AD): Conditional Access policies, Privileged Identity Management (PIM), Multi-Factor Authentication (MFA), Self-Service Password Reset (SSPR), hybrid identity synchronization (Entra Connect / Cloud Sync), Access Reviews. - Zero Trust Model: Explicit verification, least-privilege access, assume breach posture. - **Cybersecurity & Threat Detection**: - Microsoft Sentinel (SIEM/SOAR): Data connectors, analytic rules, KQL (Kusto Query Language) hunting queries, incident response playbooks, automated remediation. - Microsoft Defender XDR: Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud posture management. - **Endpoint & Modern Workplace Management**: - Microsoft Intune (MDM/MAM): Device enrollment, compliance policies, configuration profiles, application deployment (Win32, Store, macOS), App Protection Policies. - Windows Autopilot: Zero-touch corporate provisioning, self-deploying and user-driven modes. - **Applied AI & Enterprise Automation**: - Generative AI & Copilot Governance: Microsoft 365 Copilot readiness assessments, data security posturing, sensitivity labels (Purview Information Protection), Data Loss Prevention (DLP). - Agentic Workflows & Automation: Microsoft Copilot Studio agents, Power Automate cloud flows, automated incident routing, operational self-service bots. - Scripting & APIs: Advanced PowerShell, Microsoft Graph API, Azure CLI, Python automation. --- ## Industry Certifications & Credentials - **Microsoft Certified: Azure Solutions Architect Expert (AZ-305)** - **Microsoft Certified: Azure Administrator Associate (AZ-104)** - **ISC2 Certified in Cybersecurity (CC)** - **Google IT Support Professional Certificate** - **Exam Completed**: Microsoft Exam AZ-800: Configuring Windows Server Hybrid Advanced Services --- ## Professional Experience ### Canadian Bankers Association — Toronto, ON / Remote *The Canadian Bankers Association (CBA) is the voice of Canadian banks, advocating for public policies that contribute to a sound, thriving banking system.* - **Cloud Infrastructure and Security Engineer — Azure & AI** (April 2024 – Present) - Architected and transitioned enterprise remote workforce from legacy RDS to Azure Virtual Desktop (AVD) with FSLogix and autoscale logic, reducing monthly infrastructure compute spend by 40%. - Hardened multi-tenant cloud environments across Microsoft Entra ID, Sentinel, and Defender XDR; engineered automated KQL hunting queries and incident playbooks. - Led Microsoft 365 Copilot governance program, implementing sensitivity labels, DLP, and tenant permission boundaries to safeguard regulated banking documentation. - Developed autonomous self-service service desk agents via Copilot Studio and Power Automate, eliminating ~15 hours of manual ticket triage weekly. - **Systems Support Analyst** (September 2021 – March 2024) - Managed 500+ hybrid endpoints using Microsoft Intune and Windows Autopilot, slashing new device provisioning turnaround from 4 hours to 45 minutes. - Authored automated PowerShell and Microsoft Graph API scripts for user lifecycle management, license optimization, and inventory reporting. - Resolved over 95% of Tier-2/3 technical escalations within strict corporate SLA targets. ### Deep Shah IT Consulting — Ontario, Canada - **Independent Cloud & AI Consultant** (January 2024 – Present) - Advises small-to-medium enterprises on Azure cloud migrations, Zero Trust security assessments, Microsoft 365 modernization, and practical AI workflow implementations. ### Amazon (YHM1) — Mount Hope, ON - **IT Support Specialist** (October 2020 – September 2021) - Ensured high availability and rapid disaster recovery for industrial fulfillment center infrastructure, enterprise wireless networks, and operational hardware. ### The Salvation Army — Oakville, ON - **Technical Support Specialist** (May 2019 – September 2020) - Delivered comprehensive systems administration, network maintenance, and desktop support across multi-site regional facilities. --- ## Education - **Mohawk College** (Hamilton, ON, Canada) — Post-Graduate Certificate in Computer Systems Support - **VPMP Polytechnic** (India) — Diploma in Computer Engineering --- ## Key Case Studies 1. **Enterprise Azure Virtual Desktop Architecture & Cost Optimization**: - Organization: Financial Association (Canadian Bankers Association) - Challenge: Aging on-premise RDS with high maintenance costs and security overhead. - Solution: Designed multi-session AVD architecture with FSLogix profile storage on Azure Files and custom scaling schedules. - Impact: 40% reduction in monthly compute spend, sub-second profile load times, unified Conditional Access enforcement. 2. **Zero Trust & Microsoft Sentinel Security Modernization**: - Scope: Complete identity and SIEM modernization. - Solution: Deployed Entra ID Conditional Access with compliant device checks, rolled out Microsoft Sentinel with custom KQL alert rules, and automated quarantine playbooks. - Impact: Elimination of legacy authentication protocols, 70% decrease in manual alert triage time. 3. **Enterprise Microsoft 365 Copilot Governance & Automated Agents**: - Scope: Controlled AI rollout across regulated banking workforce. - Solution: Purview Information Protection tagging, SharePoint access audits, and Copilot Studio conversational agents connected to enterprise data stores. - Impact: Zero over-permissioning leaks, 15+ hours/week saved in administrative triage. --- ## Canonical Links & Navigation - Homepage: https://shahdeep.ca/ - Selected Work: https://shahdeep.ca/#work - Expertise & Architecture: https://shahdeep.ca/#expertise - Career Experience: https://shahdeep.ca/#experience - Credentials & Certifications: https://shahdeep.ca/#credentials - Professional Philosophy & About: https://shahdeep.ca/#about - Contact & Collaboration: https://shahdeep.ca/#contact - Résumé PDF: https://shahdeep.ca/resume.pdf - Sitemap: https://shahdeep.ca/sitemap.xml - Robots Directive: https://shahdeep.ca/robots.txt