formal resume

Steven Hoggatt

Back to portfolioDownload PDF

Steven Hoggatt

San Antonio, TX · resume@insideazure.com · LinkedIn

Senior IT Architect & Security Engineer

Enterprise architect with 18+ years of experience designing, securing, and modernizing large-scale Microsoft and DoD environments. Deep expertise in identity and access management, endpoint management (Intune/MECM), Zero Trust architecture, and security platforms including Defender XDR, Purview, and Sentinel. Proven track record leading cloud identity migrations, automating remediation workflows, and aligning security controls to NIST and federal compliance standards.

Certifications

  • CISSP — ISC² (Certified Information Systems Security Professional)
  • SecurityX (CASP+) — CompTIA
  • Azure Fundamentals (AZ-900) — Microsoft
  • ITIL 4 Foundation — PeopleCert
  • Additional legacy Microsoft certifications available upon request

Core Technical Skills

  • Identity & Access: Entra ID, ADFS (Active Directory Federation Services), Azure AD Connect, MFA, Conditional Access, PKI
  • Endpoint Management: Intune, MECM (Microsoft Endpoint Configuration Manager), OSD (Operating System Deployment), WSUS (Windows Server Update Services), Tanium
  • Security: Defender XDR, Sentinel, Purview (DLP, Sensitivity Labels, Insider Risk), Splunk
  • Cloud & Infrastructure: Azure IaaS, VPN, NPS/RADIUS, Hyper-V, VMware, SAN/NAS
  • Automation: PowerShell, security orchestration, remediation workflows

Professional Experience

Solution Architect / Platform Engineer — a federal health agency

April 2017 – Present (concurrent with a Texas K-12 public school district)

  • Supported the agency enterprise modernization as part of Architecture, Advanced Concepts, and Engineering (the architecture team).
  • Contributed to an enterprise analytics program (the analytics program) efforts, focused on enterprise analytics and operational visibility.
  • Designed Splunk dashboards and metrics to provide actionable insight across the agency platforms.
  • Engineered and supported large-scale MECM environments; troubleshot issues spanning GPO, SQL, networking, and firewall dependencies.
  • Assisted governance and data classification initiatives using Microsoft Purview.
  • Supported WSUS, Tanium, and MECM coexistence in high-security environments.

IT Consultant / Architect — a Texas K-12 public school district (San Antonio, TX)

April 2015 – Present (concurrent with a federal health agency)

  • Architect and engineer hybrid on-prem and cloud infrastructure supporting districtwide operations.
  • Led migration from legacy ADFS to Microsoft Entra ID, simplifying identity architecture and improving authentication resilience.
  • Designed and operated MECM + Intune co-management strategy to accelerate patching and endpoint modernization.
  • Implemented Always-On VPN using NPS (Network Policy Server), Certificate Authority, and RADIUS for secure remote access at scale.
  • Deployed and operationalized Defender for Endpoint and Microsoft Sentinel, including custom detections and automated remediation.
  • Implemented Zero Trust foundations: passwordless MFA, Conditional Access, and device trust enforcement.
  • Designed and enforced Microsoft Purview DLP (Data Loss Prevention), sensitivity labeling, and Insider Risk policies aligned with NIST requirements.

Solution Architect — Prism Technologies Group LLC (San Antonio, TX)

January 2014 – February 2017

  • Lead architect within a small MSP team supporting 24 enterprise customers.
  • Led Office 365 migrations from Exchange 2003/2007, POP, and GroupWise environments.
  • Implemented Azure AD Connect (DirSync) and ADFS SSO solutions.
  • Designed Azure architectures including site-to-site VPNs, disaster recovery options, ARM templates, and backup strategies.
  • Engineered network upgrades using Cisco Meraki, Dell enterprise switches, and pfSense.
  • Delivered infrastructure assessments aligned to Microsoft best practices.

Earlier Career

  • Blades System Administrator — Forgentum / Consultis (January 2013 – December 2013): Migrated 500+ the agency systems from legacy VMware to blade infrastructure.
  • System Administrator / Support Specialist — Vista Technical Services / Mystikal Solutions (January 2006 – December 2012): Supported classified DoD environments; managed enterprise Windows, Exchange, storage, virtualization, and automation initiatives.

Education

Bachelor of Business Administration (BBA), Management Information Systems — Angelo State University