~/brand.ao
Sérgio Brandão.
Systems & Infrastructure Administrator
Portugal · Remote (EMEA)

I'm a systems and infrastructure administrator. I run identity, endpoint and cloud platforms end to end, from access policy and device compliance to cloud network design and email security. I've done this in global enterprises and in lean, remote-first companies alike.
My work is security-led and automation-first. Access controls, compliance and Zero Trust principles are part of the design, not an afterthought, and anything repeatable becomes a script or a workflow: consistent, documented and auditable.
Focus areas
- IdentityEntra ID · Conditional Access · PIM · SSO/SCIM
- EndpointIntune · Autopilot · Win32 packaging · Defender
- Microsoft 365Exchange Online · DMARC/DKIM/SPF · Purview
- AzureHub-and-spoke · VPN Gateway · RBAC
- AutomationPowerShell · Microsoft Graph SDK · Power Automate · REST APIs
- DevelopmentJavaScript · TypeScript · Node.js
- AtlassianJira Service Management · Assets/CMDB · Confluence
- Platform as codeTerraform · Cloudflare · GitHub Actions