Anthony Brayton

Hilltop Community Resources · Grand Junction, CO

• Administration. Manage a ~300-endpoint, three-site hybrid AD/Entra ID environment, including Intune, Windows Autopilot, Conditional Access, Entra PIM, Group Policy, Hyper-V, and Azure Virtual Desktop with FSLogix.
• Automation. Automate administration and delegation with PowerShell (including JEA endpoints and Intune-deployed scripts) and Power Automate flows for Microsoft 365 workflows. Run an Azure Automation job that audits Intune devices against actual sign-in patterns and reassigns the primary user to match real usage.
• Detection & response. Built Microsoft Sentinel ingestion (AMA / Azure Arc) with KQL detection rules for domain controllers, plus an automated playbook that alerts the team on use of emergency-access accounts. Deployed Defender for Endpoint via Intune with ASR rules. Hunt threats and serve as the escalation point for security events, investigating and helping contain suspected malicious activity and data loss incidents.
• Identity protection. Implemented risk-based Conditional Access (Entra ID Protection) that automatically requires MFA and a credential reset for risky users and sign-ins and revokes active sessions, containing likely account compromise without manual intervention.
• Security awareness. Rolled out KnowBe4 training and phishing simulations from a library of realistic templates, and tuned mail-flow and quarantine settings so simulations reach inboxes and test real-world user behavior.
• Email security & DLP. Implemented KnowBe4 Email Security (formerly Egress Prevent), which uses sending history to flag messages addressed to the wrong recipient, building on earlier Purview-only DLP.
• Audit & hardening. Audited Active Directory and Microsoft 365 against security baselines (ScubaGear, Maester) and remediated findings across certificate services, SMB signing, and privileged access using Credential Guard, Protected Users, and fine-grained password policies.
• Data protection & compliance. Use Microsoft Purview (auditing, eDiscovery), BitLocker, and Intune MAM/app protection to protect data on managed and BYOD devices. Support Colorado CBI CHRI audits and migrated CHRI data from internal servers to a hosted, CJIS-compliant storage solution.
• Vulnerability & patch management. Built an enterprise patch process on previously unused platforms, prioritize remediation by severity, exploitability, and business impact, and worked with an external penetration-testing team to validate and close findings.
• Networking & operations. Stood up multi-site monitoring with PRTG, support UniFi wireless and firewall/VPN connectivity, and chair weekly Change Control to review security and operational risk before changes go live.