Available for Cloud, Migrations, Identity & Security projects

Andrzej Kaczmarek

Infrastructure & Cloud Architect

Microsoft Azure & Microsoft 365 — Cloud · Identity · Security · AI Solutions

  • 10+ years in IT infrastructure
  • 8 Microsoft certifications
  • Azure Solutions Architect Expert

about

Cloud engineering, end to end

Infrastructure & Cloud Architect with extensive experience across Microsoft cloud technologies, specializing in both Azure and Microsoft 365. I design and implement enterprise-scale cloud solutions with a deep focus on identity management built on Entra ID security frameworks and modern workplace solutions. I architect secure, compliant and highly available cloud infrastructures while optimizing costs and operational efficiency. Increasingly, I design and build AI-powered solutions — bringing generative AI and intelligent automation into enterprise cloud, identity and security workflows.

skills

Technical toolbox

A decade of hands-on work across Microsoft cloud, identity, automation and the on-premises foundations that still underpin most enterprises.

Microsoft 365 & Identity

identity
  • Entra ID (Azure AD)
  • Conditional Access Policies
  • Multi-Factor Authentication
  • M365 Security & Compliance
  • Exchange Online
  • Intune / Endpoint Manager

Azure Cloud

azure
  • Azure Infrastructure Services
  • IaC — Terraform, ARM, Bicep
  • Azure Networking
  • Azure Security
  • Azure Monitor
  • Azure DevOps

AI Solutions

ai
  • AI-powered solutions
  • Azure OpenAI Service
  • LLM integration & RAG
  • AI agents & assistants
  • Intelligent automation

Automation

automation
  • PowerShell
  • Azure CLI
  • Azure Policy
  • Azure Blueprint

Domain Services

on-prem
  • Active Directory (ADDS)
  • Group Policy (GPO)
  • DNS
  • DHCP
  • PKI

Virtualization

virtualization
  • Hyper-V
  • VMware vCenter

ITSM & Tooling

itsm
  • ServiceNow
  • Jira
  • Confluence
  • Tempo

certifications

Microsoft certified

Eight active Microsoft certifications spanning architecture, security, DevOps and identity.

  • AZ-305 Azure Solutions Architect Expert Expert
  • AZ-400 DevOps Engineer Expert Expert
  • AZ-500 Azure Security Engineer Associate Associate
  • AZ-104 Azure Administrator Associate Associate
  • SC-300 Identity and Access Administrator Associate Associate
  • SC-200 Security Operations Analyst Associate Associate
  • AZ-900 Azure Fundamentals Fundamentals
  • MS-900 Microsoft 365 Fundamentals Fundamentals

experience

Where I've worked

  1. ISCG Sp. z o.o.

    Current

    Warsaw, Poland · Full-time · 5 yrs 11 mos

    1. Infrastructure & Cloud Architect Mar 2025 — Present
    2. Senior Engineer Feb 2024 — Feb 2025
    3. Cloud Engineer Aug 2020 — Feb 2024
    • Designed and operated Azure infrastructure — networking, storage, compute, backup, Site Recovery and disaster recovery.
    • Led the migration from ADFS to Entra ID as the identity provider for enterprise applications.
    • Built Conditional Access policies, MFA, and Privileged Identity Management (PIM) for least-privilege access.
    • Designed and maintained Entra ID Connect synchronization with staging servers and DR procedures.
    • Automated provisioning and governance with Terraform, ARM and Bicep, wired into Azure DevOps CI/CD pipelines.
    • Applied a FinOps approach to drive cost optimization through automation and right-sizing.
  2. akdo.it

    Current

    Łódź, Poland · Self-employed

    1. Owner Aug 2020 — Present
    • Independent consulting on Microsoft cloud — Azure & Microsoft 365 architecture, migrations, identity and security.
    • Design and build AI-powered solutions: generative AI, LLM integrations and intelligent automation for enterprise workflows.
    • Help organizations adopt the cloud securely and modernize their digital workplace.
  3. Amcor

    Łódź Metropolitan Area · 5 yrs 2 mos

    1. GBS IT Workstations & Servers Specialist Jul 2017 — Jul 2020
    2. GBS IT Junior Engineer Jun 2015 — Jun 2017
    • Administered Active Directory, DNS, DHCP, NTP, PKI and Group Policy across the enterprise.
    • Managed VMware vCenter and Hyper-V environments — VM lifecycle, HA, backup and DR strategies.
    • Designed standardized VM templates and performance-tuned virtualized workloads.
    • Earlier: administered HPCA/RCA servers and Symantec Endpoint Protection (SEPM), and delivered Windows 10 & WSUS proof-of-concept projects.

contact

Let's build something reliable

Need a hand with Azure architecture, Entra ID, security or infrastructure as code? I'm open to consulting, contract and full-time work. Solve the quick check to grab my email, or just connect with me on LinkedIn.

Connect on LinkedIn ↗