I’m Deep Shah, a cloud and security engineer based in the Greater Toronto Area, Ontario. I’ve spent more than six years in IT, mostly in the Microsoft ecosystem. I also run Deep Shah IT Consulting.
What I work on
- Microsoft Intune and endpoint management
- Microsoft 365 Copilot and agents
- Security and AI governance
- Microsoft Azure: hybrid cloud, identity and cost governance
- Open source: I maintain awesome-intunetools, a curated list of Intune tools, and I created awesome-m365-copilot.
Certifications
-
Microsoft Certified: Azure Solutions Architect Expert AZ-305
2026
-
Microsoft Certified: Windows Server Hybrid Administrator Associate AZ-800
2025
-
Microsoft Certified: Azure Administrator Associate AZ-104
2024
-
ISC2 Certified in Cybersecurity
2023
-
Google IT Support Professional Certificate
2022
TODO: add verification links (Microsoft Learn or Credly profile) once I send them.
Selected work
Microsoft 365
One Microsoft 365 environment instead of two systems to manage.
- The situation
- A small business had email with one provider and a separate Microsoft 365 environment for collaboration. Accounts, licensing and administration were split across both, so nothing was simple to support.
- What I did
- Migrated all mailboxes into a single Microsoft-managed environment, standardized email addresses while keeping the old ones as aliases, configured a shared mailbox, set up laptops, reviewed MFA, and organized document access in Teams.
- Outcome
- The client gained direct administrative control and a simpler environment to support. After verifying the migration, they cancelled the former email licences.
Security
Microsoft Secure Score from 46.63 to 72.91 without disrupting the team.
- The situation
- A small professional-services team wanted stronger protection for its Microsoft 365 accounts and laptops without slowing down daily work.
- What I did
- Enforced MFA, reviewed account access, configured an emergency administrator account, brought company laptops under central management, deployed Microsoft Defender policies, and enabled link protection in Outlook and Teams.
- Outcome
- Microsoft Secure Score increased from 46.63 to 72.91. That reflects more recommended controls in place, not a guarantee against security incidents.
Why I write this
Admins are being asked to switch on Copilot and agents while keeping devices and data safe, often with little time to test. I write down what I check in a lab tenant, with sources, so you can make the same decisions faster. I also write on dev.to, including an AZ-305 study guide.
Links
