Zachary Ross Halpern

Accomplishments

• Web Development HTML/CSS Amazon Web Services (AWS) Security
  Portfolio Website – Deployed a personal portfolio website on AWS using S3 for hosting and CloudFront for secure delivery. Configured Route 53 for custom domain management and integrated Certificate Manager to ensure all traffic is encrypted via HTTPS.
• Intune PowerShell
  Built Intune Apps – I successfully leveraged the IntuneWinAppUtil via PowerShell to package and upload Win32 applications to Intune. To ensure a stable deployment, I performed rigorous validation using isolated security groups for testing and implemented robust detection methods, dependencies, and supersedence rules to manage the application lifecycle effectively. More Details
• Intune PowerShell Group Policy Management
  Engineered Legacy GPOs into Intune to Facilitate the Transition from Hybrid Joined to Entra Joined Devices. – Analyzed legacy GPOs via Intune Group Policy Analytics and manual review, successfully migrating them into Intune. This was achieved using device configuration policies or developing custom PowerShell scripts to replicate complex settings—such as registry key modifications—while ensuring thorough functionality testing and administrative oversight throughout the transition. More Details
• Intune Autopilot
  Optimized Intune's Autopilot – Optimized the Windows Autopilot deployment process, significantly reducing failure rates and improving overall consistency. By streamlining the provisioning phase to prioritize only 11 essential security applications and deferring the remaining software installations until the device reached the desktop, I ensured a more reliable and efficient "out-of-box" experience for users.
• PowerShell Exchange Online Management
  Manage Outlook Delegates Using PowerShell – Leveraged PowerShell to automate the provisioning of calendar delegates for leadership team. Using the Add-MailboxFolderPermission command, I granted executive assistants Editor permissions while simultaneously enabling the Delegate and CanViewPrivateItems flags, ensuring a seamless and secure scheduling workflow between the C-suite and their support staff. More Details
• Teams Entra ID Sharepoint
  Engineered Secure External Client Collaboration Using Teams – Developed a governed environment for external client engagement by implementing strict guest invitation restrictions and granular permission sets to ensure least-privilege access. By provisioning private, dedicated channels with standardized access controls, I established a secure and scalable communication framework that balances seamless internal collaboration with the rigorous protection of sensitive client data. More Details
• Documentation Incident Response Security
  Phishing Playbook – Developed and maintained the initial triage and response playbook for submissions to the phishing inbox, reducing time to respond and increasing consistency and effectiveness across the board.
• Zscaler Internet Security (ZIA) Zero Trust Access Segmentation
  Configured Zscaler Access Controls – Engineered new Zscaler Internet Access policy for a new line of service to segment internet access. Creating URL filtering rule, Okta group, and URL filtering categories.
• PowerShell Intune OneDrive Security
  Detection and Remediation Script to Prevent OneDrive Issues – Proactively engineered a detection and remediation script using Intune to resolve long standing onedrive issue to prevent data loss. More Details
• CrowdStrike Security
  Engineered new firewall policy – Engineered and deployed custom CrowdStrike firewall policies to facilitate specialized software communication. Managed the end-to-end configuration of host groups and rule groups, ensuring optimal policy precedence to maintain a robust security posture without disrupting default access protocols.