Keveen Patel
Senior IT & Identity Engineer | Microsoft 365 · Entra ID · SOC 2 Type 2 · Security Automation | Picks up scope mid-crisis and ships. Built to hold the line through audits, incidents, and reorganizations.
Hire this person
Send a job offer directly to this candidate
About
Senior IT and identity engineer with 5 years of progressive ownership across Microsoft 365, identity governance, endpoint security and compliance automation. Technical owner of SOC 2 Type 2 readiness at a US AI startup and sole IT engineer for a workforce spanning five countries. Previously promoted four times in four years to Associate Director after the prior IT lead was suddenly terminated.
Drove Microsoft Secure
Score from the low 60s to 82.97, passed two CARF audits and a CIS IG1 assessment as sole technical lead, and owned a CAD $330K IT budget.
Experience
Senior IT Engineer (Contract) at Dot Ai (2025-11 – 2026-07)
Sole IT engineer for a workforce across 5 countries (Brazil, Germany, US, UK, India), covering identity, endpoints, compliance and incident response.
- Led incident response for two credential compromises in six months: an external AWS SES phishing campaign and an internal account breach. Contained both across Microsoft 365, Google Workspace and Drata within hours, with executive root-cause analysis the same business day.
- Technical owner of SOC 2 Type 2 readiness. Built the control inventory covering 236 in-scope controls crosswalked to SOC 2, ISO 27001 Annex A and NIST SP 800-171, with hash-verified evidence and automated integrity checking. Surfaced 97 controls whose approver had left the company.
- Built an ~80-script PowerShell and Microsoft Graph estate as a tested module with 89 unit tests, static analysis and secret scanning in CI, plus fail-closed guardrails that limit bulk identity operations by blast radius.
- Architected Joiner-Mover-Leaver automation across Entra ID, Google Workspace and Drata (SOC 2 CC6.2, full audit trail), and configured Drata monitoring across 40+ controls.
Global
Administrator across Microsoft 365, Entra ID, Intune, Google Workspace, AWS, Slack and Atlassian.
- Architected Zero Trust from greenfield (NIST SP 800-207): Conditional Access, Microsoft Defender XDR, Intune UEM and BitLocker/FileVault across 150+ endpoints on four operating systems, raising Secure Score from the low 60s to 82.97 and unlocking cyber insurance eligibility.
- Sole technical lead for two CARF accreditation audits and a CIS IG1 assessment. Authored the full IT policy suite covering Acceptable Use, Information Security, Remote Work, Device Management and BCP/DR, aligned to BC PIPA and FOIPPA.
- Migrated the organisation to corporate-owned, Entra ID-joined endpoints via Windows Autopilot, cutting provisioning from 2 hours to 30 minutes per device. Ran three hardware refresh cycles through NIST SP 800-88 secure disposal.
- Engineered 4 production Power Apps and 280+ automated lifecycle events.
Power
Automate workflows processed 150+ onboarding and 130+ offboarding events, cutting manual administrative effort 40-50%.
- Owned a CAD $330K IT budget as sole department head, renegotiating telecommunications for a 30% cost reduction. Reported monthly to the Board of Directors on security posture, roadmap and budget variance.
Associate Director of Information Technology at Terrace & District Community Services Society (TDCSS) (2021-09 – 2025-09)
Promoted four times in four years, from IT Assistant to IT Administrator to Senior Manager to Associate Director, after the prior IT lead was suddenly terminated and left a 170-staff organisation across 10+ sites with no senior IT coverage.
Education
Post Graduate Diploma in Information Technology – College of New Caledonia
B.Sc. in Mathematics, Statistics & Computer Science – Osmania University
