Timothy Good

Senior IAM and Microsoft 365 Security Engineer with 15+ years of experience delivering identity governance, security, automation, and messaging solutions across banking, energy, higher education, healthcare, and regulated environments. Expert in Entra ID, Exchange Hybrid, M365 Security, Defender, Purview, Conditional Access, PowerShell, Microsoft Graph, Adaxes, and Quest Active Roles. Proven record of reducing access risk, automating lifecycle management, and strengthening Zero Trust architectures.

Lead Systems Administrator / M365 Lead at First National Bank of America (2025-08 – Present)

• Built enterprise Joiner/Leaver automation with Adaxes and PowerShell; reduced termination access removal from up to two weeks to 15 minutes.
• Designed RBAC and ABAC models using 78 job titles and 28 departments to automate access decisions.
• Implemented Conditional Access, passwordless modernization, Purview labeling, Endpoint DLP initiatives, and enhanced messaging security with DMARC reject enforcement.
• Automated onboarding, stale-account cleanup, privileged account lifecycle, and compliance reporting.

Principal Engineer (VP) at Comerica Bank (2024-09 – 2025-08)

• Architected Zero Trust Exchange 2019 environment spanning four datacenters.
• Migrated legacy MSOL automation to Microsoft Graph and created Exchange automation eliminating 250+ support tickets.
• Reduced operational backlog from 600+ tickets to approximately 200 through automation and process improvements.

Senior Platform Engineer at Consumers Energy (2022-04 – 2024-09)

• Built 20+ Quest Active Roles workflows integrating HR-driven identity provisioning and compliance controls.
• Led Proofpoint Email Fraud Defense rollout, DKIM implementation, and DMARC reject adoption.
• Reduced undeliverable mail volume from 250,000 per day to roughly 13,000 through transport optimization.

Office 365 / Email Administrator at Michigan State University (2013-03 – 2022-04)

Environment: 30k faculty/staff • 51k students • 180k alumni • 220 domains

• Identity & AD
• Managed OU structure, delegated admin, GPO templates, and AD automation for HR‑driven provisioning.
• Supported student/staff identity lifecycle before IAM team moved to Okta.
• Hybrid Identity & Messaging
• Sole engineer for Exchange hybrid migrations:
• 2010 → 2016 (3 mailbox servers, 2 datacenters)
• 2016 → 2019
• Migrated 50 departmental Exchange environments with 220 email domains into Microsoft 365 using custom PowerShell + Quest Migration Manager.
• Managed retention, journaling, and eDiscovery during high‑profile investigations (NDA‑restricted).
• Security & Incident Response
• Managed Barracuda → Proofpoint → EOP transitions; built complex SPF records.
• Responded to 100–150 student compromises/week; built scripts to disable accounts and scramble passwords.
• Implemented rate controls and anti‑reply‑all protections.

Field Support Analyst (Healthcare) at Dell Inc. (2010-07 – 2013-03)

Environment: 5,000 endpoints • HIPAA environment

• Built FOG imaging system; deployed Symantec endpoint encryption.
• Automated AV deployment using PSExec + VBScript, completing a month‑long project in 2 days.
• Produced ServiceNow reporting; maintained 4.85 customer rating and 98% SLA.

System Administrator (Charter Schools) at Convergent Technology Partners (2008-09 – 2009-10)

Environment: 5 schools • Multi‑domain forest

• Managed multi‑domain forest identity; implemented domain trusts.
• Built WSUS from scratch; moved XP SP1 → SP3 across all schools in 2 weeks.
• Deployed FOG imaging; imaged full labs in 20–30 minutes.
• Built FreeNAS storage with ABE; deployed Spiceworks monitoring.

BBA in Economics Minor – University of Michigan