Ashwin Yadav

Microsoft Cloud, AI & Security Architect · Mumbai

Engineering secure Microsoft cloud environments.

I design and implement secure Microsoft cloud environments, AI-powered business solutions and automation systems that solve real operational challenges. Over 6+ years I have combined hands-on engineering with architecture, team leadership and business-focused delivery.

Explore work Download resume
  • SC-100Cybersecurity ArchitectExpert
  • SC-300Identity and Access AdministratorAssociate
  • SC-200Security Operations AnalystAssociate
  • AZ-500Azure Security EngineerAssociate

Policy 01 How I think about access

Policy path. Signal: Engineer signs in from an unmanaged endpoint. Decision: Conditional Access evaluates user, device and app. Controls: Grant Compliant, managed device; Require MFA and device trust for engineering workflows; Block Legacy authentication. Outcome: Unmanaged endpoint exposure reduced; legacy authentication retired.

Selected work

Case studies written as policies

View all 19

Each engagement reads like a Conditional Access policy: the conditions I found, the controls I applied, and the result. Client names are withheld.

Policy 01Software development & IT services

Enterprise identity security and Conditional Access

If
Engineering teams accessed corporate resources from unmanaged endpoints, legacy authentication remained available, and…
Then
Redesigned Conditional Access, planned and implemented a staged retirement of legacy authentication, strengthened MFA…
Result
Reduced unmanaged endpoint exposure
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • Device compliance

Policy 05Financial advisory & asset management

OAuth application and cross-tenant access governance

If
Third-party integrations, external application permissions, partner access boundaries and audit visibility required…
Then
Reviewed application integrations, established administrative consent governance, removed unauthorised or dormant…
Result
Brought application consent under administrative governance
  • Microsoft Entra ID
  • OAuth consent governance
  • Cross-tenant access
  • Audit logging

Policy 19Healthcare & financial services; in-house

Microsoft 365 Copilot readiness, integration and governance

If
Copilot can surface anything a user already has access to.
Then
Reviewed permissions before rollout using the SharePoint permission crawler, integrated Copilot with SharePoint and…
Result
Copilot enabled on a reviewed permission baseline
  • Microsoft 365 Copilot
  • SharePoint Online
  • Microsoft Teams
  • Microsoft Purview

Policy 09Enterprise IT services

Power Platform incident management

40% faster ticket triage

If
Ticket triage and incident workflows required more consistent handling.
Then
Delivered a Power Platform incident management solution to improve ticket triage and operational workflows.
Result
More consistent incident handling
  • Power Apps
  • Power Automate
  • Microsoft 365

Policy 14Enterprise IT

Automated Microsoft Defender alert triage

50% faster response time

If
Manual security alert triage and reporting affected operational response times.
Then
Automated alert triage and reporting with PowerShell and Microsoft Graph API to reduce manual processing and improve…
Result
Less manual alert processing
  • Microsoft Defender
  • PowerShell
  • Microsoft Graph API

Policy 15Enterprise

Enterprise Exchange Online migration

800 mailboxes, zero data loss

If
An enterprise mailbox migration required data integrity and business continuity.
Then
Led an Exchange Online migration of 800 mailboxes with controlled execution and a focus on service continuity.
Result
Zero data loss
  • Exchange Online
  • Microsoft 365

Capabilities

Every claim linked to its evidence

Like an audit evidence register: each capability shows how many case studies support it.

  • Identity & Zero Trust

    Zero Trust, Conditional Access, MFA, privileged access and identity governance on Microsoft Entra ID.

    6 evidence items

  • Compliance & information governance

    ISO 27001:2022, Microsoft Purview, DLP, information protection, retention governance and audit evidence.

    7 evidence items

  • Power Platform & business applications

    Dynamics 365, Power Apps, Power Automate, Power BI and SharePoint business processes.

    5 evidence items

  • Automation & engineering

    PowerShell and Microsoft Graph API automation for auditing, reporting and operations.

    4 evidence items

  • Endpoint, infrastructure & remote access

    Microsoft Intune, Exchange Online migrations, FortiGate and Palo Alto remote access.

    3 evidence items

  • AI & Copilot

    Copilot Studio assistants and Microsoft 365 Copilot adoption, integration and governance.

    2 evidence items

Approach

How I work

  1. 01

    Identity first

    Every access decision runs through Microsoft Entra ID, so identity controls are designed before anything that depends on them.

  2. 02

    Start from the business process

    I start with the business process, then select the right combination of applications, workflows and integrations.

  3. 03

    Least privilege, always auditable

    Automation and access are appropriately permissioned, and every important action leaves a record.

  4. 04

    Automate what must happen every time

    Maintainable automation improves consistency, reduces manual effort and gives operational visibility.

Experience

Six years, six roles

Full story

  1. December 2025 – Present

    Assistant Manager – IT

    Medikigai India Private Limited

  2. August 2024 – November 2025

    Team Lead – ITS

    Procentris India Private Limited

  3. August 2023 – January 2025

    Freelancer (Gigworker)

    Gigmos Solutions Private Limited

  4. January 2023 – July 2023

    Senior Engineer – Cloud & Infrastructure Management

    LTIMindtree

  5. November 2021 – January 2023

    Senior Technical Advisor – Intune & Security

    Concentrix, Pune

  6. August 2020 – October 2021

    Technical Support Intern

    Synosys Technologies LLC, Mumbai

User objectashwinyadav.com
Display name
Ashwin Yadav
User principal
ashwin@ashwinyadav.com
Job title
Microsoft Cloud, AI & Security Architect
Location
Mumbai, India · UTC+05:30
Assigned roles
  • Cybersecurity Architect SC-100 · Expert
  • Identity and Access Administrator SC-300
  • Security Operations Analyst SC-200
  • Azure Security Engineer AZ-500
Account created
2020
MFA
Enforced

Contact

Let's talk about secure Microsoft cloud work.

Email meLinkedInResume (PDF)

↑↓ to move · Enter to open · Esc to close