ANTHONY(1)Career ManualANTHONY(1)

NAME

anthony - principal technologist, cloud, infrastructure, identity, and security

SYNOPSIS

anthony [--entra-id tenant] [--active-directory forest] [--exchange] [--pki ca] [--intune] [--dns zone] [--powershell] [--sailpoint] [--iac]

DESCRIPTION

Principal Technologist in Las Vegas working on pretty much everything — Entra ID, Active Directory, PKI, Intune, Microsoft 365, and more.

Over a decade of IT infrastructure engineering and architecture in the gaming and retail sectors: designing and implementing infrastructure, driving large-scale migrations, and putting modern identity, cloud architecture and automation to work across enterprise environments. Known for problem-solving, root cause analysis and solution documentation, including under pressure.

OPTIONS

--entra-id tenant: Conditional Access design and the move from Okta to Entra ID; Windows Hello for Business (Cloud Kerberos Trust, Hybrid Certificate Trust); group-based licensing; Microsoft Graph.
--active-directory forest: Hybrid Active Directory at enterprise scale: designed the greenfield forest that replaced 12 production forests, and stabilized a corrupted production forest with zero downtime.
--exchange: Hybrid Exchange architecture; Exchange automation moved to modern authentication and into SailPoint.
--pki ca: Certificate authorities: baseline templates and distribution for Windows endpoints and domain controllers; migrated from Microsoft CA to DigiCert ONE.
--intune: Microsoft Intune and MECM/SCCM: 20,000+ Windows endpoints moved to Intune, Privileged Access Workstations with Credential Guard, RBAC built on a naming convention and dynamic groups.
--dns zone: Infoblox DDI, Azure Private DNS, and email domain protection with RedSift OnDMARC.
--powershell: Automation end to end: Microsoft Graph, Exchange, license clean-up, payment-device file sync.
--sailpoint: Identity automation flows — Exchange automation moved off Windows Server jobs and into SailPoint.
--iac: [The infrastructure as code underneath it: tools and what it deploys.]

EXPERIENCE

Principal Technologist, [Company] [2025] – present

[What you own, in one line.]
[A result, with a number in it.]

Lead Architect, MGM Resorts International Dec 2016 – [2025]

Architecture for enterprise-scale projects across Active Directory, Entra ID, Exchange, Intune and MECM, Microsoft 365 and DNS; modern identity aligned with industry standards and regulatory frameworks; SME guidance across a wide set of responsibilities.

before that: Solutions Architect II (2023–2025) · Lead Systems Engineer (2022–2023) · Senior Systems Engineer (2020–2022) · Service Delivery Optimization Engineer (2018–2020) · Senior Computer Engineer (2016–2018)

Architected a greenfield hybrid Active Directory to consolidate 12 production forests into one, with a 12-month migration plan, built with internal and external partners, for 3,000+ servers, 20,000 endpoints and 60,000 users.
Designed and implemented a new Conditional Access stack to move identity from Okta to Entra ID, and moved Microsoft 365 licensing from Okta entitlements to Entra ID group-based licensing.
Streamlined the Conditional Access policy set and modernized authentication requirements to industry standards, and brought Island Enterprise Browser in under Conditional Access.
Rolled out modern identity across the enterprise: Windows Hello for Business (Cloud Kerberos Trust and Hybrid Certificate Trust), Imprivata OneSign and Credenti TecUNIFI.
Designed Privileged Access Workstations with Intune and Credential Guard, using FIDO2/WebAuthn SSO for remote access to the workstations and servers in scope.
Migrated 20,000+ Windows endpoints to Microsoft Intune, and removed 15 million+ security vulnerabilities from Windows endpoints in six months.
Recovered $2M+ in Microsoft licensing with automation that removes stale users.
Recovered $1.8M+ in revenue lost to a misconfigured production system, clearing the way to upgrade BarTech.
Stabilized a corrupted production hybrid Active Directory forest with zero downtime, and built a non-production forest to stage changes before they reach production.
Migrated PKI from Microsoft CA to DigiCert ONE, and standardized certificate templates and distribution across Windows endpoints and domain controllers.
Implemented RBAC and SAML SSO for BeyondTrust Remote Support across 24,000 endpoints and 3,000 servers.
Built a REST API–driven IT asset management system on S3-compatible storage that logs, monitors, alerts on and automates Windows and macOS endpoints through the MDM.
Architected, built and deployed PowerShell automation for payment-device file sync — the last roadblock in refreshing 12,000+ assets across the enterprise.
Moved Exchange automation from basic to modern authentication, and from Windows Server jobs to SailPoint flows.
Earlier: led the move to the Modern POS client across the enterprise; supported point-of-sale and hotel systems (Dynamics 365 POS, Agilysys Infogenesis, FreedomPay, Oracle Opera); VIP and executive support on the Strip, including the hardware upgrade for the Park MGM remodel.

Covert Agent (Remote Support Engineer), Best Buy, Geek Squad Sep 2014 – Dec 2016

Remote support for Geek Squad business and consumer customers: macOS and Windows, applications, threat assessment and removal, home networks, printers and peripherals.
Walked customers through their new technology, against a 90% NPS target.

EDUCATION

High school diploma — Northwest Career and Technical Academy, Las Vegas (subjects: A+)

AUTHOR

Anthony Zita, Las Vegas, Nevada.