Lily Lilac

Curriculum Vitae

Security Leader & Microsoft Security Architect | Entra ID · Zero Trust · Purview · Defender XDR

Microsoft security architect and team leader with 20+ years in Microsoft technologies, securing everything from 65,000-seat and 100,000+ user global enterprises to regulated banks. Designed CollabPoint's complete security services framework and lead the Microsoft 365, Entra ID, Conditional Access, PIM, Purview, Defender XDR, and Sentinel engagements built on it, including remediation that has carried clients through regulatory audits. Managed a team of six architects at IBM and spent 20+ years as a Microsoft Certified Trainer, teaching roughly 500 students a year at Microsoft and mentoring other trainers. Seeking a remote security leadership role building and leading a security team.

Skills

Leadership

Identity & Access

Security Operations

Data Protection & AI Readiness

Compliance & Resilience

Automation & Platforms

Certifications

Professional Experience

CollabPoint LLC10/2025 – Present

Solutions Architect, Security & Compliance

  • Designed CollabPoint's complete security services framework, covering Microsoft 365 and Active Directory (AD DS) tenant assessments, PIM governance, Microsoft Purview, Conditional Access, and Defender, including Good-Better-Best maturity models; assessments consistently convert into follow-on implementation engagements.
  • Designing CollabPoint's upcoming Microsoft-native managed SOC/MDR service built on Sentinel and Defender XDR: a 25-document program covering service boundaries, SLAs, incident severity, escalation and RACI, evidence handling, client onboarding, and executive reporting.
  • Led 10 Microsoft 365 and Entra ID tenant assessments across about 12 SMB clients, including 4 banks and a government contractor, turning findings into phased roadmaps that start with low-disruption quick wins.
  • Designed a 3-year security roadmap for a bank spanning Conditional Access, PIM, Defender, Microsoft Sentinel, and Purview, significantly reducing its attack surface and protecting privileged and high-value accounts; also designed its Conditional Access–governed B2B guest onboarding.
  • Delivered 5 Conditional Access and 6 PIM deployments: persona-based baselines, report-only staging, break-glass accounts, legacy authentication retirement, phishing-resistant MFA readiness, and just-in-time privileged access with approval workflows and access reviews.
  • Delivered 2 full Purview Exact Data Match (EDM) sensitive information type deployments and dozens of sensitivity labels across clients, with email and at-rest encryption and labeling of on-premises Windows Server file shares managed through Purview.
  • Led remediation that took two clients through successful regulatory audits; assess Azure posture for banks against the CIS Microsoft Azure Foundations Benchmark, mapped to FFIEC, NCUA, and NIST, and build Copilot governance roadmaps aligned to NIST AI RMF.

Microsoft04/2019 – 03/2025

Microsoft Technical Trainer

  • Trained roughly 500 enterprise customers, partners, and internal staff a year (about 3,000 total) in Azure and Microsoft security, teaching AZ-900, AZ-104, AZ-300, AZ-305, and AZ-500.
  • Led Train-the-Trainer programs for Authorized Training Centers and contractors, mentoring cohorts of 3–10 trainers to improve technical accuracy and delivery consistency across regions.
  • Built hands-on labs, workshops, and course content on Microsoft cloud architecture, identity, security controls, and governance.
  • Worked with engineering and product groups to keep enablement current with Azure, Microsoft 365, identity, and security capabilities.

Amazon Web Services04/2018 – 04/2019

Senior Technical Trainer

  • Taught AWS certification tracks (Cloud Practitioner, Solutions Architect – Associate and Professional, Security – Specialty, Advanced Networking – Specialty) to enterprise customers and partners, including government customers on AWS C2S.
  • Built 10–15 labs and training modules used in AWS's global curriculum.
  • Developed Train-the-Trainer programs for partner organizations and mentored internal and external trainers.

IBM (formerly AT&T Hosting & Application Services)12/2008 – 04/2018

Principal Technical Architect / Microsoft Technologies SME

  • Managed a team of 6 SharePoint and Microsoft platform architects delivering enterprise identity, collaboration, security, and disaster recovery solutions for Fortune 500 clients.
  • Architected AD FS single sign-on for a global hospitality company with 100,000+ users and hundreds of applications, and designed the consolidation of 400+ Windows NT, 2000, and 2008 domains down to 4.
  • Designed a SharePoint business continuity and disaster recovery (BCDR) architecture for 65,000 seats across US and European data centers, achieving a 2-hour RTO and 1-hour RPO against required targets of 8 hours and 4 hours.
  • Partnered with customer stakeholders to define requirements, communicate architecture decisions, and guide implementation and automated operations with PowerShell, VBScript, and T-SQL.
  • Recognized with the AT&T Diamond Club Award (2010) for technical excellence and impact.

Additional Experience

Speaking, Writing & Community