Joshua Wisniewski

Experience

Driven to build and deploy practical automation solutions while keeping communication clear and friendly, ensuring that everyone from end users to leadership can understand and embrace the changes being made.

CleanSlate Centers Inc | Cloud Administrator

• Migrated on-premises GPOs to Intune Configuration Profiles, modernizing device management across the organization.
• Migrated on-premises domain controllers to Azure VMs, including validating and correcting DNS configurations to ensure a stable hybrid environment.
• Led the end-to-end migration of on-premises Cisco phone systems to Microsoft Teams Phone across 75 clinic locations in 7 states, covering approximately 500 employees. Collaborated with stakeholders from end-users to C- level leadership to align financial requirements and operational needs throughout the project. Automated network and geographic data collection by developing Python scripts against the Meraki API, and provisioned secure vendor access via an Azure App Registration backed by an Ubuntu Azure VM configured to automatically rotate connection credentials on a scheduled basis. Enforced authentication controls using Conditional Access policies and IP whitelisting in Entra ID to restrict Teams Phone logins to approved clinic staff and locations.
• Led the migration of the telehealth delivery platform from Zoom to Microsoft Teams across all clinic locations, drastically lowering annual licensing costs. Collaborated with stakeholders from end-users to C-level leadership to ensure financial justifications and user needs were identified and addressed throughout the rollout. Deployed laptops using Intune Autopilot with kiosk mode and AppLocker policies restricting devices to a single patient-facing portal, and developed PowerShell scripts to automatically clear the Teams cache after each session to maintain HIPAA compliance. Enrolled iPads through Apple Business Manager with zero-touch MDM profiles, enabling direct drop-ship provisioning to clinic locations without on-site IT intervention.
• Configured Windows patching using Intune update rings with user-facing alerts notifying employees when patching is due, allowing three deferrals before a forced update to balance productivity with security compliance.
• Created multiple software packages and remediation scripts in Intune, assigned via dynamic Entra ID groups, to maintain a uniform environment across all managed devices.
• Managed all organizational iPads and iPhones, both BYOD and company-owned, using Apple Business Manager and Intune, including annually renewing certificates and tokens to ensure enrollment and management workflows were never interrupted.
• Migrated the organization's email backup platform from Acronis cloud backups to Mimecast email backups, ensuring continuity of email retention and recovery capabilities.
• Facilitated a do-not-reply email flow enabling clinics to send patients meeting information while automatically alerting recipients that the mailbox is unmonitored.
• Performed a local file share migration to SharePoint for multiple departments using the SharePoint Migration Tool, moving department data into a centrally managed cloud environment.
• Automated M365 license assignment by mapping dynamic Entra ID groups — populated automatically from user identity attributes — to license bundles, streamlining the onboarding process and eliminating manual license provisioning.
• Managed patching of Teams hard phones through the M365 Teams Admin Center and administered call queues using M365 groups.

CDL Nuclear Technologies | Systems Analyst

• Migrated on-premises GPOs to Intune Configuration Profiles and designed automated device deployment workflows using Intune Autopilot, update rings, application deployments, and LAPS for local admin security.
• Configured and deployed BitLocker disk encryption via Intune Endpoint Security across all managed endpoints.
• Configured Intune MDM for iOS devices used by remote and in-office employees.
• Deployed and configured SharePoint sites with appropriate permissions to support collaborative work across the organization.
• Migrated on-premises redirected folder profiles to SharePoint/OneDrive using Active Directory GPOs and Intune configuration profiles.
• Designed and implemented a fully automated onboarding and offboarding system driven by a Power Automate flow monitoring a dedicated mailbox, which triggered Azure Automation Runbooks to provision or deprovision accounts using the MS Graph API, Active Directory, and Exchange Online PowerShell modules. Automated OneDrive data backup to SharePoint on offboarding and configured redirected folder profiles through Intune Autopilot enrollment. Secured the pipeline end-to-end with RBAC and Azure Key Vault to enforce least-privilege access across all automation components.
• Automated a recurring billing file transfer process by building a secure SFTP pipeline using OpenSSH and WinSCP between a remote server and Azure Blob Storage. Configured the workflow to trigger automatically on file arrival, invoking a Power Automate flow that called Azure Automation Runbooks to transfer and organize billing files into the correct Blob Storage containers, eliminating manual handling and improving the reliability and auditability of the billing pipeline.
• Streamlined PET/CT audit processes by developing a Python BeautifulSoup web scraper to extract targeted data from the IAC website in a scalable and repeatable manner.
• Eliminated manual billing data entry from screen captures by implementing Pytesseract to leverage the Tesseract OCR engine, automating extraction of billing information directly into Excel.

Slippery Rock University | IT Generalist

• Prepared, deployed, and maintained licensing for enterprise software (Adobe, MS Office, IBM SPSS, AutoCAD).
• Reviewed, tested, and deployed Microsoft Windows patches for approximately 3,000 Windows 10 endpoints (Quest KACE SMA).
• Created, updated, and automated Windows deployments to ensure a secure environment (Quest KACE SDA).
• Researched, designed, tested, and linked GPOs across the domain to provide a structured and uniform Windows experience.
• Maintained and upgraded campus system management and deployment appliances (Quest KACE SMA and SDA), including reviewing and restructuring the entire campus patch schedule to ensure the appliances were not overloaded with tasks.
• Constructed and deployed an upgrade plan for Windows SAC updates that brought campus security compliance from 5% to 95%.
• Troubleshot and automated solutions for frequent campus-wide issues impacting the Windows environment (PowerShell, Batch, Quest KACE SMA).

United Plate Glass | IT Analyst

• Rebuilt Active Directory structure and Group Policies after the company was hit by a ransomware attack and lost the previous design.
• Created a computer and application inventory system using IIS, Snipe-IT, and MariaDB.
• Built a Power BI workflow that displayed manufacturing floor data points on a live-updating graph, tracking current production numbers against the daily target and a bonus target by pulling data directly from the ERP's SQL database.
• Automated the employee onboarding process using PowerShell and Azure modules, including account creation, permissions, and email setup.
• Configured and deployed multiple remote management systems on Windows Server 2016/2019 (Wyse Management Suite, JAMF Now, PDQ Suite, WSUS, LAPS) to manage Wyse ThinOS clients, Apple devices, and Windows 10 clients across three geographic locations (PA, MD, NC).
• Set FortiGate firewall policies to allow site-to-site and system communications.
• Reconfigured DNS/DHCP settings to resolve multiple name resolution issues on site.
• Responsible for the upkeep and management of 250 client devices, 15 virtual servers (Windows Server 2019) hosted on VMware ESXi, 12 Brocade switches, and 3 FortiGate firewalls.
• Maintained trucking routes and created inventory reports using SQL queries (SQL Server Management Studio).
• Patched server and desktop infrastructure using WSUS.