AI Meeting Intelligence Platform
An event-driven pipeline that turns Teams meeting recordings into the foundation for transcription, summaries, and actionable meeting intelligence.
Engineering Project / Proof of ConceptView case study
Daniel Moussa/ Microsoft 365 Engineer
Secure cloud.Intelligentpossibilities.
I build secure Microsoft cloud environments,
purposeful automations, and AI that works
with people in control.
Identity · Security · Azure · Automation · Agentic AI
CONNECTED SYSTEMS
+Trust at the foundation.+
01 / SELECTED PROJECTSIDEAS, ENGINEERED.
Complex systems.
Considered solutions.
Architecture, automation, and intelligence.
A closer look at the work behind the systems.
Agentic Microsoft 365 Copilot Suite
Purpose-built agents for mailbox intelligence, project context, and email operations—with human control at the point of action.
Designed & developedView case study
Cross-System Work Action Assistant
An assistant that connects workplace context to business systems through constrained tools and explicit approval.
Architecture & integrationView case study
Entra Credential Expiry Monitoring
Owner-aware monitoring for application secrets and certificates, with threshold alerts and stateful deduplication.
Engineered solutionView case study
Intune & Defender Endpoint Security
A phased security baseline connecting device management, compliance, identity, and endpoint protection.
Designed & implementedView case study
Entra Privileged Identity & RBAC Governance
Privileged-access engineering with eligible assignments, repeatable policy inspection, and staged change control.
Governance engineeringView case study
SELECTED ARCHITECTURE & ENGINEERING WORKIDENTITY / CLOUD / AUTOMATION / INTELLIGENCE
02 / TECHNOLOGY ECOSYSTEMCONNECTED, NOT COLLECTED.
The stack is connected.
So is the thinking.
Tools matter. The relationships between them
are where the engineering happens.
IDENTITY / IN PRACTICE
Trust starts here.
Identity-aware access, controlled privilege, and application authentication form the foundation of every connected system.
- Microsoft Entra ID
- Entra PIM
- Conditional Access
- RBAC
- App Registrations
- Enterprise Applications
- OAuth
- Managed Identities
- Identity governance
CLOUD / IN PRACTICE
Infrastructure with intent.
Microsoft 365 tenant administration and Azure engineering, connected through identity, security, APIs, and automation.
Microsoft 365 ecosystem
Services & workloads
Administration across identity, messaging, collaboration, endpoints, security, and governance throughout the Microsoft 365 environment.
Microsoft Entra ID
Identity & accessUsers and groups, roles and RBAC, MFA, Conditional Access, enterprise applications, app registrations, and Privileged Identity Management.
Exchange Online
Messaging & emailUser and shared mailboxes, distribution lists, mail flow, mailbox permissions, message tracing, Exchange policies, and email security configuration.
Microsoft Teams
Communication & collaborationTeams and channels, meetings, policies, apps, collaboration settings, and integrations with Microsoft 365 services including Planner.
SharePoint Online
Sites & contentSites, document libraries, permissions, sharing, access management, content organization, and governance.
OneDrive for Business
User files & storageSynchronization, sharing, storage, permissions, and user data management, including controlled offboarding and archival workflows.
Microsoft Intune
Endpoint & application managementDevice enrollment, configuration profiles, compliance policies, applications, Endpoint Security, BitLocker, Windows LAPS, Attack Surface Reduction, and Windows Update management.
Microsoft Defender
Security & threat protectionDefender for Endpoint and Defender for Office 365, endpoint and email protection, EDR, alerts, incidents, security baselines, and Secure Score.
Microsoft Purview
Compliance & information protectionSensitivity-label and information-protection planning, retention, audit, data protection, and sharing governance as part of broader tenant administration.
Power Platform
Automation & business integrationPower Automate, Agent Flows, Dataverse, Adaptive Cards, Microsoft 365 connectors, approval workflows, and business process automation.
Administration portals
Tenant configuration, users and groups, licensing, administrative roles, permissions, and service health. Day-to-day operations also span troubleshooting, migrations, access management, security configuration, and governance.
- Microsoft 365 Admin Center
- Microsoft Entra Admin Center
- Exchange Admin Center
- Microsoft Teams Admin Center
- SharePoint Admin Center
- Microsoft Intune Admin Center
- Microsoft Defender Portal
- Microsoft Purview Portal
- Power Platform Admin Center
PowerShell, Graph & automation
Admin centers, PowerShell, and Microsoft Graph work together for reporting, bulk operations, user and group administration, identity and Exchange management, permissions, and application integration. Repeatable scripts and workflows connect Microsoft 365 administration with wider automation.
- PowerShell
- Microsoft Graph PowerShell SDK
- Microsoft Graph API
- Exchange Online PowerShell
- REST APIs
Azure services
- Azure Container Apps & Jobs
- Azure cloud automation
- Azure Logic Apps
- Container Registry
- Queue / Blob / Table Storage
- Azure Monitor & Log Analytics
ENDPOINT & SECURITY / IN PRACTICE
A connected security posture.
Device management, endpoint protection, and identity controls brought together through practical baselines and phased deployment.
- Microsoft Intune
- Defender for Endpoint
- Defender for Office 365
- Endpoint Security
- Device configuration
- Compliance policies
- BitLocker
- Windows LAPS
- Attack Surface Reduction
- Windows Update
- Secure Score
- Information protection
- Sensitivity-label planning
AUTOMATION / IN PRACTICE
Make repetition optional.
APIs, scripts, and workflows turn recurring administration into repeatable operations with clear failure boundaries.
- PowerShell
- Microsoft Graph PowerShell
- Microsoft Graph API
- REST APIs
- C# / .NET
- JSON
- Power Automate
- Event-driven architecture
- API integration & automation design
- AvePoint Fly
- Microsoft 365 migrations
- Exchange migrations
- Google Workspace migration
INTELLIGENCE / IN PRACTICE
Reason. Propose. Approve. Act.
Agents that work across Microsoft 365 and business systems, with constrained tools and people in control of consequential actions.
- Microsoft Copilot Studio
- Microsoft 365 Copilot
- Agent Flows
- Adaptive Cards
- Agentic AI
- MCP integrations
- Structured AI workflows
- Human-in-the-loop systems
- Dynamics 365 Business Central integration
- Dataverse integration
03 / THE EVERYDAY ENGINEERING
Behind the scenes.
Across the environment.
The migrations, integrations, and operational
work that keep a Microsoft environment moving.
01Microsoft 365 migrations
MIGRATION
I delivered tenant-to-tenant and Google Workspace to Microsoft 365 migrations with AvePoint Fly, including Gmail to Exchange Online and Google Drive migration. The work covered provisioning, mailbox mapping, migration policies, pilot and full migrations, cutover planning, reporting, validation, and cleanup.
AvePoint Fly · Exchange Online · Google Workspace · Graph authorization02Secure Graph mail integration
INTEGRATION
A website-to-Microsoft-365 email solution using Microsoft Graph Mail.Send, OAuth, a dedicated Entra application identity, and scoped Exchange Online mailbox access. Designed to reduce dependency on legacy SMTP authentication.
Microsoft Graph · Entra applications · OAuth · Exchange Online03Controlled offboarding archive
DATA LIFECYCLE
A controlled workflow to preserve former-user OneDrive data in a restricted SharePoint archive before access and license cleanup, with administrative access, validation, and deliberate removal of permissions.
OneDrive · SharePoint Online · Access & license lifecycle04Microsoft 365 security & governance
GOVERNANCE
Exchange Online and OWA governance, Defender baselines, SMB hardening, lockout policies, ASR controls, sensitivity-label and information-protection planning, Secure Score improvement, tenant reviews, and licensing governance.
Microsoft Defender · Exchange Online · Information protection04 / THE ENGINEER BEHIND THE SYSTEMS
A systems mindset.
A human perspective.
Daniel MoussaMicrosoft 365 Engineer
CERTIFICATION / SC-300
Microsoft Certified: Identity and Access Administrator Associate
CERTIFICATION / SC-200
Microsoft Certified: Security Operations Analyst Associate
I’m Daniel Moussa, a Microsoft 365 Engineer working across Entra ID, Exchange Online, Teams, SharePoint, OneDrive, Intune, Defender, and Purview. My Microsoft 365 (M365) work connects tenant administration with identity, endpoint management, security, and Azure.
I build automation with PowerShell, Microsoft Graph, Power Automate, and Azure, and develop Copilot Studio agents with human approval at the boundary of consequential actions. Permissions, failure handling, observability, and clear handover are part of the design.
MY FOCUSIDENTITY / SECURITY / AZURE
AUTOMATION / AGENTIC AI
AUTOMATION / AGENTIC AI
05 / ENGINEERING PRINCIPLESHOW I APPROACH THE WORK
Good systems are
deliberate systems.
01
Security is a starting point.
Least privilege, identity-aware architecture, and safe defaults belong in the first design, not the last review.
02
Automate the repeatable.
Use APIs, scripts, and workflows to make recurring work consistent, inspectable, and easier to operate.
03
Keep people in control.
Let agents reason and propose. Put deliberate approval at the boundary of consequential action.
04
Design for the day after.
Logging, alerts, failure isolation, and clear handover are part of the build. A system needs to be maintainable after delivery.
06 / WHAT’S NEXT
Good work starts
with a conversation.
Have a role, project, or technical challenge to discuss?
Reach out directly.
Daniel MoussaMicrosoft 365 Engineer
Email Me