Ben Mungai

UK-headquartered global managed-services firm. Senior architecture and delivery authority for Modern Workplace, Cloud, security, and automation across UK and global enterprise clients; reported to the Group CTO and General Manager; led three direct reports.

• Owned Microsoft 365, Azure, identity, endpoint, security, and managed-service architecture for UK and global client environments, accountable for technical delivery assurance, client solution design, and security and compliance readiness.
• Designed modern work solutions that integrated Microsoft 365 and Azure workloads with network, monitoring, and end-user compute managed services, so architectures landed as supportable operations rather than standalone designs.
• Built HLDs, technical blueprints, and design documentation to A&O delivery standards, giving distributed delivery teams a consistent basis for implementation and managed-service transition.
• Governed Zero Trust and security standards across identity, endpoint, and platform layers; supported Cyber Essentials and Cyber Essentials Plus recertification (third consecutive year) and ISO 27001-aligned control readiness.
• Served as primary technical liaison for client stakeholders - ran discovery workshops, validated solutions against business requirements, and shaped technical proposals, RFP responses, and managed-service transitions.
• Mentored three direct reports and distributed delivery teams through architecture reviews, design forums, and client presentations; embedded controlled Copilot, Copilot Studio, and Power Platform adoption with identity and data-protection preconditions.

Reported to the Global CIO and the General Manager, East Africa. Built and led a 12-person multidisciplinary practice; owned delivery targets, technical standards, solution assurance, and executive-facing delivery governance.

• Built and led a 12-person Modern Workplace and Cloud Security practice across Africa and the UK, recruiting and developing specialists across cloud, security, automation, and support, supporting a 14-organization portfolio across six countries plus internal estates.
• Led the Microsoft 365 E5 programme for a Tier-1 financial institution across Kenya, Uganda, Tanzania, and Rwanda (2,000+ users) - Entra ID, Conditional Access, MFA, PIM, Defender XDR, Purview, DLP, and Intune endpoint baselines - standardizing controls, strengthening audit readiness across four jurisdictions, and reducing manual remediation.
• Established the practice's architecture and service governance: design standards, Architecture Decision Records, runbooks, and an ITIL v4-aligned service-management model the team continued to operate.
• Built managed Microsoft Sentinel and Defender XDR operating patterns with KQL analytics and Logic Apps playbooks, automating repeatable Tier-1 alert triage and standardizing investigation and escalation workflows for a UK managed-services client.
• Drove Copilot and Power Platform adoption for a leading UK EV charge-point operator, building Copilot Agents for bid-document analysis and change-request triage with human review at material decision points, reducing manual review effort and making evaluations more consistent.
• Partnered with sales and pre-sales leadership on solution strategy, licensing optimization, and complex bids; provided Power BI delivery dashboards and operational scorecards to executive leadership.

Senior technical lead for Microsoft 365, Azure, identity, endpoint, security, and managed-service engagements; mentored a 10-person engineering group.

• Served as Tier-3 escalation authority across identity, endpoint, and messaging - root-cause analysis, remediation, runbooks, client updates, and technical assurance against defined SLAs.
• Ran security health assessments aligned to Microsoft Security Baselines and CIS Benchmarks across hybrid Microsoft 365 and Azure environments, then drove the hardening work they surfaced.
• Automated licensing, mailbox provisioning, group governance, and Conditional Access reporting with PowerShell and Microsoft Graph; built FreshService workflows for triage, assignment, asset management, and onboarding.
• Supported technical pre-sales - workshops, proofs of concept, and RFP responses - and led managed-service transition and improvement for client environments.

• Successfully implemented Microsoft 365 E5 security to agribusiness enterprises of 500+ users, which aided them in meeting both their data and device security and ensured optimal compliance to set requirements.
• Migrated 5 clients from G-Suite and other IMAP email solutions to Microsoft 365 within the last 3 years, consequently increasing their productivity, security, compliance posture and driving their cloud presence.
• Optimized a Microsoft E5 deployment, delivering a complete overhaul of Microsoft productivity, security and compliance implementation, for a leading financial institution in the country with over 2000 users spread over East Africa region.
• Integrated systems engineering process improvements that ensured project deliverables were met within set timelines and the overall service delivery, end-user productivity and service adoption was streamlined.
• Designed and implemented innovative business development technology and service delivery models, and optimized the company's infrastructure in order to bring more partnerships for increased revenue growth.
• Created proposals, delivered solution pitches and supported FITTS' both new and existing clientele in projects around Microsoft 365, Azure, identity & security management, device management & infrastructure optimization.
• Directed the technical team in creating work plans for M365 services implementation and enhancement, and executed a business-centric solution which enabled the business to transit into managing the Microsoft 365 environment.

• Ensured successful resolution of Microsoft 365 administrator support requests.
• Provided holistic administrative and technical support on Microsoft 365 service requests to Microsoft's 365 enterprise customer administrators.
• Guided clients in onboarding Office 365 services into their businesses and resolved arising technical issues regarding the office services.
• Maintained exemplary customer service delivery and prioritized tasks to ensure quality output for the clients.
  Solved complex troubleshooting problems with Microsoft 365 and triaged

• Designed and set up a data center (servers, applications, processes, services and network) monitoring solution with Microsoft System Center Operations Manager for three clients, over the 6-year period.
• Successfully migrated several clients from G-Suite to Microsoft Office 365 & oversaw their seamless transition from set up to admin training for 1-year.
• Completed enterprise mobility and device management solution (MDM) implementations surveys, proposals, and designs across Microsoft EMS, VMware AirWatch, VMware Workspace ONE environments.
• Designed, implemented and provided support for System Center device management solution, for over ten clients in 6 years.
• Conducted Microsoft Cloud Security (Microsoft 365, Azure & cybersecurity) assessments and solution deployments for existing clients to mitigate threats and increase their secure score.
• Provided engineering support and delivered on business productivity, development and continuity plans around end-user computing solutions.
  Supported various Hyper-V and VMWare virtualization client environments

• Served as the lead admin in handling internal systems administration (Microsoft Exchange, Active Directory, DNS, DHCP) and network support and management.
• Developed process improvements and other enhancements that improved on operational efficiency as well as ensure data security.
• Provided company-wide desktop and offered rounded data centre and server environment support, maintenance and servicing for HP and Dell.

• Enhanced and supported the company's vision and direction through automating tasks to increase system availability and enhance productivity which resulted in substantial savings.
• Performed LAN / WAN administration, and ensured continued mail client configuration.
• Contributed to the company's information technology roadmap including servers, networking, point of sale system, web infrastructure, website development and maintenance.
• Collaborated with lead technical engineers to complete Web Services (Web design, website and email hosting configurations and maintenance).