Ben Mungai
Principal Enterprise Architect And Technology Leader | Microsoft Cybersecurity, Solutions And Enterprise Admin Expert | Multi-Country Cloud, Security And Modern Workplace Transformation
Nairobi,Kenya
Summary
Senior enterprise technologist with 12+ years architecting, defending, and transforming business-critical platforms across cybersecurity, solutions, and modern workplace domains. Microsoft-certified at Expert level across all three disciplines (Cybersecurity Architect, Solutions Architect, and Enterprise Administrator): a triple-expert credential set fewer than 1% of practitioners hold concurrently.
Work spans enterprise architecture and TOGAF-aligned governance practice, Zero Trust and identity (NIST 800-207), multi-country Microsoft 365 and Azure transformation, end-user computing modernisation, AI-enabled operations through Microsoft Copilot and Power Platform, and SOC engineering through Microsoft Defender XDR and Microsoft Sentinel SIEM/SOAR.
Built and ran a 12-person Modern Workplace and Cloud Security practice from zero at Syntura, owning service-line P&L, reporting to a global CIO and East Africa General Manager, and delivering flagship transformations including a Tier-1 retail bank Microsoft 365 E5 rollout across Kenya, Uganda, Tanzania, and Rwanda (2,000+ users; incidents reduced 40-60% within 90 days; regulatory audit readiness across four jurisdictions).
Trusted at C-suite, board, Architecture Review Board, CISO, and regulator level. ISACA Kenya Chapter member. OneTrust Certified Privacy Professional.
Overview
2
2
Languages
28
28
Certificates
4
4
years of post-secondary education
14
14
years of professional experience
Work History
Modern Work Architect
A&O IT Group
UK & Global Remote Delivery
04.2025 - Current
- UK-headquartered global managed-services firm. Senior architectural authority on Modern Workplace, Cloud, and AI integration for global enterprise clients.
- Lead enterprise architecture across Microsoft 365, Azure, and hybrid cloud for global enterprise clients, developing reference architectures and High-Level Designs aligned to TOGAF-style governance practice.
- Govern Zero Trust architecture across identity, endpoint, and platform layers, defining and enforcing architecture standards for cloud, identity, end-user computing, and security domains.
- Embed Microsoft Copilot, Copilot Agents, and Power Platform automation into global enterprise architectures, governing AI security and identity preconditions for safe deployment.
- Act as senior technical authority in pre-sales engagements through workshops, solution design, and RFP architecture, shaping multi-year managed-service strategy with client leadership.
- Mentor distributed delivery teams through architecture reviews, design forums, and executive-level client presentations, driving adoption of automation, DevOps practices, and scalable platform models.
Head of Modern Workplace & Security
Syntura
Nairobi, Kenya & UK
03.2023 - 04.2025
- Reported to the Global CIO and the General Manager, East Africa. Led a 12-person multidisciplinary practice. Owned the Modern Workplace and Cloud Security service-line P&L.
- Founded and scaled a 12-person Modern Workplace and Cloud Security practice from zero, recruiting and developing specialists across cloud, security, automation, and support functions, and owning service-line P&L and growth across multi-country managed-service portfolios.
- Led the enterprise Microsoft 365 E5 transformation for a Tier-1 retail bank across Kenya, Uganda, Tanzania, and Rwanda (2,000+ users), deploying Microsoft Defender XDR, Conditional Access, MFA, DLP, Microsoft Purview Information Protection, and Microsoft Intune endpoint baselines, reducing security incidents 40-60% within 90 days.
- Established the architecture governance framework, including Architecture Review Board, design standards, Architecture Decision Records practice, runbooks, and ITIL v4-aligned service-management model that the practice continues to operate.
- Designed and productionized the Microsoft Sentinel SIEM/SOAR platform with KQL analytics and automated playbooks at a UK managed-services client, automating 60%+ of Tier-1 SOC operations and materially reducing mean time to respond.
- Drove Microsoft Copilot and Power Platform adoption inside a leading UK public EV charge-point operator, building Copilot Agents for bid-document analysis and change-request triage that collapsed cycle times from days to hours.
- Partnered with Sales and Pre-Sales leadership on solution strategy, pricing alignment, and complex bids, contributing directly to multi-year managed-service deal closures.
- Provided Power BI delivery dashboards and operational scorecards to executive leadership, connecting service KPIs to strategic objectives.
Lead Senior Systems Engineer
FITTS
Nairobi, Kenya & UK
12.2021 - 02.2023
- Infrastructure Security: Designed and set up controls for both on-premises and cloudbased technologies to protect end-users' identities, devices, data, and business processes.
- Enterprise Mobility and Hybrid Working: Planned, strategized, and deployed Microsoft solutions and tools for identity management, device management, and security controls.
- Solution Implementations: Aligned core business requirements with Microsoft-centered services to ensure clients receive optimal value for their Microsoft licenses investments.
- Team Leadership and Management: Led a team of six engineers, up-skilling their technical skills, and boosting their overall performance.
- Business Process Automation: Reviewed work processes and implemented automation solutions through Microsoft Power Automate and new employee automation.
- Change and Operations Management: Assessed user metrics, end-user communications, training sessions, and Q&A sessions to improve employee productivity and boost return
value on investment. - Managed Services and Technical Support: Led and managed clients' infrastructure, technology solutions, endpoints, and proactive monitoring, management, and remediation against defined SLAs.
Senior Systems Engineer
FITTS
Nairobi, Kenya
09.2019 - 12.2021
- Successfully implemented Microsoft 365 E5 security to agribusiness enterprises of 500+ users, which aided them in meeting both their data and device security and ensured optimal compliance to set requirements.
- Migrated 5 clients from G-Suite and other IMAP email solutions to Microsoft 365 within the last 3 years, consequently increasing their productivity, security, compliance posture and driving their cloud presence.
- Optimized a Microsoft E5 deployment, delivering a complete overhaul of Microsoft productivity, security and compliance implementation, for a leading financial institution in the country with over 2000 users spread over East Africa region.
- Integrated systems engineering process improvements that ensured project deliverables were met within set timelines and the overall service delivery, end-user productivity and service adoption was streamlined.
- Designed and implemented innovative business development technology and service delivery models, and optimized the company's infrastructure in order to bring more partnerships for increased revenue growth.
- Created proposals, delivered solution pitches and supported FITTS' both new and existing clientele in projects around Microsoft 365, Azure, identity & security management, device management & infrastructure optimization.
- Directed the technical team in creating work plans for M365 services implementation and enhancement, and executed a business-centric solution which enabled the business to transit into managing the Microsoft 365 environment.
Microsoft 365 Admin Support Specialist-Part-time
Upwork: Microsoft Global Commercial Support
Nairobi, Kenya
01.2020 - 10.2020
- Ensured successful resolution of Microsoft 365 administrator support requests.
- Provided holistic administrative and technical support on Microsoft 365 service requests to Microsoft's 365 enterprise customer administrators.
- Guided clients in onboarding Office 365 services into their businesses and resolved arising technical issues regarding the office services.
- Maintained exemplary customer service delivery and prioritized tasks to ensure quality output for the clients.
Solved complex troubleshooting problems with Microsoft 365 and triaged
Systems Engineer
Dimension Data
Nairobi, Kenya
03.2014 - 09.2019
- Designed and set up a data center (servers, applications, processes, services and network) monitoring solution with Microsoft System Center Operations Manager for three clients, over the 6-year period.
- Successfully migrated several clients from G-Suite to Microsoft Office 365 & oversaw their seamless transition from set up to admin training for 1-year.
- Completed enterprise mobility and device management solution (MDM) implementations surveys, proposals, and designs across Microsoft EMS, VMware AirWatch, VMware Workspace ONE environments.
- Designed, implemented and provided support for System Center device management solution, for over ten clients in 6 years.
- Conducted Microsoft Cloud Security (Microsoft 365, Azure & cybersecurity) assessments and solution deployments for existing clients to mitigate threats and increase their secure score.
- Provided engineering support and delivered on business productivity, development and continuity plans around end-user computing solutions.
Supported various Hyper-V and VMWare virtualization client environments
Systems Administrator
Crescent Tech Limited
Nairobi, Kenya
08.2013 - 02.2014
- Served as the lead admin in handling internal systems administration (Microsoft Exchange, Active Directory, DNS, DHCP) and network support and management.
- Developed process improvements and other enhancements that improved on operational efficiency as well as ensure data security.
- Provided company-wide desktop and offered rounded data centre and server environment support, maintenance and servicing for HP and Dell.
Technology Officer
Message Labs Africa Limited
Nairobi, Kenya
05.2013 - 07.2013
- Enhanced and supported the company's vision and direction through automating tasks to increase system availability and enhance productivity which resulted in substantial savings.
- Performed LAN / WAN administration, and ensured continued mail client configuration.
- Contributed to the company's information technology roadmap including servers, networking, point of sale system, web infrastructure, website development and maintenance.
- Collaborated with lead technical engineers to complete Web Services (Web design, website and email hosting configurations and maintenance).
ICT Intern
Postal Corporation of Kenya
Nairobi, Kenya
05.2012 - 08.2012
Education
Bachelor of Science - Computer Science
University of Eldoret
Eldoret, Kenya 08.2009 - 12.2013
Skills
Cybersecurity Competency
Information Protection and Governance
Compliance and Security Management
Enterprise Mobility, Security and Device Management
Network Infrastructure Management
Client Relationship Management
Stakeholder Engagement
Cloud Infrastructure Optimization
Policy Development & Quality Assurance
Azure & AWS - Workload Monitoring, Cost and Performance Optimization
Virtualization (Hyper-V and VMWare)
Adoption and Change Management
Business Processes Automation
Business Intelligence and Analytics
Collaborative Leadership, Mentorship and Team Development
Identity and Access Management (RBAC, 2FA, RBAC, JIT, etc)
Microsoft Cybersecurity Architect Expert
Microsoft Azure Solutions Architect Expert
Microsoft 365 Enterprise Administrator Expert
AI & Automation: Microsoft Copilot Power Platform AI Governance
Cybersecurity Leadership: Microsoft Cybersecurity Architect Expert Zero Trust Architecture Microsoft Sentinel
Practice Leadership Multi-Country Delivery Modern Workplace Architecture
Architecture & Strategy: Enterprise Architecture Microsoft Azure Solutions Architect Expert Cloud Architecture
Cloud Security Architecture
Zero Trust Architecture (NIST 800-207)
Microsoft Security Baselines, Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps, Microsoft Defender for Office 365, Microsoft Sentinel (SIEM/SOAR)
Affiliations
- ISACA Kenya Chapter, Member
Certification
Microsoft Certified: Cybersecurity Architect Expert
MODERN WORK | END-USER PRODUCTIVITY & EXPERIENCE | SECURITY | INFRASTRUCTURE
- Modern Work
- End-User Productivity & Experience
- Cloud Security
- Infrastructure Management and Optimization
- Identity, Endpoints and Access Management
- Compliance Management
- Information and Data Security Management
- Licensing Optimization
Volunteering Experience
Digital Learning Advocate
SASOL Foundation (Sahelian Solutions Ltd) : 04/2010 - 08/2010
- Served as part of the implementation team that set to improve computer literacy within high schools in Kitui County.
- Aided in setting up proper and fully-functioning computer labs within these high schools, which aided in promoting digital learning for the students.
Professional Strengths
- Technical & Business Acumen : Possesses an in-depth background in leading successful business development initiatives, optimizing workflow processes and leveraging vast technological insights for top-tier project execution.
- Project Leadership & Operational Excellence : A pragmatic leader with versatile skills in project and operations oversight and an additional knack for ensuring project milestones meet completion and all operations produce stellar bottom-line results.
- Savvy Troubleshooting and Problem Resolution skills : Adroit in generating novel solutions, synthesizing technical modifications
and designing creative ideas to solve any workflow and performance complexities during the project lifecycle and operational management. - Excellent Negotiation and Interpersonal skills: Possess superb written and oral communication skills with hands-on skills in conveying arguments accurately and persuasively, and leading robust corporate and client relations within multifaceted work environments.
Portfolio
My Portfolio Document
Volunteering Experience
Digital Learning Advocate
SASOL Foundation (Sahelian Solutions Ltd) : 04/2010 - 08/2010
- Served as part of the implementation team that set to improve computer literacy within high schools in Kitui County.
- Aided in setting up proper and fully-functioning computer labs within these high schools, which aided in promoting digital learning for the students.
Solutions and Platforms
- Enterprise Architecture: TOGAF-aligned governance, ArchiMate-style modeling, HLDs, ADRs, ARB facilitation, reference architectures, target operating models, application portfolio optimization.
- Microsoft Azure & Cloud: IaaS/PaaS, Cloud Adoption Framework landing zones, hub-spoke, Bicep (Terraform-aware), Key Vault, Defender for Cloud, Azure OpenAI, hybrid cloud, AWS, GCP, FinOps and TCO modeling.
- Identity & Access: Microsoft Entra ID, Conditional Access, MFA, IGA, hybrid identity (Entra Connect), PAM-aware patterns, SAML, OAuth2, SCIM, identity threat protection.
- Cybersecurity & Zero Trust: Zero Trust (NIST 800-207), NIST CSF, ISO 27001-aligned governance, Microsoft Defender XDR, Microsoft Sentinel (KQL, SOAR via Logic Apps), MITRE ATT&CK, Purview (DLP, sensitivity labels, eDiscovery), Mimecast, Fortinet (NSE 1/2/3).
- Modern Workplace & EUC: Microsoft 365, Exchange Online, Teams, SharePoint, OneDrive, Intune (UEM), Windows Autopilot, SCCM/MECM, AVD, FSLogix, VMware Workspace ONE, Citrix, ManageEngine Endpoint Central, Group Policy.
- AI & Automation: Microsoft 365 Copilot, Copilot Studio, Copilot Agents, Power Platform (Power Automate, Power Apps, AI Builder, Power BI), Azure OpenAI, PowerShell, Microsoft Graph API.
- Governance, Delivery & Commercial: ITIL v4, CIS Benchmarks, Microsoft Security Baselines, Kenya DPA 2019, POPIA, GDPR, OneTrust; multi-country delivery, pre-sales architecture, RFP responses, Microsoft co-sell, service-line P&L.
Industries Delivered: Tier-1 retail & commercial banking, central bank, telecoms, mining, utilities & energy, agri-tech, insurance, clean energy/PAYG, UK EV charging, government & regulatory — across Kenya, East Africa, Central Africa, Southern Africa, and the UK.
Professional Strengths
- Technical & Business Acumen : Possesses an in-depth background in leading successful business development initiatives, optimizing workflow processes and leveraging vast technological insights for top-tier project execution.
- Project Leadership & Operational Excellence : A pragmatic leader with versatile skills in project and operations oversight and an additional knack for ensuring project milestones meet completion and all operations produce stellar bottom-line results.
- Savvy Troubleshooting and Problem Resolution skills : Adroit in generating novel solutions, synthesizing technical modifications
and designing creative ideas to solve any workflow and performance complexities during the project lifecycle and operational management. - Excellent Negotiation and Interpersonal skills: Possess superb written and oral communication skills with hands-on skills in conveying arguments accurately and persuasively, and leading robust corporate and client relations within multifaceted work environments.
Career Interests & Passions
- Tapping into new growth channels through digital innovation for enterprises.
- Contributing to community development through digital advocacy.
- Networking and building robust alliances and partnerships with diverse professionals.