Mina Erian

Global Music Rights

Network & Infrastructure

• Sole architect — designed hub-and-spoke across 8 Azure regions with Virtual WAN, Firewall Premium (IDPS, TLS inspection), dual 10Gbps ExpressRoute
• Built 200+ private endpoints eliminating public exposure; Front Door Premium with WAF achieving 45% global latency reduction
• Led migration of 150+ workloads — 3 months ahead of schedule, zero unplanned downtime, modernized to App Service

Infrastructure as Code

• Enterprise IaC platform: 1,200+ Bicep files across 4 environments, 8 subscriptions using Azure Verified Modules with custom wrapper patterns
• Engineered deployment orchestration for complex dependency chains — optimized pipelines 6h → 2.25h (63% faster) via parallel spoke deployment
• Implemented drift detection via scheduled what-if deployments — automatic alerts when infrastructure deviates from code

Security, DR & Cost

• Zero-trust with Entra ID, Sentinel, Defender — 60% reduction in security incidents, 98% PCI-DSS compliance, 150+ Azure Policies
• Multi-region DR: RPO <1h, RTO <4h with Site Recovery, SQL Always-On — validated through 6 DR drills
• Cut Azure spend by $320K annually via Reserved Instances, automated scheduling, right-sizing 200+ VMs

Identity & Hybrid Architecture

• Architected hybrid identity with Self-Managed Active Directory and Entra ID integration — Entra Connect sync, conditional access, and domain trust configuration
• Designed DNS architecture spanning on-premises and Azure Private DNS zones with split-horizon resolution and conditional forwarding
• Implemented hybrid authentication models including pass-through authentication, password hash sync, and SAML/OIDC federation
• Configured Azure RBAC and Azure Policy governance across enterprise-scale subscription hierarchy with management group inheritance

Sycom

Leadership & Innovation

• Led 12-person team supporting 200+ healthcare clients across 5 countries — $3.5M budget, 24/7 operations
• Architected voice biometrics replacing fingerprint scanners — $8.25M savings over 3 years, 85% hardware cost reduction
• Drove 20% revenue growth ($2.4M); reduced turnover 40% → 8%; improved NPS 65% → 95%

Infrastructure & Identity

• Managed Self-Managed Active Directory across multi-site healthcare environments — domain trusts, Group Policy, DNS, DHCP, certificate services
• Cloud pioneer (2016): Azure AD integration, Exchange Online hybrid for 2,000+ users, Azure Backup — before most healthcare orgs considered cloud
• Designed hybrid authentication flows bridging on-premises AD with Azure AD (now Entra ID) — ADFS federation, password writeback, SSO
• Maintained HIPAA/HITECH compliance with zero critical findings across 6 years; reduced downtime 70%