RAY HWANG / IDENTITY & MODERN WORKPLACE

Ray Hwang

I connect identity, device management, security and data governance across Entra ID, Intune, Microsoft 365, Azure, Defender and Purview. I bring a whole-environment perspective to design and operations, supported by secure, cloud-native automation.

Explore my work ↓

Solution Designer · CordantEngineering since 2011

IDENTITY & ACCESS · DEVICE MANAGEMENT · AUTOMATIONSCROLL TO DISCOVER ↓

01 / SELECTED IMPACT

Recent achievements.

Through Cordant, I’ve worked across IDP’s global identity, device management and Microsoft 365 environments.

01 / GLOBAL DEVICE MANAGEMENT

4,000+

devices brought into management across 28 countries.

Designed and deployed an Intune enrolment solution for 20+ non-standard use cases, applying a consistent device naming standard. The tool combines PowerShell and provisioning packages, with API calls to an Azure Table for logging.

IDP Education · Intune & automation

02 / CLOUD GOVERNANCE

37TB

of SharePoint storage reclaimed.

Trimmed file versions, automated recycle-bin clean-up and identified discrepancies in retention and version settings against internal records management standards.

IDP Education · Microsoft 365

03 / ACCOUNT CLASSIFICATION

9,000+

accounts classified by type.

Developed and implemented an account tagging approach to classify 9,000+ accounts by type. These tags now underpin automations and reporting across the identity environment.

IDP Education · Identity governance & automation

IDP EDUCATION / IDENTITY LEADERSHIP

Building the IAM function.

I built IDP’s Identity and Access Management team from the ground up, alongside the processes, standards and technical controls it needed to operate.

PIMPAMIGARBACSSOConditional AccessNon-human IdentitiesMonitoringAuditingAutomationRMAUUARAzure AutomationManaged Identities

Team & processes

Set up the team’s day-to-day procedures for managing identity and access, with documented processes for ongoing operations.

Standards & governance

Enhanced the IDAM and Authentication standards, and authored the Mobile Computing Device Standard from scratch.

Conditional Access, operationalised

Aligned Conditional Access to industry best practice and operationalised it from the ground up, with procedures for the IAM team to follow.

Automated identity reporting

Established automated reporting on stale accounts, app registrations with expiring credentials, and applications with expiring SAML certificates, giving the IAM team visibility of accounts and credentials needing attention.

02 / EXPERTISE

Entra ID. Intune.
Microsoft 365. Azure.

I understand how access, device compliance, threat protection and information governance fit together. That broader view helps me make decisions across the Microsoft environment, from architecture and standards to day-to-day operations.

Identity & access management

Entra ID, Conditional Access, Privileged Identity Management, access packages and lifecycle governance. I design the controls and establish the processes to manage them.

IAM leadershipIdentity governanceEntra ID

Device management

Intune configuration, global device enrolment and Windows 365 Cloud PCs. I’ve resolved configuration conflicts, automated device naming and deployed managed endpoints across distributed teams.

IntuneWindows 365Microsoft 365

Microsoft 365

SharePoint governance, Exchange Online and Teams. I review configuration, improve storage management and build reporting that makes ongoing administration easier.

SharePoint OnlineExchange OnlineTeams

Azure & secure automation

I build and run PowerShell automations in Azure Automation, using managed identities for authentication. Recent work includes IAM reporting and Microsoft 365 administration, combining Microsoft Graph with Azure services to reduce manual work.

Azure AutomationManaged IdentitiesPowerShellMicrosoft Graph

Defender & Purview

I understand how Defender and Purview complement identity and device controls, connecting threat protection with data governance and compliance. My Microsoft 365 work includes reviewing Purview retention policies against internal records management standards.

Microsoft DefenderMicrosoft PurviewData governance

Standards & security operations

I write identity, authentication and mobile computing standards, prepare audit evidence and support SOC 2 and ISO 27001 activities. My endpoint engineering work includes CIS Benchmarks and ACSC hardening guidance.

Security controlsAudit readinessTeam mentoring

03 / EXPERIENCE

From IT support to
workplace and identity engineering.

Experience across consulting, banking, financial services and workplace technology.

2024 — PRESENTCordantSolution Designer+

Modern workplace and IAM assessment, design and implementation. Client engagements span education, gaming, legal services and emergency services.

IDP Education — IAM leadership: built the Identity and Access Management team from the ground up and established its operational processes. Enhanced the IDAM and Authentication standards and created the Mobile Computing Device Standard from scratch.
IDP Education — identity engineering: aligned Conditional Access to industry best practice and operationalised it from the ground up. Enhanced privileged access and identity governance, and built automated IAM reporting in Azure Automation using managed identities.
IDP Education — modern workplace: delivered global Intune onboarding, SharePoint governance and Windows 365, alongside Active Directory and Entra Connect improvements.
SportsBet: reviewed 1,000+ non-human identities and investigated 300+ active accounts to support application ownership mapping.
Gadens: assessed Entra ID, Conditional Access and PIM; identified Azure savings opportunities worth 20K+ per annum.
Country Fire Authority: reviewed identity controls and recommended a phased Conditional Access rollout to support migration from Okta.

2023 — 2024Commonwealth BankModern Workplace Engineer+

Delivered a cloud-native workplace for engineers and software developers, enabling modern CI/CD tooling. Designed Intune configurations aligned with CIS, ACSC and Microsoft security baselines, and developed Jira Service Management catalogues and automations.

2018 — 2023SuperConceptsIT Support Officer → Team Leader IT Support+

Led IT support, coached team members and supported ISO 27001 and SOC 2 audit readiness. Designed and deployed cloud-only managed laptops for 200+ offshore staff, configured single sign-on and implemented Conditional Access.

2016 — 2017McKinsey & CompanyOffice IT Specialist+

Supported end users and office infrastructure, introduced new workplace technologies and contributed to global service centralisation for onboarding, equipment and travelling consultants.

2014 — 2016Compass OfficesIT Support Engineer, Manager+

Delivered IT support across Sydney and Melbourne, managed client VLANs for 60+ businesses and supported new office openings with network infrastructure, connectivity and equipment procurement.

2011 — 2014Early careerThe Executive Centre · Richemont+

IT Support Engineer at The Executive Centre (March 2011 – June 2013), followed by IT Support Analyst at Richemont (October 2013 – April 2014).

04 / CREDENTIALS