Serge E.

Context & Objective.

Belgian accounting firm that had grown a set of internal business tools — fiscal analysis, regulatory filings, client diagnostics, meeting minutes — each maturing as standalone scripts.

Mission:

consolidate these existing tools into one M365-integrated platform, industrialise them through an Agile CI/CD delivery model, and package the whole as a repeatable Docker OS image deployable on any customer site. Strict data sovereignty requirement — client accounting data must never leave the premises.

Key Achievements:

▸ Integrated Coge's existing business toolset into a unified automation platform wired natively into the M365 stack — Entra ID SSO, Microsoft Graph, Azure Key Vault, Exchange Online, SharePoint and Teams

▸ Packaged the full platform as a preconfigured, versioned Docker OS image — single-artefact deployment, reproducible on any on premise hardware, zero cloud dependency on client data

▸ Industrialised eight business tools: XBRL financial-statement analyser, board-meeting minutes generator, regulatory filing assistant, SME diagnostic engine, tax-scenario modeller and more — all exposed through a unified M365-integrated UI

▸ Implemented Agile delivery with Azure DevOps CI/CD pipelines — automated build, test, containerisation and versioned image release

▸ Full end-to-end automated testing (Playwright) covering real accountant user scenarios — no regression shipped to production

▸ Authored HLD, LLD, operational runbooks and customer deployment guide enabling standardised rollout

Outcomes:

✓ Document processing time reduced from hours to minutes

✓ Zero data leakage — GDPR compliance by design

✓ Deployable on any customer site as a standardised product

Environment. M365 E5, Entra ID, Microsoft Graph API, Exchange Online, SharePoint, Teams, Azure Key Vault, Azure DevOps (CI/CD), Docker (OS image packaging), PowerShell 7

Context & Objective.

Two activities run in parallel — ongoing senior Microsoft consulting engagements (migrations, tenant delivery, Modern Workplace rollouts) for regulated clients, and the design of a sovereign software suite combining cloud-native M365 automation and privacy-by-design local AI for sectors aligned with NIS2, GDPR and EU AI Act.

Key Achievements:

Senior Microsoft consulting stream (continuous):

▸ Architecture and delivery engagements for regulated clients: hybrid Exchange migrations, SCCM/Intune Co-Management, Modern Workplace rollouts, M365 security-governance audits — continuation of the senior consulting track record

▸ Endpoint modern management L3/L4: Microsoft Intune (Compliance, Autopilot, Windows Hello for Business, LAPS), SCCM/Intune Co-Management, Windows Update for Business (SaaS rings), phased deployment with Go/No-Go gates

▸ Documentation and knowledge-transfer framework: L1–L2–L3 runbooks,scoping, L3 cookbook, effort estimation, roadmap

TenantInTheBox (TMIC) — sovereign tenant-in-a-box:

▸ End-to-end architecture of an IaC framework automating Microsoft 365 E5 tenant provisioning: Terraform + Power Platform + Azure Functions + Microsoft Graph API

▸ Modern identity baseline (Microsoft Entra ID, App Registrations, Service Principals, OAuth 2.0 / MSAL), data governance (Microsoft Purview DLP, Sensitivity Labels, Retention), Zero Trust (Conditional Access, Defender for Office 365)

ALFY — sovereign AI platform embedded in M365 identity stack:

▸ Multi-agent orchestration framework with 40+ specialised agents covering classification, legal analysis, decision support and content generation

▸ DeclaBoost (Belgian personal income tax assistant): deterministic calculation engine + local OCR, packaged for web and desktop deployment, in production at fiduciary clients

▸ SubsiBoost (Walloon / EU subsidy management agent): automated intelligence gathering, eligibility matching, application generation, natively integrated into ALFY-OS

Context & Objective. Definition and execution of the Modern Workplace strategy on Windows 11 + Microsoft 365 across a 1,200+ endpoint estate for a Belgian water utility operator under service-continuity constraints.

Key Responsibilities:

▸ Defined and deployed the Modern Workplace strategy (Windows 11 + Microsoft 365)

▸ Coordinated the Windows 11 migration across 1,200+ devices: pilot testing, phased rollout, industrialisation

▸ Configured and maintained Microsoft Intune: app deployment, compliance enforcement, Conditional Access, Autopilot provisioning

▸ Created dynamic Microsoft Entra ID groups for application targeting and compliance policy scoping

▸ Developed Win32 app packages with detection logic and PowerShell-based installers

▸ Built and managed the Company Portal experience with branding and curated app listings

▸ Implemented Hybrid Azure AD Join and optimised device provisioning workflows

▸ Automated user data backup from DFS shares to OneDrive using SharePoint Migration Tool

▸ Training, documentation and workshops for Service Desk teams — smooth operational adoption

Outcomes:

✓ Modern Workplace deployed across 1,200+ endpoints

✓ Provisioning time significantly reduced via Autopilot

✓ Autonomous Service Desk adoption

Environment. Windows 11, Microsoft Intune, SCCM, Microsoft Entra ID, OneDrive, SharePoint Migration Tool, PowerShell 7, Hybrid Azure AD Join, Conditional Access, Compliance Policies, Endpoint Security, Company Portal, DFS, Exchange Online, Microsoft 365, Teams, Azure Runbooks, Azure Key Vault