TS/SCI clearedAvailable for select engagementsLakeland, FL

Secure Microsoft and Federal cloud architecture, from the whiteboard to production.

I architect and deliver solutions across the full Microsoft stack, spanning On-Premises Infrastructure, Networking, Azure, Modern Workplace, Security, Power Platform, Copilot Studio, and more for Federal, Financial, and Enterprise organizations. I design solutions that scale with best-in-class redundancy and resiliency. I also develop the SOWs that win the work, then stay hands-on through delivery to ensure the solution succeeds in production.

Now · Cloud Architect, Trusted Tech TeamFocus · Cloud Architecture (Azure) · Modern Workplace (Microsoft 365) · Infrastructure · Security · Automation · AI EnablementCerts · AZ-305 · AZ-104 · MS-102 · MS-700 · SC-300 · SC-401 · PL-600 · PL-200 · Copilot Security (Applied) · Copilot Studio (Applied)
Portrait of Brady Pennington, senior solution architect
01 Executive Snapshot

Proof, not adjectives.

A short read for executives and technical buyers. Every figure below is drawn directly from delivered engagements.

Revenue influenced
$3M+
In client revenue tied to statements of work I authored.
SOW closure
80%
Close rate across 100+ SOWs authored for Enterprise and regulated clients.
Architecture projects
50+
Hybrid identity and cloud modernization projects designed and delivered.
Endpoints modernized
10,000+
Managed across Intune, MECM, and Azure Arc, from Small to Medium Business to Enterprise tenants.
Enterprise project revenue
$8M+
Delivered across Fortune 500 divestitures, mergers, and modernizations.
Federal clearance
TS/SCI
Active. Held as a professional credential for regulated engagements.

// Figures reflect verified, career-to-date engagement outcomes.

02 About

The architect who also writes the SOW and stays for delivery.

I am drawn to the difficult middle of enterprise technology: the hybrid identity that half works, the certificate authority nobody documented, the tenant migration with a hard cutover date and no room to slip. My job is to make those systems clear, secure, and boring in the best possible sense of the word.

I move comfortably between a boardroom and a PowerShell prompt. I can sit with an executive to scope risk, budget, and outcomes, then write the statement of work, draw the architecture, and stand up the build alongside the engineering team. Most architects are strong on one side of that line. I have made a career out of covering both.

That work has spanned Enterprise, Federal, Financial, and Non-Profit/Not-For-Profit environments, and a large part of it is teaching: turning a deep technical decision into plain language for an executive, and raising the engineers and associate architects who deliver alongside me.

What I care about most is leaving environments better than I found them: standardized runbooks that survive turnover, engineers who level up because I took the time to teach, and clients who trust the next recommendation because the last one held under pressure. I would rather be the person who delivered exactly what was scoped than the one who oversold and apologized.

The habits started early. I earned Eagle Scout after a thirteen-year run in Scouting, where my project organized twenty-five volunteers to plant fifty bald cypress trees for a City of Lakeland community park. The instinct is the same one I bring to architecture: plan it properly, bring people with you, and leave something that outlasts your involvement.

03 Career Impact

Five years from a support desk to multimillion-dollar architecture.

Shown by outcome, not job description. The through line is a steady move up the stack: from leading people, to hardening environments, to architecting and selling the programs that modernize them.

01
Cloud ArchitectTrusted Tech TeamAug 2025 — Present
Microsoft Gold Partner · Azure & Microsoft 365 consulting
  • Architected and delivered 50+ hybrid identity and cloud modernization projects, including domain and forest consolidations, greenfield design, tenant-to-tenant migrations, and divestitures.
  • Designed and deployed enterprise PKI (ADCS, NPS, SCEP) across on-premises and Azure for regulated clients, with a specialist focus on modern certificate services and identity security.
  • Authored 100+ SOWs at an 80% closure rate, driving $3,000,000+ in revenue, with architecture diagrams and documentation aligned to RFPs and executive stakeholders.
  • Led Intune, Azure Arc, and MECM/SCCM migrations across 10,000+ endpoints, and standardized Microsoft Defender across endpoint, identity, email, and cloud workloads.
  • Delivered end-to-end Microsoft Purview programs: DLP, sensitivity labeling with custom SIT definitions, Information Protection, MIP scanners, and data protection for Copilot and ChatGPT Enterprise.
  • Mentored engineers and associate architects, standardizing SOPs and knowledge bases to improve delivery consistency and cut escalation rates.
02
Senior Solution ArchitectXcelocloud, Inc.Dec 2022 — Aug 2025
Enterprise & Federal architecture · divestitures & mergers
  • Architected and led 50+ enterprise projects, generating $8M+ in project revenue and $5M+ in new opportunities through advisory and pre-sales leadership, including Fortune 500 divestitures and mergers.
  • Led a major retail divestiture (Staples Canada) and a U.S. Marine Corps facilities infrastructure modernization program.
  • Recognized as the top architect for upselling and retention, with 80% of engagements leading to follow-on work.
  • Delivered for clients averaging 50,000 users, 10,000 endpoints, and 2,000 sites, migrating on-premises workloads to Azure and Microsoft 365.
  • Drove automation and standardization that reduced vendor escalations by 70% and saved $100,000+ per quarter.
  • Led Agile engagements and produced architecture diagrams, SOWs, and documentation aligned to RFPs.
03
System Administrator IIBlueAllyApr 2022 — Nov 2022
Managed services · automation & hardening
  • Maintained the integrity of Microsoft client environments via RMM, with advanced troubleshooting and change management.
  • Led lifecycle-management automation and security hardening to reduce manual intervention, and mentored junior staff.
04
System AdministratorEIS Consulting GroupSep 2021 — Apr 2022
Cloud migration · client operations
  • Migrated clients from on-premises to cloud, managed backups, and resolved escalated infrastructure issues.
  • Supported projects, audits, and reporting, and trained the help desk team and field technicians.
05
IT Service Desk TechnicianFirst American · CollaberaApr 2021 — Sep 2021
Multi-channel support · knowledge authoring
  • Provided phone, email, chat, and self-service portal support, and authored knowledge articles for complex issue resolution.
06
Help Desk Assistant Team LeadK2 ServicesApr 2020 — Apr 2021
Team leadership · legal-sector clients
  • Led a team of 20 analysts, supporting 8 major international business and litigation law firms.
04 Core Expertise

A capability map, not a keyword list.

Select a domain to see the depth behind it. Every stack is grounded in delivered work.

Enterprise & Hybrid Architecture

Greenfield and brownfield design across on-premises, hybrid, and cloud, aligned to the Azure Well-Architected Framework and Cloud Adoption Framework, with a bias toward systems that stay clean after the consultants leave.

Well-Architected & CAFAzure landing zonesGreenfield & brownfield designForest / domain consolidationTenant-to-tenant migrationDivestitures & mergersHybrid identity modernizationReference architecture & roadmaps
05 Signature Work

Representative engagements, drawn from real delivery.

// Client specifics are generalized where engagements are under NDA.

Hybrid Identity

Hybrid Identity Modernization

Consolidated fragmented Active Directory forests and executed tenant-to-tenant migrations for large, multi-site organizations, delivering clean cutovers with minimal disruption.

Entra IDAD DS / ADFSConditional AccessADMT
PKI & Certificates

Enterprise PKI & Certificate Services

Designed and deployed ADCS, NPS, and SCEP across on-premises and Azure for regulated clients, enabling auto-enrollment, RADIUS, and certificate-based authentication at scale.

ADCSNPS / SCEPCloud PKIRADIUS / LDAPS
Divestiture & Merger

Fortune 500 Divestiture & Merger

Led separation and integration programs for Enterprise clients, including a major retail divestiture, contributing to $8M+ in delivered project revenue with tight, audited cutovers.

M365 MigrationAzureShareGate / QuestBitTitan
Federal

Federal Infrastructure Modernization

Delivered a U.S. Marine Corps facilities infrastructure modernization program under regulated constraints, balancing security posture, documentation rigor, and delivery timelines.

Windows ServerSTIG / CISNISTHybrid Infra
Purview & Governance

Microsoft Purview Compliance Program

Built DLP, sensitivity labeling with custom SIT XML, MIP scanners, and Conditional Access frameworks to meet governance requirements, extending data protection to Copilot and ChatGPT Enterprise.

Purview DLPSensitivity LabelsMIP ScannerFabric Lineage
Endpoint at Scale

Endpoint Modernization at Scale

Templatized Intune and Autopilot rollouts alongside MECM and Azure Arc across 10,000+ endpoints, turning one-off deployments into repeatable, standardized engagements.

IntuneAutopilotMECM / SCCMAzure Arc
Teams Voice

Teams Voice & Direct Routing

Designed and implemented Teams Voice and Direct Routing with SBCs and SIP trunking for global, multi-site organizations, unifying telephony onto Microsoft 365.

Direct RoutingSBCSIP TrunkingTeams Phone
Power Platform

Power Platform Governance & Automation

Delivered governed Power Apps, Power Automate, and Copilot Studio solutions on Dataverse, reducing manual toil while keeping automation inside a controlled, compliant boundary.

Power AppsPower AutomateCopilot StudioDataverse
Azure Cloud

Azure Landing Zone & Cloud Infrastructure

Designed Azure landing zones and migrated on-premises workloads to IaaS and PaaS, with governance, networking, and identity built in from the start and infrastructure provisioned as code.

Landing ZonesBicep / ARMAzure PolicyAzure Migrate
Infrastructure

Datacenter & Network Modernization

Modernized Windows Server and virtualization estates along with the networks around them, from VLAN segmentation and firewalls to site-to-site VPN and ExpressRoute connectivity into Azure.

Windows ServerHyper-V / VMwareVLANs / FirewallsExpressRoute
Reporting & BI

Enterprise Reporting & Analytics

Built Power BI reporting and dashboards on governed data, ingesting from SQL Server, Dataverse, SharePoint, and Data Lake, paired with Power Automate flows that keep the numbers current.

Power BIPower AutomateSQL / DataverseData Lake
Modern Workplace

Microsoft 365 Modern Workplace

Deployed and governed the Microsoft 365 workplace, including Exchange Online, SharePoint, OneDrive, and Teams, with migration and adoption planning so the rollout actually stuck.

Exchange OnlineSharePoint / TeamsWindows 365Adoption
06 Leadership & Strategy

Where architecture meets the business.

The work that turns a technical plan into signed engagements, aligned stakeholders, and delivery that holds.

Pre-Sales & SOW Leadership

100+ statements of work authored at an 80% closure rate, tied to $3M+ in revenue.

RFP-Aligned Architecture

Architecture diagrams and documentation built to match RFP requirements and executive review.

Executive Communication

Translating deep technical decisions into risk, cost, and outcome language leaders can act on.

Agile Delivery Leadership

Leading Agile engagements for Enterprise and Federal clients from kickoff through cutover.

Mentorship & Enablement

Standardized SOPs and knowledge bases that raise engineers and reduce escalation rates.

Risk, Compliance & Governance

Security and compliance awareness (FedRAMP, NIST, HIPAA, PCI) built into the design, not bolted on.

07 Certifications & Credentials

Full-stack certified Microsoft solution architect.

Three Microsoft Expert-level architect designations, across Azure, Microsoft 365, and Power Platform, backed by associate and specialty credentials in identity, security, and applied AI.

Azure

  • AZ-305Azure Solutions Architect Expert
  • AZ-104Azure Administrator Associate

Microsoft 365

  • MS-102M365 Administrator Expert
  • MS-700Teams Administrator Associate

Security & Identity

  • SC-300Identity & Access Administrator
  • SC-401Information Security Administrator

Power Platform

  • PL-600Power Platform Solutions Architect Expert
  • PL-200Power Platform Functional Consultant

Applied Skills · Copilot

  • MSFTPrepare security & compliance for Microsoft 365 Copilot
  • MSFTCreate agents in Microsoft Copilot Studio

Three Expert Designations

Azure, Microsoft 365, and Power Platform architecture at the Expert tier, part of a broader set of Microsoft and industry credentials held concurrently and kept current.

Also holds an active TS/SCI clearance, supporting work in regulated and Federal environments.

08 Trusted For

What clients and teams have repeatedly relied on.

The pattern behind the numbers is repeat trust. Below is a colleague's account, followed by the kinds of work people keep coming back for.

One of the most versatile and sharp-minded professionals in the IT architecture space. He doesn't just implement solutions, he builds them with future-proofing, performance, and business value in mind. If you need someone who can not only architect complex systems but also communicate the reasoning behind every decision, Brady is that person.
LMLawrence MalloyField Engineer · designDATA · LinkedIn recommendation
01

Regulated & Federal environments

Government, Financial, and Enterprise clients where security and compliance are not optional.

02

Executive-ready documentation

Architecture, SOWs, and diagrams built to survive RFP scrutiny and executive review.

03

Complex migrations & divestitures

Tenant-to-tenant moves, forest consolidations, and Fortune 500 separations with hard deadlines.

04

Microsoft security & compliance

Defender, Purview, and Conditional Access programs that standardize posture across tenants.

05

Delivery consistency

Templatized, repeatable engagements that reduce escalations and protect timelines.

06

Mentoring technical teams

Raising engineers and associate architects through SOPs, knowledge bases, and hands-on guidance.

09 Contact

Let us talk about the hard, high-stakes work.

Available for senior architecture, Federal technology, cloud modernization, Microsoft security, and strategic consulting conversations. If you are scoping something complex and regulated, that is exactly where I do my best work.