Dionysis Karamitopoulos
Entra ID · Intune · Defender XDR · Security Architecture · ISO/IEC 27001:2022
Designing secure Microsoft 365 environments through strategic Identity & Access Management, endpoint governance, and ISO-aligned security architecture — reducing exposure and enabling sustainable compliance at scale.
ABOUT ME
Building Secure Digital Infrastructures Through Strategic Governance
I'm an Information Security Architect focused on Microsoft 365 security. I specialise in Identity & Access Management, endpoint governance, and secure cloud design. My tools of choice are Intune, Defender XDR, and Entra ID.
I have hands-on experience with ISO/IEC 27001:2022. This covers risk management, internal audits, and regulatory alignment. I build governance structures and security baselines that support business goals.
Career Focus
- Microsoft 365 security architecture and secure environment design
- Identity & Access Management with Entra ID in hybrid environments
- Endpoint governance via Intune & Defender XDR
- ISO/IEC 27001:2022 implementation, risk management, and compliance
Strategic Thinking
I align security with business goals. Risk is managed, not avoided.
Collaborative Leadership
I work across teams to embed security best practices organisation-wide.
Continuous Improvement
I stay current with emerging threats and adapt security strategies accordingly.
Delivering security programmes that improve visibility, reduce exposure, and support sustainable compliance.
PROFESSIONAL EXPERIENCE
Career Journey
Freelance IT & Cybersecurity Consultant
Fiverr · Freelance
- Providing IT infrastructure, cybersecurity, and compliance consulting.
- Technical troubleshooting and security hardening for SMEs.
- Managing client engagements and delivering quality technical solutions.
Security Specialist
Microsoft Community · Freelance
- Supported users on the Microsoft Community Hub.
- Focused on Microsoft security products — guidance and technical solutions.
IT Systems & Integration Engineer (Cybersecurity & Compliance Projects)
Simtec Software & Services · Contract
- Deployed Microsoft Intune across all endpoints with security baselines and compliance policies.
- Integrated Microsoft Defender for Endpoint to strengthen threat detection and incident response.
- Designed Conditional Access, App Protection, and Identity Protection policies.
- Configured Fortinet FortiGate firewalls with VPN, certificate auth, and deep inspection.
- Developed ISO/IEC 27001:2022 policies, risk assessments, and incident response procedures.
- Performed internal audits and gap analyses ahead of external ISO 27001 certification.
- Delivered cybersecurity awareness training to staff.
Project: Mixys Cloud Platform Security
- Secured the Mixys cloud infrastructure through configuration and monitoring.
- Implemented WAF, VPN, and endpoint security for application and data protection.
- Ensured GDPR compliance: HTTPS/TLS, encryption, audit logs, MFA, and RBAC.
MIS Engineer & System Administrator
Regency Casino Thessaloniki · Full-time
- Deployed and managed Defender for Endpoint, FortiEDR, and Intune for unified endpoint protection.
- Configured FortiMail with anti-phishing filters and spam mitigation.
- Managed Active Directory and GPOs for user provisioning and access control.
- Led Project BUTLER — integrated new IT systems into casino F&B operations.
- Delivered technical support aligned with security standards and compliance posture.
Information Security Analyst
CBS LAN A.E. / Lancom Ltd · Contract
- Training programme in IBM QRadar SIEM — log collection, correlation, and event analysis.
- Identified and classified security incidents and false positives.
- Exposure to SOC workflows, incident escalation, and reporting.
- ISO/IEC 27001:2022 control mapping and risk management fundamentals.
- Analysed EDR alerts and Defender for Endpoint telemetry.
Support Engineer
SingularLogic · Full-time
- Primary contact for software and hardware technical support.
- Remote troubleshooting using diagnostic tools.
- Managed service requests via phone, email, and ticketing systems.
- Verified support contract terms and coverage for each request.
Career Break
Professional Development · Career Break
- Focused on upskilling in cybersecurity, system administration, and networking.
- Completed certifications and online courses in IT and security.
- Attended workshops on cloud computing and IT security.
Professional FIFA Player & Streamer (eSports)
Synapsecom Telecoms S.A. · Full-time
- Competed in professional FIFA tournaments on live-streamed betting platforms.
- Managed online presence and engaged with a fanbase during streams.
- Analysed in-game stats to improve competitive performance.
Office Employee
Coral A.E. · Full-time
- Managed daily office operations including sales and invoicing.
- Coordinated fuel deliveries and monitored stock levels.
- Handled customer concerns and maintained financial records.
Office Employee at Fuel Station
Iliadis Paulos & Co · Full-time
- Handled invoicing, sales documentation, and supplier communication.
- Managed fuel orders and inventory.
- Resolved customer complaints and maintained filing systems.
Owner & Manager | Delicatessen Store
Tsotyli Delicatessen · Self-employed
- Oversaw store operations — inventory, procurement, and team coordination.
- Ran marketing initiatives to grow sales and retain customers.
- Managed budgeting and financial reporting.
- Built strong client relationships through excellent service.
CERTIFICATIONS & CREDENTIALS
Professional Qualifications
Click any badge to view details
All certifications are also published on Credly
Visit my Credly profile to verify credentials, view digital badges, and see the full up-to-date list of earned certifications.
AI In Cybersecurity
Cato Networks
Information Security Specialist
LetsDefend (now part of HackTheBox)
Certified Process Injection Analyst (CPIA)
CyberWarfare Labs
Network Defense
Cisco
Cyber Threat Management
Cisco
Digital Safety and Security Awareness
Cisco
Fortinet FortiGate 7.6 Operator
Fortinet
Fortinet Certified Associate Cybersecurity
Fortinet
Google Cybersecurity Certificate
Governance, Risk, Compliance, and Data Privacy
IBM SkillsBuild
Microsoft Defender for Endpoint Ninja Training
Microsoft Learning
Data Analyst Professional
Reatcode Group
Practical Malware Analysis & Triage
TCM Security
Certificate of Training Network Engineer
National and Kapodistrian University of Athens
ISO 27001:2013 Basic Principles of Information Security Management Systems
TÜV NORD Hellas
Certificate of Training Cybersecurity & Cybercrime
National and Kapodistrian University of Athens
Strategic Cybersecurity Management
AttackIQ
TECHNICAL EXPERTISE
Skills & Technologies
Specialized in Microsoft Security Ecosystem
CORE COMPETENCIES
Microsoft 365 Security
Identity & Access Management
Endpoint Security & Management
Infrastructure & Network Security
Governance, Risk & Compliance
Systems Administration
COMMUNICATION
Languages
Greek
Native
English
Professional
FEATURED PROJECTS
Key Technical Initiatives
Industrial Network Architecture – Pigadia Ski Resort
Axess Infrastructure Deployment
Designed and deployed a production-grade Layer 3 network for a ski resort. The system supports distributed access control and parking automation across the entire site.
Deployment Highlights
- Core switching: SG2428P / SG3210
- ER706W-4G router with 4G WAN failover
- VLAN segmentation: AXESS, CCTV, Guest WiFi, Management
- 9 industrial PoE cabinets across the resort
- Dedicated parking infrastructure (APS1, APS2, barrier, counter)
- Static IP alignment with AXESS vendor range (10.10.10.x)
- Inter-VLAN routing and firewall policy design
- CCTV isolated on a dedicated subnet
- Centralised device management via OC300
Documentation
Pigadia – AXESS Network & Infrastructure Overview
High-level overview of the network. Covers gate cabinets, chairlift integration, ticket office, parking automation, and server connectivity.
Omada L3 Network Architecture – Pigadia Deployment
Layer 3 network design and VLAN segmentation. Includes core switching, ER706W-4G gateway, industrial PoE cabinets, and parking network. Built for traffic isolation and scalable access control.
Pigadia – Omada Network Architecture & Runbook
Full deployment runbook. Includes VLAN design, IP addressing, PoE cabinets, parking integration, firewall rules, and security hardening guidelines.
Cyber-Physical Systems (CPS) Smart Office – Network & Security Design
University Project – Mediterranean College
University project designing a secure Smart Office network. It simulates a Siemens-style CPS environment with IoT devices and enterprise IT. A Head Office and Branch Office are connected via IPsec VPN. Built in Cisco Packet Tracer with full security documentation.
Deployment Highlights
- HQ with CPS Control Server, Backup, and SIEM
- IoT devices: smart lamp, door lock, CCTV, thermostat, sensors
- Secure Wi-Fi with WPA2-PSK and AES encryption
- VLANs: 10 (Servers), 20 (IoT), 30 (Branch)
- Site-to-site IPsec VPN (AES) between HQ and Branch
- OSPF for dynamic routing
- Firewalls and ACLs for perimeter security
- AAA local authentication on all devices
- Branch users control HQ IoT devices through VPN
Documentation
University of Derby – CPS Smart Office Presentation
Project presentation covering the network design, VLAN segmentation, IPsec VPN, and before/after hardening analysis.
Our Network Topology
Visual topology showing HQ and Branch architecture, VLANs, IPsec tunnel, IoT devices, and server placement.
Enterprise GRC Transformation & Risk Reduction Program
300+ Employees – Financial Sector
A 4-month GRC transformation for a 300+ employee financial organisation. The project covered risk identification, impact assessment, mitigation planning, and full policy framework redesign. All outputs were structured for regulatory compliance.
Deployment Highlights
- Risk workshops and structured risk register
- 5×5 risk matrix model
- Executive heat maps for exposure and residual risk
- Core governance and security policy redesign
- Control ownership with RACI model
- ISO 27001 / NIST control alignment
- Measurable reduction in critical risk exposure
- Improved audit readiness and policy enforceability
Documentation
Anonymized Enterprise GRC Transformation Report
Anonymized 4-month GRC project for a financial services firm. Includes risk assessment, heat maps, control gaps, policy redesign, RACI model, and mitigation roadmap.
Project Butler – F&B Systems Optimization
Regency Casino Thessaloniki
Led Project Butler at Regency Casino Thessaloniki. The goal was to improve Food & Beverage operations through better technology. The project was delivered on time and at 100% completion.
Deployment Highlights
- Built a business plan aligned with department needs
- Coordinated IT, Finance, and F&B teams
- Installed devices and printers across the department
- Worked with Butler company on custom solutions
- Enhanced access security and user management
- Delivered on schedule — 100% completion
ACADEMIC BACKGROUND
Education & Training
EDUCATION
European International University - Paris
Official
Advanced Professional Diploma in Cyber Security, Computer and Information Systems Security/Information Assurance
Sep 2025 – Present
Covers both technical and managerial aspects of cybersecurity. Key areas include risk management, infrastructure protection, and incident response.
Includes preparation for the BSI ISO 27001 Lead Auditor certification. Covers ethical hacking, penetration testing, and strategic security decision-making.
Mediterranean College
Advanced Professional Diploma in Cyber Security, Computer and Information Systems Security/Information Assurance
Sep 2025 – Present
Covers both technical and managerial aspects of cybersecurity. Key areas include risk management, infrastructure protection, and incident response.
Includes preparation for the BSI ISO 27001 Lead Auditor certification. Covers ethical hacking, penetration testing, and strategic security decision-making.
General High School
High School Diploma, Technological
2006 – 2009
KEY COURSES
European International University - Paris
Advanced Diploma Program
Advanced Security Protocols
Enterprise Security Management
Security: Attacks and Countermeasures
Securing Networks
Human and Legal Aspects of Cyber Security
Certification Preparation
BSI ISO 27001 Lead Auditor — Information Security Management Systems
COMMUNITY & MEMBERSHIP
Professional Memberships
Corporate Member
Science & TechnologyCloud Security Alliance
Feb 2026 - Present
Candidate
Science & TechnologyISC2
Feb 2026 - Present
Member
Science & TechnologyCyberSecurity NonProfit (CSNP)
Feb 2026 - Present
Affiliate
Science & TechnologyChartered Institute of Information Security
Feb 2026 - Present
CAUSES I CARE ABOUT
Speaking & Events
Webinars
Sessions where I share knowledge on cybersecurity, Microsoft 365 security architecture, and compliance frameworks.
Artificial Intelligence & Cybersecurity: Threats, Defense and Regulatory Compliance
Free seminar as part of Edu Festival 2026 (140 Free Seminars). The talk explores how AI and GenAI are reshaping cybersecurity — both as attack accelerators (phishing, deepfakes) and defensive tools. Covers risk through the CIA Triad and the EU AI Act accountability framework.
Download Full Resume
Complete professional profile in PDF format
GET IN TOUCH
Let's Connect
I'm always interested in discussing new opportunities, collaborations, or sharing insights about cybersecurity and IT infrastructure. Feel free to reach out through any of the channels below.