JUSTIN TERRELL
Fredericksburg
Summary
Senior IT executive with 10+ years of experience leading enterprise modernization, platform governance, and secure digital workplace transformation across highly regulated environments including federal financial oversight, healthcare, and biotech. Proven record of designing and executing Microsoft 365, identity, endpoint, and collaboration strategy at global scale supporting 5,000+ endpoints across multiple regions. Trusted leader in risk-based decision making, compliance readiness, operational resilience, and cross-functional stakeholder alignment. Experienced leading distributed engineering teams, optimizing licensing and vendor investments, strengthening security posture, and delivering measurable outcomes aligned with NIST and audit frameworks.
US Security Clearance: Top Secret / SCI Adjudicated (July 2021) | Public Trust (prior)
Overview
11
11
years of professional experience
1
1
Certification
Work History
Assistant Vice President - End User Engineering
State Street Bank and Trust Company
05.2022 - 10.2025
- Senior leader responsible for enterprise digital workplace strategy, Microsoft 365 governance, identity policy execution, and endpoint engineering across a globally distributed environment. Directed a blended operational and strategic delivery model while serving as senior escalation authority for high-impact incidents, platform modernization, and enterprise security initiatives.
- Key Executive Contributions & Outcomes:
- Owned and governed the global Microsoft 365 tenant supporting 5,000+ endpoints across seven international regions including the United States, United Kingdom, Europe, and APAC, ensuring service continuity, platform reliability, and scalable governance.
- Led a globally distributed engineering organization consisting of 8 direct reports (6 engineers), establishing performance accountability, technical standards, and execution discipline across multiple time zones.
- Served as enterprise platform owner for endpoint, identity, and collaboration services, ensuring operational delivery aligned with security, compliance, and business requirements.
- Directed the transformation of the environment from reactive support to a governed operating model by implementing standardized lifecycle processes, enterprise controls, and clear ownership frameworks.
- Executed a major Active Directory remediation initiative, correcting and removing 10,000+ stale or misconfigured AD objects, improving identity integrity and reducing systemic security risk.
- Implemented Quest Active Directory tooling to strengthen governance, auditing, and change control, increasing visibility and accountability across identity administration functions.
- Redesigned password and interactive logon security policies to strengthen authentication controls and compliance alignment, reducing risk exposure related to privileged access and legacy configurations.
- Implemented Microsoft Intune as the enterprise endpoint management platform, enabling standardized compliance enforcement, improved reporting, and lifecycle control across the global endpoint fleet.
- Led rationalization and cleanup of undocumented Group Policy Objects and security groups, improving policy consistency, reducing operational complexity, and strengthening baseline enforcement.
- Optimized Microsoft 365 licensing governance and entitlement alignment, reducing waste and ensuring cost efficiency tied to business role requirements and operational need.
- Acted as senior technical escalation authority and executive decision-maker for enterprise issues impacting identity, endpoints, and Microsoft 365 availability, balancing security requirements with operational continuity.
Endpoint Manager
Akebia Therapeutics (via Good Harbor Group)
08.2021 - 04.2022
- Senior endpoint domain lead responsible for enterprise endpoint strategy across Windows, macOS, mobile, thin client, and VDI platforms in a regulated biotechnology environment requiring compliance and validation-aware controls.
- Key Executive Contributions & Outcomes:
- Owned the strategic roadmap for enterprise endpoint platforms, aligning engineering execution with security and compliance requirements in a GxP-regulated environment.
- Served as technical and operational bridge between Endpoint Engineering, Security, Compliance, and leadership stakeholders, ensuring shared accountability and risk-aligned decision making.
- Defined enterprise endpoint strategy and executed modernization initiatives supporting Windows, macOS, and virtualized environments with strong lifecycle governance.
- Planned, designed, tested, and maintained standardized Windows and macOS imaging and deployment processes, enabling scalable device onboarding and consistent enterprise baselines.
- Replaced LogMeIn with an enterprise-grade remote management solution, improving endpoint visibility, operational response time, and administrative control.
- Designed and implemented a local administrator password rotation solution, strengthening privileged access control and improving security posture.
- Architected dual UEM solutions including Windows Autopilot deployment pipelines, supporting scalable provisioning and standardized device compliance.
- Redesigned patching and endpoint compliance policies, improving device security posture and reducing operational risk tied to unpatched systems.
- Supported audit readiness and validation-aware configuration management processes aligned to regulated biotech compliance requirements.
Senior Systems Engineer
Federal Housing Finance Agency (FHFA) (via Indigo IT)
02.2019 - 08.2021
- Senior infrastructure engineer supporting mission-critical federal systems across identity, messaging, virtualization, and enterprise operations in a high-security regulatory environment.
- Key Executive Contributions & Outcomes:
- Provided operational ownership and engineering leadership across servers, endpoints, identity systems, messaging platforms, and virtualization services supporting federal regulatory operations.
- Supported 24×7 monitoring and on-call operations, ensuring enterprise availability, incident response continuity, and service stability.
- Supported enterprise Exchange modernization efforts including Exchange 2013 → 2016 → Exchange Online migration activities, ensuring continuity of secure messaging systems.
- Led monthly Windows Server patching execution cycles, supporting timely remediation and compliance-driven operational processes.
- Authored and executed agency-wide workstation migration automation scripts preserving user profiles, configurations, and critical operational data.
- Performed Active Directory cleanup and directory hygiene improvements, strengthening identity integrity and reducing operational risk.
- Generated audit and investigation reports using Quest Active Administrator, supporting federal audit readiness and compliance evidence requirements.
- Executed Group Policy backup and recovery procedures supporting continuity planning and rapid restoration capability.
- Implemented secondary Citrix XenDesktop configurations to support operational resilience and continuity.
- Supported enterprise device and print modernization efforts including Konica firmware upgrades and AD-integrated address book solutions.
- Assisted in early Microsoft Intune configuration initiatives supporting modernization of endpoint governance and lifecycle control.
- Upgraded WhatsUp Gold monitoring platform, improving infrastructure visibility, alerting accuracy, and operational response capabilities.
IT Director / Infrastructure Architect (Various Roles)
01.2015 - 01.2019
- Held progressive IT leadership and architecture roles supporting regulated enterprise environments, leading infrastructure modernization, identity architecture, endpoint governance, vendor management, and operational service delivery improvement initiatives across on-premises and hybrid environments.
Education
Bachelor of Arts - Business
Harvard University
Cambridge, Massachusetts, MA04.2027
Skills
- Enterprise IT Strategy & Digital Transformation
- IT Governance, Policy, and Operational Excellence
- Cybersecurity Risk Management (NIST / Zero Trust Principles)
- Identity & Access Management (Active Directory, Authentication Controls)
- Microsoft 365 Enterprise Platform Ownership
- Messaging, Collaboration & Endpoint Ecosystem Leadership
- Unified Endpoint Management (Intune, Autopilot, UEM)
- Audit Readiness & Compliance Support (Federal, HIPAA, ISO, SOC)
- IT Service Delivery Model Optimization
- Program / Portfolio Execution & Technical Roadmaps
- Vendor & Licensing Governance
- Executive Stakeholder Engagement & Cross-Functional Leadership
- Workforce Leadership, Coaching, and Team Development
- Enterprise Documentation, Standards, and Controls
- Issue resolution skills
Certification
- Cyber Fundamentals Certificate for Law Enforcement Investigations, U.S. Department of Homeland Security
- Cryptocurrency for Law Enforcement Certificate, U.S. Department of Homeland Security
- Mobile Forensics Certificate, U.S. Department of Homeland Security
- Applied Cryptography Certificate, Udacity
- Microsoft Certified Technology Specialist (MCTS)
- Microsoft System Center Operations Manager (SCOM) Certificate
- Jamf Certified Associate
- ServiceNow Certified System Administrator
- PaperCut MF Certification
- Konica Minolta Outward Certification
- Certified Computer Hardware Technician
- Certificate in Artificial Intelligence for Robotics, Udacity
Academic Recognition
Eleanor B. Hull Award for Academic Achievement, President's Award for Academic Excellence, President George W. Bush, Certificate in Introduction to Copyright Law in America, MIT
Timeline
Assistant Vice President - End User Engineering
State Street Bank and Trust Company
05.2022 - 10.2025
Endpoint Manager
Akebia Therapeutics (via Good Harbor Group)
08.2021 - 04.2022
Senior Systems Engineer
Federal Housing Finance Agency (FHFA) (via Indigo IT)
02.2019 - 08.2021
IT Director / Infrastructure Architect (Various Roles)
01.2015 - 01.2019
Bachelor of Arts - Business
Harvard University