Carlos Annes
Microsoft 365 · Hybrid Identity · Infrastructure
Designing secure, scalable Microsoft architectures for organisations operating across hybrid and cloud environments.
Carlos Annes is a Microsoft infrastructure architect specialising in hybrid identity, security architecture, and large-scale Microsoft 365 migrations. Based in Lisbon, he delivers remote-first engagements to enterprise organisations across Europe.
He has delivered enterprise programs for organisations including Ericsson, the European Commission, Metro Lisboa, and Körber — covering security transformation, hybrid identity architecture, and global tenant standardisation. Prior to independent consulting, he served as an O365 and Exchange Support Engineer at Microsoft.
Core Expertise
Microsoft Certified
Delivery at Scale
How I Work
Evidence-driven
Every change has a transcript, evidence pack and rollback plan. No ambiguity about what changed, when, or why.
Remote-first
Structured sprint delivery via time-boxed PIM and async Teams — timezone-flexible, zero travel overhead.
Architecture-led
Design first, implement second. HLD and LLD produced before any change is made to production.
Career Timeline
Designed and implemented enterprise endpoint protection for 15k+ endpoints. EDR block mode, ASR rules, and Network Protection deployed. Zero Standing Admin enforced via PIM. KQL hunting queries and incident response playbooks delivered.
Exchange 2019 deployed from scratch with hybrid configuration and DNS cutover playbook. Forest and domain functional levels upgraded to 2019. PKI and Certificate Authority rebuilt end-to-end. Zero mail loss on cutover.
Designed and implemented Exchange 2019 Hybrid architecture for a complex multi-national environment — send/receive connector hardening, OAuth, Autodiscover validation, and co-existence routing.
Standardised Intune compliance baseline, Autopilot ring model, and Defender for Endpoint RBAC across 20+ subsidiaries. Replaced legacy AV. MDO anti-phishing and Safe Links deployed. Full build book per entity.
Led the 40,000-user unified communications platform. Multi-project roadmaps spanning Exchange Hybrid, Skype for Business, PKI operations, and forest-level infrastructure maintenance at institutional scale.
O365 and Exchange Online support engineering for enterprise tenants. Knowledge base authoring, escalation handling, and complex multi-forest hybrid troubleshooting.
Messaging administration, SIP/VoIP, Lync Server deployment and load balancing across a pan-European organisation.
Lync escalation engineering and support for enterprise clients.
Qualifications
In Progress — Microsoft
Achieved
Certifications reflect continuing investment in the Microsoft security and cloud architecture stack. Practical experience across 15+ years of enterprise delivery underpins the credential programme.
Tools & Scripting
Ready to work together?
Book a discovery call to discuss your Microsoft environment, current challenges, and how a structured engagement can help.
Schedule a Consultation