Dionysis Karamitopoulos

Identity is the new perimeter. I start every engagement by mapping who has access to what — and why.

Using Microsoft Entra ID, I set up Conditional Access policies that check device health, location, and risk level before granting access. Privileged Identity Management limits admin rights to exactly when they are needed.

Every design follows Zero Trust principles: verify every request, use least privilege, and always assume breach.

Good security architecture is not about tools. It is about turning business risk into clear, practical controls.

I use Microsoft Defender XDR to connect security across endpoints, email, identities, and cloud apps. This gives teams one place to see and respond to threats.

I also build governance frameworks — ISO/IEC 27001 policies, risk registers, and audit-ready documentation. The goal is security that the business can actually sustain.

Secure endpoints start before the device ever reaches the user.

I use Microsoft Intune and Windows Autopilot to enroll devices automatically. The right compliance policies and security baselines apply from day one — no manual setup needed.

Microsoft Defender for Endpoint monitors behaviour and flags threats in real time. In cloud environments, I apply access controls and Defender for Cloud to keep workloads compliant.

Compliance should be the result of good security — not a checklist bolted on at the end.

I work with ISO/IEC 27001:2022, the EU NIS 2 Directive, and GDPR. Risk assessments follow a clear method: identify threats, rate likelihood and impact, apply the right controls.

As a NIS2DTP and CAMS® holder, I have current, formally tested knowledge of EU security regulations. I translate that into steps organisations can actually follow.