Find the weak point
I look for the places where things slow down or could go wrong, like a manual handover, a security gap or an approval that waits too long.
--:--
Today · Erbil, Kurdistan
Z
Zhilya Salam Mohammed
IT Systems & Security · Solutions Consultant
I take care of IT systems and security for a group of about 400 people, from Microsoft 365 and DocuWare to our websites and help desk.
Conditional Access · checking this visitor
- IdentityWelcome, visitor
- Multi-factor authenticationSatisfied
- Device complianceCompliant
- Sign-in riskLow
Evaluating sign-in…✓ Access granted
01 — About
A generalist, on purpose.
I joined SAPCO Group as a fresh graduate. My manager has been a real mentor to me. He gave me a strong start, and I kept building on it by teaching myself whatever the job needed next.
Over time my work grew beyond my original role, into security, automation, IT policy and leading the help desk. When I see something that could work better, I like to fix it, then show the team how it works so they can run it without me.
- Leading IT support for ~400 people in 4 branches
- Securing Microsoft 365, Entra ID, Intune and Defender
- Learning Arabic, and more Microsoft security
Build the fix
Then I build a fix with the tool that suits it best. That could be a DocuWare workflow, a .NET integration, a Conditional Access policy or a website.
Teach it so it lasts
I write down how it works and train the people who use it, so it keeps working after I hand it over.
02 — Experience
Where I've worked
4+ years across IT operations, security, development and design.
Dec 2023 — Present
Solutions Consultant — Internal IT Systems & Security
Uruk Engineering Services Co. (SAPCO Group) · Erbil
Leadership
- Lead IT support: direct the Help Desk Engineer, set standards, and act as final escalation for ~400 users in 4 branches.
- Created the organisation-wide IT and security policies, and the standards for help desk and operations.
- Simplified onboarding and offboarding for senior management, so a leaver's tasks are handed over easily.
Security & cloud
- First responder for security incidents; investigate Defender alerts with our external SOC provider.
- Manage Microsoft 365, Azure, Intune and Entra ID: Conditional Access, device compliance, licences, server health.
Systems
- Synced Microsoft 365 with DocuWare (HR's source of truth), so leavers' accounts are blocked automatically.
- Created the attendance management system and a proper HR structure in DocuWare.
- Created new recruitment processes that simplify requests, interviews and approvals.
- Own DocuWare group-wide; built the employee benefits request system.
Websites
- Build and maintain company websites in Odoo with custom code; manage Google Search Console.
- Drafted a 12-month maintenance contract, with service levels, covering 9 sister-company websites.
Aug 2022 — Nov 2023
Full-Stack Developer & UI/UX Designer
Swift Tech Company · Erbil
- Designed and developed a Laravel web application.
- Built Laravel landing pages for clients.
- Trained in Flutter mobile app development.
2019 — Present
Freelance Developer & Designer
Self-employed · Erbil
- Front-end development (React, HTML/CSS, JavaScript) and UI/UX design for local businesses.
03 — Case files
Problems found. Problems closed.
Three projects in more detail, plus a few other things I've built. Most of my work is on internal systems, so this is the best way to show it.
Case 01 · Identity & automation
Onboarding and offboarding: from weeks to hours
weeks → hourstime to onboard or offboard a person
- Microsoft 365
- Entra ID
- DocuWare
- Integration
- Before
- Onboarding and offboarding were mostly manual and could take days or even weeks. Closing a leaver's account depended on IT being told in time.
- What I built
- I connected Microsoft 365 with DocuWare, where HR keeps employee records. Now, when HR records that someone is leaving, their account is blocked automatically. I also made the handover simpler for senior management, so a leaver's tasks are passed on properly.
- Result
- It now takes a day at most, and often just an hour or two. Accounts are closed on time without anyone having to chase it.
HR records a leaverDocuWare
→
Accounts syncDocuWare ↔ M365
→
Access blockedEntra ID · automatic
→
Tasks handed overto the right person
Case 02 · Security operations
First responder for ~400 people
295+Defender alerts investigated, and counting
- Defender XDR
- Conditional Access
- Intune
- Entra ID
- Purview
- What I do
- When Microsoft Defender raises an alert, I'm the first to respond. I look into it and work through it together with our external SOC provider.
- Prevention
- I manage Conditional Access and Intune device compliance across Microsoft 365, Azure and Entra ID, so a stolen password on its own isn't enough to get in.
- Certified
- In October 2026 I earned Microsoft's Applied Skills credentials for Defender XDR and for Purview information protection and data loss prevention.
Case 03 · Governance & people
One IT standard for four branches
4 branchesErbil · Baghdad · Basra · Dubai
- IT policy
- Help desk
- Mentoring
- Before
- The group didn't have a shared IT and security policy yet, or one standard way of running the help desk.
- What I did
- I wrote the organisation-wide IT and security policies and set the help desk standards. I now direct our Help Desk Engineer, and I trained new IT team members as they joined.
- Result
- Every branch works to the same rules, and I'm the final escalation point for around 400 users.
Also built
- Recruitment in DocuWareRequests, interviews and approvals in one simple flow.
- HR systems in DocuWareAttendance, HR structure and employee benefits requests, used across the group.
- Company websitesBuilt in Odoo with custom code, plus a 12-month maintenance contract with service levels for 9 sister-company websites.
04 — Console
Run a scan on me.
A small PowerShell-style window. Type a command or click one below. Get-Help is a good place to start.
05 — Skills
What I work with
Items marked ✓ are certified.
Systems & platforms
- DocuWare
- Odoo 17
- Microsoft 365
- Entra ID
- Intune
- Exchange Online
Cloud & security
- Azure
- Defender XDR
- Purview
- Conditional Access
- Incident response
- SOC collaboration
Development
- C#
- .NET
- REST APIs
- PHP / Laravel
- JavaScript
- React
- Node.js
- HTML / CSS
- Flutter (basic)
IT operations
- MySQL
- Data migration
- Access management
- Onboarding / offboarding
- Help desk leadership
Design & docs
- Illustrator
- Photoshop
- UI/UX design
- Technical writing
- Training materials
Languages
- Kurdish — native
- English — fluent
- Arabic — learning
06 — Credentials
Certified & still learning
Education · University of Kurdistan Hewlêr
BSc Computer Science
Microsoft · Applied Skills
Defend Against Cyberthreats with Microsoft Defender XDR
Microsoft · Applied Skills
Information Protection & DLP with Microsoft Purview
Microsoft · Badge
Cyber Genius 1.0
Awarded for earning both credentials above.
PEEC · University of Kurdistan Hewlêr
Leadership & Management
DocuWare · 5 certifications
Technical Expert, System Administrator, Cloud, Sales Expert, Sales Professional
Odoo · Certification
Odoo 17 Certified
07 — Contact
Let's talk.
If you have a question or would like to work together, send me an email or a message below.
or run Hire-Zhilya in the console ↑