mk_

VANCOUVER, BC · SYSTEMS / INFRASTRUCTURE / AUTOMATION

Michael
Kashkov_

IT Specialist. Systems administrator.

I manage the systems behind daily operations: hybrid identity, Microsoft 365, servers, security, and legal applications. Hands-on L3 support, infrastructure troubleshooting, and PowerShell automation at Watson Goepel LLP.

Explore my work ↘View resume ↗
01 / BUILT TO KEEP THINGS RUNNINGSCROLL TO EXPLORE ↓
01 / ABOUTTHE PERSON BEHIND THE TERMINAL

Complex systems.
Practical solutions.

I’m an IT Specialist at Watson Goepel LLP, supporting the technology that legal professionals rely on every day.

At Watson Goepel, my administration responsibilities span the technology environment: Active Directory and Entra ID, Exchange Online, VMware vSphere, Windows servers and endpoints, SonicWall remote access, Sophos and Mimecast, and business-critical legal applications. I handle L3 troubleshooting and build automation that connects these systems.

Before legal IT, I supported VFX teams at Framestore, working with Linux and SunOS systems, enterprise storage, remote workstations, and infrastructure across Vancouver and Montreal.

Find me on LinkedIn ↗
CURRENTLYWatson Goepel LLP
PREVIOUSLYFramestore
BASED INMetro Vancouver, BC
02 / TOOLKITTECHNOLOGY WITH A PURPOSE

Systems administration.
With the depth to deliver.

Hands-on administration across legal IT and VFX infrastructure, backed by scripting, troubleshooting, and operational ownership.

[ AD ]

Hybrid identity & access

Administer on-premises Active Directory, Entra ID, Entra Connect synchronization, hybrid-joined devices, enterprise application SSO, and MFA. Manage onboarding, offboarding, groups, permissions, and identity troubleshooting.

Active DirectoryEntra Connect SyncHybrid identitySSO / MFA
[ EXO ]

Microsoft 365 & Exchange Online

Manage shared mailboxes, delegation, user access, mailbox rules, and forwarding checks. Investigate sign-in behavior and use Microsoft Purview audit and eDiscovery tools for investigations.

Microsoft 365Exchange OnlineEntra sign-in logsPurview
>_

PowerShell, Graph & automation

Build certificate-authenticated app automation using Microsoft Graph and Exchange Online. Script mailbox-to-group synchronization, application deployment, service recovery, and scheduled operations.

PowerShell 7Microsoft GraphApp registrationsTask Scheduler
[ OS ]

Windows, GPO & patching

Administer Windows Server and Windows 10/11 endpoints. Manage WSUS approvals, OU-based targeting, application deployments, local administrator controls, and workstation policies; investigate effective policy using GPResult and event logs.

Windows Server 2019/2022Group PolicyWSUSWindows 10/11
[ VM ]

Virtualization & shared infrastructure

Administer VMware vSphere and on-premises servers at Watson Goepel, alongside Windows file shares, NTFS permissions, print services, and business application infrastructure.

VMware vSphereWindows serversSMB / NTFSFile / print services
{ :: }

Networking & diagnostic investigation

Manage DNS and DHCP, SonicWall firewall/VPN and NetExtender remote access. Use packet captures, Wireshark, and sign-in logs to trace authentication issues across network and application layers.

SonicWallWiresharkDNS / DHCPVPN / RDP
[ SEC ]

Security administration & response

Administer Sophos Central and Mimecast. Investigate endpoint and email threats, review Entra sign-ins, and handle phishing response through account resets, scans, and clear user communication.

Sophos CentralMimecastPhishing responseKnowBe4
[ WEB ]

IIS, certificates & application services

Manage SSL/TLS certificates and IIS bindings for Elite 3E. Troubleshoot application connectivity, certificate trust, and authentication dependencies across Windows-hosted business services.

IISSSL / TLSInternal certificatesElite 3E
[ DOC ]

Legal applications & document management

Administer and support iManage Work, Elite 3E, Litera Compare, RightFax, and Copitrak. Manage Everlaw accounts and permissions, support Citrix and PDF workflows, and script DMS client transitions.

iManage / WorldoxLitera CompareElite 3E / CopitrakEverlaw / RightFax
~/

Linux, Unix & enterprise storage

At Framestore, deployed and managed Linux and SunOS storage systems, Isilon and ZFS, directory services, firewall/proxy rules, SFTP, and RLM license servers. Built Bash monitoring, cleanup, and bidirectional synchronization scripts.

Linux / SunOSIsilon / ZFSBash / cronLDAP / NIS
[ IO ]

Remote workstations & business services

Led HP Anyware brokering setup for Framestore’s Vancouver and Montreal teams. At Watson Goepel, administer RightFax services and recovery automation, Ricoh printers, Windows print services, and remote access troubleshooting.

HP AnywareRightFaxRicohWindows Print Server
[ OPS ]

L3 support & technical documentation

Own complex troubleshooting, prioritize incidents by business impact, keep users informed, and coordinate with colleagues and vendors. Centralize IT procedures in Joplin and develop a BookStack knowledge-base proof of concept.

L3 supportJira / ConfluenceJoplinBookStack POC

CURRENT INITIATIVES

Intune implementation project: involved in planning Windows, iOS, and Android management, enrollment, compliance, application protection, and pilot testing. Project scope includes Apple Business Manager, Autopilot, and Windows LAPS; rollout is in progress.

BookStack knowledge-base pilot: a working native Windows proof of concept, with editable resources and role-based editing tests. Production rollout remains a separate step.

ADDITIONAL TECHNICAL FOUNDATION · VCC

Coursework and development background: React / MERN, Angular, Ruby, PHP, Hyper-V, Nagios, and Prometheus. These complement the production administration experience above.

03 / EXPERIENCEFROM VFX PIPELINES TO LEGAL OPERATIONS

Where I’ve
made things work.

AUG 2024 — PRESENTCURRENT

IT Specialist

Watson Goepel LLP Vancouver / West Vancouver

Broad responsibility for systems administration and L3 support across the firm’s hybrid Microsoft environment, VMware infrastructure, network and security tools, and legal applications.

  • Scripted the Worldox-to-iManage desktop transition and deployed Litera Compare integration.
  • Administer RightFax and automated detection and recovery of failed services.
  • Configure enterprise application SSO and MFA, manage employee onboarding and offboarding, and administer WSUS and printing.
  • Built PowerShell automation using Microsoft Graph, Exchange Online, app registration, and certificate authentication to synchronize shared-mailbox objects with an Entra security group.
  • Investigated Microsoft 365 authentication failures using SonicWall packet captures, Wireshark, and Entra sign-in logs; managed SSL/TLS certificates and IIS bindings for Elite 3E.
  • Handled phishing response, including account resets, scans, and user communication, alongside Sophos Central and Mimecast administration.
  • Centralized IT procedures in Joplin, developed a BookStack knowledge-base proof of concept, and participate in the Intune implementation project.
JUL 2023 — JUN 2024

Systems Support Administrator

Framestore Vancouver / Montreal

Supported infrastructure for VFX teams, including Linux and SunOS storage, directory services, networking, and secure file transfers.

  • Led HP Anyware brokering setup for the Montreal and Vancouver teams.
  • Managed Isilon/ZFS storage, DNS, firewall and proxy rules, and RLM license servers.
  • Built Bash scripts for monitoring, scheduled maintenance, and cross-server synchronization.
AUG 2022 — JUL 2023

Systems Support

Framestore Vancouver / Montreal

Deployed Windows workstations, managed accounts and application access, supported users through Jira, and maintained documentation in Confluence. Collaborated with L2 and L3 teams on upgrades and network troubleshooting.

FOUNDATIONS

Computer Systems Technology · Vancouver Community College · 2022

Bachelor of Business Administration · Kuban State University · 2013

04 / SELECTED WORKREAL PROBLEMS. WORKING SOLUTIONS.

Projects with ownership.
Details that show the work.

01

WATSON GOEPEL · CLOUD AUTOMATION

Exchange shared-mailbox group synchronization

Built app-authenticated PowerShell automation connecting Exchange Online and Microsoft Entra ID.

Read project details
Context
An Entra security group needed to reflect shared mailboxes in Exchange Online as mailbox-backed directory objects.
My contribution
Developed a synchronization script using Microsoft Graph, Exchange Online, an app registration, and certificate-based authentication. Implemented addition of missing objects and removal of stale group members, with scheduled execution and logging in the workflow.
Delivered
A write-capable mailbox-to-group synchronization workflow. This manages directory membership, rather than mailbox contents or delegate access.
PowerShellMicrosoft GraphExchange OnlineCertificate authentication
02

WATSON GOEPEL · APPLICATION INFRASTRUCTURE

Elite 3E certificate & IIS administration

Managed the certificates and HTTPS bindings behind a business-critical legal application.

Read project details
Context
An expired HTTPS certificate on an Elite 3E application service caused trust and connectivity problems.
My contribution
Worked through certificate enrollment and issuance, and managed SSL/TLS certificates and IIS bindings for Elite 3E services.
Delivered
A replacement service certificate was issued; the work covered application certificate management and HTTPS configuration.
Elite 3EIISSSL / TLSCertificate services
03

WATSON GOEPEL · COMPLEX TROUBLESHOOTING

Tracing Microsoft 365 authentication failures

Connected network evidence with identity logs to locate the source of unexpected authentication failures.

Read project details
Context
Microsoft 365 authentication failures required investigation beyond the affected user’s workstation.
My contribution
Used SonicWall packet captures, Wireshark, and Entra sign-in logs to correlate traffic with authentication events.
Delivered
Traced the failures to an internal server, identifying the source for further application-level investigation.
SonicWallWiresharkEntra sign-in logsRoot-cause investigation
04

WATSON GOEPEL · DOCUMENT MANAGEMENT MIGRATION

Worldox → iManage desktop migration

Built and deployed the scripted desktop transition for a firm-wide document management migration.

Read project details
Context
The move to iManage required removing Worldox components and installing the replacement software for individual users.
My contribution
Developed and deployed a scripted per-user removal and installation workflow. Also configured and deployed Litera Compare integration with iManage across user machines.
Delivered
An automated desktop transition workflow and integration of the firm’s document comparison tool with its new DMS.
WorldoxiManageLitera CompareDeployment scripting
05

WATSON GOEPEL · SERVICE AUTOMATION

RightFax failure detection & recovery

Turned service monitoring and restart actions into an automated recovery workflow.

Read project details
Context
The on-premises RightFax server required service monitoring and maintenance.
My contribution
Administered the server and developed a custom script that detects service failures and restarts affected components.
Delivered
Automated detection and restart behavior for failed RightFax services.
RightFaxService monitoringRecovery automation
06

WATSON GOEPEL · ENDPOINT ACCESS CONTROLS

Domain & endpoint website restrictions

Implemented website restrictions through both DNS configuration and Windows firewall policy.

Read project details
Context
The firm needed restrictions on access to specified websites across its Windows desktop environment.
My contribution
Created a DNS forward lookup zone for domain-based blocking and deployed Group Policy firewall rules targeting known IP ranges across Windows 10/11 devices in relevant organizational units.
Delivered
Restrictions enforced at both domain resolution and endpoint firewall levels.
DNSGroup PolicyWindows FirewallActive Directory OUs
07

FRAMESTORE · REMOTE WORKSTATION INFRASTRUCTURE

HP Anyware brokering across two locations

Led the setup of the HP Anyware brokering system for Montreal and Vancouver.

Read project details
Context
Framestore’s Montreal and Vancouver environments needed HP Anyware brokering for remote workstation access.
My contribution
Led the brokering-system setup as a key project within the systems support administrator role.
Delivered
HP Anyware brokering setup for both locations.
HP AnywareRemote workstationsMulti-location infrastructure
08

FRAMESTORE · INFRASTRUCTURE AUTOMATION

Bash automation for server operations

Developed scripts for recurring operational tasks across the server environment.

Read project details
Context
Systems operations included scheduled jobs, monitoring, reporting, cleanup, and data movement between servers.
My contribution
Developed Bash scripts and cron jobs for automated monitoring and reporting, cleanup tasks, and cross-server bidirectional data synchronization.
Delivered
Scripted workflows for scheduled maintenance, operational reporting, and synchronization.
BashcronMonitoring / reportingBidirectional synchronization
09

WATSON GOEPEL · IT KNOWLEDGE MANAGEMENT

Centralizing IT procedures in Joplin

Proposed and led the transition from static SOP documents to a centralized procedure system.

Read project details
Context
IT procedures were maintained as static documents stored in Worldox.
My contribution
Proposed Joplin as a centralized system and led the transition of IT procedure documentation.
Delivered
A move toward centralized IT procedures in Joplin, replacing the previous static-document approach.
JoplinSOPsKnowledge managementProcess improvement
10

WATSON GOEPEL · WORKING PROOF OF CONCEPT

BookStack knowledge base on native Windows

Built a working pilot for editable internal resources and IT documentation.

Read project details
Context
Existing resources included static documents and PDFs; the pilot explored editable pages and controlled editing permissions.
My contribution
Set up BookStack using IIS, FastCGI, PHP, and MariaDB on native Windows. Worked on branding, page layout, PDF-to-page conversion, cross-device layout testing, and role-based editing tests.
Delivered
A working proof of concept. Production hosting, HTTPS/SSO, final permissions, and backup/restore validation remain pilot follow-up work.
BookStack POCIIS / FastCGIPHP / MariaDBPermissions testing

NEXT CONNECTION

Let’s make
things work.

Have a systems challenge, a project, or an opportunity in mind? Let’s talk.

michael.kashkov@gmail.com ↗
Download resume ↓LinkedIn ↗