Alexander Frank
Identity & Access Management · Microsoft Entra ID · Intune · Okta
Profile
IAM and endpoint consultant for Microsoft Entra ID, Intune and Okta. I implement Conditional Access, identity lifecycle and device management that hold up in day-to-day operations – for companies, system integrators and MSPs in Germany, Austria and Switzerland. Eleven years as founder and managing director of an IT services company with around 30 retained business clients.
Core Skills
- Microsoft Entra ID: Conditional Access, Privileged Identity Management, Access Reviews, Entitlement Management, Identity Protection, passwordless and FIDO2, Temporary Access Pass, Administrative Units, break-glass design, role models
- Okta: Identity Engine, Universal Directory, Lifecycle Management, SCIM, SSO with SAML 2.0 and OIDC, Group Rules, Okta Expression Language, FastPass, Device Assurance, Network Zones, custom admin roles
- Endpoint management: Microsoft Intune, Windows Autopilot, Windows 11, macOS, iOS, Android Enterprise, compliance policies, configuration profiles, app protection (MAM) for BYOD, Managed Home Screen
- Hybrid identity: Active Directory, Entra Connect Sync and Cloud Sync, password hash sync, pass-through authentication, Hybrid Entra Join, Okta AD Agent
- Automation: Microsoft Graph PowerShell SDK, joiner-mover-leaver, bulk changes from CSV, sign-in and audit log analysis
- Further: Microsoft 365 administration, DNS, mail, certificates, documentation, end-user training
Certifications
- Okta Certified Administrator · 09/2026 · valid until 09/2028
- Okta Certified Professional · 08/2026 · valid until 08/2028
- Microsoft Certified: Identity and Access Administrator Associate (SC-300) · 07/2026
- Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) · 06/2026
- Android Enterprise Certified Expert · 01/2026 (plus Professional and Associate)
Experience
11/2025 – present · IAM and Endpoint Consultant, self-employed · remote, DACH region
- Focused on Microsoft Entra ID, Intune and Okta Workforce Identity.
- Built and documented a reference environment on GitHub (Modern Workplace Lab):
- joiner-mover-leaver with Graph PowerShell
- Entra join with automatic Intune enrollment
- compliance and Conditional Access for Windows and macOS
- Android Enterprise dedicated device
- Okta across two orgs
- Earned four vendor certifications within three months (SC-300, MD-102, Okta Professional, Okta Administrator).
- Published technical articles on Conditional Access, identity lifecycle, and enrollment and recovery (alexander-frank.org/en/notes).
01/2013 – 04/2024 · Founder and Managing Director · Yupex GmbH, Hanover, Germany
- Built and ran the company for eleven years. Around 30 retained business clients, more than 100 clients in total.
- Owned access and permission concepts for client systems:
- separation of administration and editorial roles
- domain and admin accounts
- restoring client ownership when they changed providers
- Owned client environments end to end, from domain to application: DNS, mail, certificates, hosting, PHP/MySQL applications, third-party integrations.
- Ran device rollouts at client sites, including mobile devices.
- Led projects from requirements to training. Selected and managed suppliers, negotiated contracts, and worked directly with client leadership.
Selected project · 2024 · Access migration and permission model · Blank Baukompetenz
Freed a client from a locked-in legacy contract: domain transfer, migration to a self-managed system, role and permission model with defined access scopes. Result: full control over all of the client's own accounts.
Education
2012 – 2018 · Computer Science, Leibniz University Hannover (no degree)
Languages
German (native) · English (professional working proficiency)
Availability
Immediately · 3–4 days per week · remote in CET, on-site in the DACH region by arrangement · German or English
Keywords
Identity and Access Management · IAM · Microsoft Entra ID · Azure AD · Conditional Access · PIM · Access Reviews · Entitlement Management · Identity Governance · Identity Protection · Okta · Okta Identity Engine · Universal Directory · Lifecycle Management · SCIM · SAML 2.0 · OIDC · Single Sign-on · MFA · FIDO2 · Passwordless · Zero Trust · Microsoft Intune · Endpoint Management · UEM · MDM · MAM · BYOD · Android Enterprise · Windows Autopilot · Device Compliance · macOS · Active Directory · Entra Connect · Hybrid Identity · Microsoft Graph · PowerShell · Joiner Mover Leaver · Microsoft 365 · SC-300 · MD-102