Hello, I'm Mattia Danzi
Identity & Access Management Engineer and Security Champion at Swisscom — Switzerland's leading telecom & ICT provider. Architecting and securing enterprise Active Directory & Windows Server infrastructure, driving compliance, and defending mission-critical identity systems at the heart of Switzerland's digital backbone.
About Me
I'm a driven Identity & Access Management Engineer and Security Champion at Swisscom — Switzerland's #1 telecommunications and ICT provider. Within the Active Directory Services team, I architect, secure, and continuously evolve enterprise-scale identity infrastructure that forms the digital backbone of the organization. My expertise spans the full AD ecosystem — AD DS, AD FS, AD CS, PKI — with an unwavering focus on security, compliance, and operational excellence.
Security Champion
Driving security risk assessments, vulnerability analysis, threat modeling, and hardening across IAM services. Certified Swisscom Security Champion 2025/26.
Active Directory Expert
Deep specialization across the entire AD ecosystem — AD DS, AD FS, AD CS, PKI, Entra Connect & HSM. Hardening enterprise identity architecture at scale for Switzerland's telecom leader.
Compliance & Monitoring
Producing compliance reports, analyzing security posture via Microsoft Security portal, Defender for Identity, and Sentinel — ensuring regulatory adherence.
Systems Engineering & Automation
Managing Windows Server environments, designing PowerShell automation, and maintaining enterprise infrastructure with precision and reliability at scale.
Location
Switzerland
Company
Swisscom AG
Specialization
IAM & Cybersecurity
Role
Security Champion
Experience
DevOps Engineer I (System Engineer)
Swisscom · AD Services Team
Jan 2024 — Present · Ittigen, Bern
- Architect, operate, and secure enterprise Active Directory Domain Services (AD DS) — multi-domain forest architectures, trust relationships, Kerberos authentication, Group Policies (GPO), and site topology
- Manage and harden Active Directory Federation Services (AD FS) — federated identity, OAuth/SAML single sign-on (SSO), and conditional claim rules for mission-critical enterprise applications
- Maintain Active Directory Certificate Services (AD CS), PKI, and Hardware Security Modules (HSM) — certificate template security, enrollment policies, and root/intermediate CA lifecycle management
- Deploy and manage Microsoft Entra Connect & Cloud Sync — bridging on-premises Active Directory with Microsoft Entra ID (Azure AD) for secure hybrid identity synchronization
- Drive AD Hardening & Identity Security — administrative tiering models, Privileged Access Management (PAM), Kerberos delegation security, and Entra Password Protection
- Security Champion: lead security risk assessments, threat modeling, vulnerability remediation, and IAM compliance auditing across identity infrastructure
- Monitor security posture via Microsoft Defender for Identity, Sentinel SIEM, Microsoft Security Portal, and Secure Score to detect identity threats in real time
- Administer high-availability Windows Server environments (DNS, DHCP, DFS) and automate routine operations through modular PowerShell scripting
Sergeant — Swiss Armed Forces
Swiss Militia · Non-Commissioned Officer
2025 — Present
- Completed Recruit School (RS) and selected for NCO advancement
- Trained as Sergeant at the Non-Commissioned Officer School (UOS)
- Serving with leadership, discipline, and operational responsibilities
ICT Starter — Systems & Identity
Swisscom
Aug 2023 — Jan 2024
Operatore Informatico (Apprentice)
Swisscom
Aug 2020 — Aug 2023
Head of IT & Committee Member
SSG Gorduno
Oct 2022 — Present
- Responsible for IT infrastructure and digital transformation
Webmaster
Top Club Ticino
Mar 2022 — Present
Certifications
Microsoft 365 Certified: Administrator Expert
Identity and Access Administrator Associate
Security Champion 2025/26
Security Champions
Career Essentials in System Administration
German CEFR Level B1.1
Show More Certifications
Agile Product Owner Role: Foundations
IT and Cybersecurity Risk Management
Azure Administration: Identities & Governance
Cybersecurity for Executives
Introduction to Risk Management
Cyber Crisis Management
Skills & Technologies
Identity & Access Management
Cybersecurity & AI Security
Windows & Cloud Infrastructure
Methodologies & More
Education & Languages
SPAI Locarno (CPT)
Attestato federale di capacità AFC — Operatore Informatico
Sep 2020 — Jun 2023
Italian
English
German
French
Interests & Passions
When I'm not securing enterprise identity infrastructure, I explore emerging technology frontiers and push personal limits outdoors — from AI security research and risk management to conquer Alpine peaks and mountain slopes.
🔐 Cybersecurity Passion
My enthusiasm for security extends far beyond my daily work. As a dedicated tech follower, I continuously study emerging attack vectors, threat intelligence, and defensive security architectures to stay ahead in an ever-evolving digital landscape.
🤖 AI Security & Threat Modeling
Fascinated by the security implications of Artificial Intelligence and Large Language Models. I actively explore AI threat modeling, prompt security, LLM vulnerabilities, and how AI-driven tools reshape modern identity and access defenses.
🛡️ Risk Management & Governance
Passionate about IT risk management methodologies, security posture assessment, and GRC frameworks. I enjoy analyzing system vulnerabilities, evaluating organizational risks, and helping build resilient security strategies.
🏔️ Alpine Hiking
The Swiss Alps are where I recharge. Reaching summits after hours of disciplined climbing brings clarity, stamina, and perspective — mirroring the patience and focus required when managing complex enterprise systems.
⛷️ Skiing
Carving through groomed pistes and navigating off-piste snow across Switzerland is pure energy and precision. Raised in Ticino among mountains, skiing is a deep passion and a timeless Swiss tradition.
🇨🇭 Military Service
Serving as a Sergeant in the Swiss Armed Forces. Militia military service builds structured leadership, team accountability, resilience under pressure, and operational discipline that translate directly to professional life.
Get in Touch
Interested in collaborating or have a question? I'd love to hear from you. Feel free to reach out through any of the channels below.