M365AILasith IyanAI Consultant to the Estate
Dallas, Texas  ·  12+ Years  ·  Lead Solutions Architect — End User Experience

Lasith Iyan Kasthuriarachchi

A Microsoft 365 and cloud architect whose work sits in the foundational half of an AI programme: tenant hygiene, identity baselines, oversharing reports, migration backlogs, and long-outstanding access reviews. Twelve years across enterprise IT, the last several as a solutions architect leading modern workplace, endpoint, and migration programmes for defence, financial services, pharmacy, hospitality, and aerospace organisations. Currently with Capgemini. A Copilot for Microsoft 365 Technical Champion.

Portrait of Lasith Iyan Kasthuriarachchi
Based in
Dallas, Texas, United States
Currently
Capgemini  ·  Lead Solutions Architect — End User Experience
Experience
Twelve years across enterprise IT, endpoint and identity operations, and modern workplace architecture
Industries
Defence, financial services, pharmacy, hospitality, and aerospace
Focus
Microsoft 365 architecture, Copilot readiness and deployment, data governance in Purview, and AI governance operating models
Education
B.S. Engineering, City University of New York  ·  MBA, Texas A&M International University
Languages
English and Sinhalese — full professional or native proficiency
Experience

Twelve Years Inside the Estate

The work has been consistent throughout: helping organisations modernise the digital workplace, adopt AI deliberately, and optimise the end-user computing environment underneath both. As a solutions architect that means working with business and technology leaders to identify practical use cases for Microsoft 365 Copilot, Copilot Studio, Power Automate, Power Apps, and the wider Power Platform — then building the automation, governance, and endpoint foundations that let those use cases survive contact with a real tenant.

In practice the portfolio runs from Copilot adoption strategy and process automation through to vulnerability management, endpoint management, Azure Virtual Desktop and Windows 365, tenant-to-tenant migration, and modern device management across both Windows and Apple estates. The sectors have ranged from a Department of Defense environment to financial services, pharmacy, hospitality, and aerospace.

  • May 2022 — Present

    Lead Solutions Architect — End User Experience

    Capgemini

    Client-facing architecture across the modern workplace portfolio. The engagements below were delivered in this role; clients are described by sector rather than named.

  • Dec 2024 — Present

    SCCM / Intune Lead Architect

    Capgemini · Defence and Shipbuilding

    Architecting a secure modern workplace and Microsoft 365 in a Department of Defense environment: leading the SCCM-to-Intune migration, Autopilot, Entra ID integration, Microsoft 365 workload governance, Azure Virtual Desktop, and compliance-aligned endpoint operations.

  • Jun 2024 — Jan 2025

    Microsoft 365 / Intune Lead

    Capgemini · Education and Testing Services

    Led the tenant-to-tenant migration strategy across Exchange Online, Teams, SharePoint, OneDrive, identity, and Intune, coordinating secure cutover, adoption readiness, and post-migration stabilisation.

  • Jun 2023 — Jun 2024

    End User Computing Architect

    Capgemini · Cruise Line and Leisure

    Defined the modern workplace architecture across Intune, Autopilot, Microsoft 365 security, and collaboration services, along with vulnerability remediation and enterprise EUC standards, with adoption and governance guidance attached.

  • May 2023 — Aug 2023

    Azure Virtual Desktop Architect

    Capgemini · Beverage Manufacturing

    Designed a secure AVD modern workplace integrated with Entra ID, Microsoft 365 Apps, and Teams, covering profile management, security controls, and enterprise governance.

  • Jan 2023 — Jun 2023

    Migration Manager

    Capgemini · Credit Bureau

    Led Microsoft 365 workload migrations spanning Exchange Online, Teams, OneDrive, and SharePoint, together with the automation, tooling, change readiness, cutover governance, and hypercare around them.

  • May 2022 — Nov 2022

    MECM / Intune Architect

    Capgemini · Defence and Aerospace

    Designed the MECM and Intune platforms supporting co-management, Autopilot, Microsoft 365 Apps readiness, security baselines, and cloud-based endpoint access for enterprise users.

  • Jun 2021 — May 2022

    Lead Engineer

    CyrusOne

    Modern workplace engineering across Windows and macOS: Intune, Autopilot, hybrid identity, Azure Virtual Desktop, Microsoft 365 service operations, automation, and end-user support.

  • Aug 2018 — Jun 2021

    IT Administrator III

    MoneyGram International

    Modernised enterprise desktops and Microsoft 365 operations through endpoint management, Teams and OneDrive enablement, cloud migration, automation, identity integration, and user support.

  • Jun 2015 — Aug 2017

    Integration Analyst and Manager

    Universal Marine Medical Supply

    Supported Office 365 collaboration, endpoint and identity administration, ERP integration, and reporting, coordinating infrastructure across global operations alongside user onboarding and adoption.

  • Mar 2015 — Apr 2016

    IT Associate

    YMCA — New Americans Welcome Center

    Office 365, virtual desktops, endpoint deployments, account provisioning, user training, and day-to-day modern workplace operations.

Why This Practice Exists

The Problem Was Never the Model

The models continue to improve independently of any individual organisation. What has not improved at the same rate is the estate they land on, and that gap is where AI programmes typically fail.

01

Experience Running the Estate

Tenant administration, identity, endpoint management, and migration are not adjacent to Copilot readiness; they constitute it. Advice formed without operational exposure to the estate tends to under-estimate the remediation effort by a quarter or more.

02

Ownership of the Licence Case

Persona-led allocation, prerequisites verified before purchase, dormant seats reclaimed, and a baseline captured while an uncontaminated measurement remains available. The renewal decision is determined well before the renewal date.

03

Accountability After Delivery

Consulting here means embedded and answerable rather than advisory. The same person who produced the assessment leads the remediation, chairs the agent review, and reports value to the sponsor.

Credentials

Certifications and Training

Certifications across Microsoft 365, Azure, and AWS, with badges verifiable on Credly.

CredentialIssuer
Copilot for Microsoft 365 Technical ChampionMicrosoft
Microsoft 365 Certified: Enterprise Administrator ExpertMicrosoft
Microsoft 365 Certified: Modern Desktop Administrator AssociateMicrosoft
Microsoft Certified: Azure Administrator AssociateMicrosoft
Microsoft Certified: Azure Fundamentals (AZ-900)Microsoft
AWS Certified Solutions Architect – AssociateAmazon Web Services

Further training in AWS and Microsoft Sentinel deployment. Badges are published at credly.com/users/iyan-kasthuriarachchi.

Entra ID Microsoft Purview SharePoint & OneDrive Exchange Online Microsoft Teams Intune Autopilot MECM / SCCM Copilot Studio Power Platform Power Automate Windows 365 Azure Virtual Desktop Azure AWS macOS & Apple management Tenant-to-tenant migration AI governance
Service & Affiliations

Service and Community Involvement

A consistent theme predating the technology work: commitment to the organisation rather than to the individual project.

  • Service Corps Member

    CUNY Service Corps, New York

    Placed with community organisations on projects intended to outlast the placement — an early lesson in the difference between completing work and leaving something that continues to operate independently.

  • Youth Organizer

    Sri Lanka Red Cross Society

    Coordinating volunteers and youth programmes in a context where organisation mattered more than any individual contribution.

  • Professional Societies

    ASME · National Society of Black Engineers

    Member of the American Society of Mechanical Engineers and the National Society of Black Engineers.

How to Begin an Engagement

Most engagements follow the same sequence, and the first step carries no cost.

  • Take the assessment. Four minutes, forty capabilities, returning a tier, a named blocker, and a ninety-day plan. No email is required to see the result.
  • Send the result. If it proves useful, the result page composes an email containing your scores. That is the entirety of the lead-capture mechanism.
  • A conversation. Typically thirty minutes, largely concerned with whether the blocker the assessment identified matches what was already suspected.
  • The engagement. Diagnose, decide, deliver, and own, with monthly value reporting to the funding stakeholder.

Views expressed on this site are personal and independent of any employer.

Start with an Honest Position

Four minutes across eight pillars will establish whether the next item on your roadmap is the one genuinely blocking progress.