Systems Administrator II
Microsoft 365 & Entra ID
Networks & Firewalls
Security-First MSP Engineer
Dalton Sweet
I keep businesses secure, connected, and running. I'm a systems administrator at a Tulsa managed services provider with a degree in cybersecurity, and my whole approach comes down to one idea: technology should work for people, not the other way around.
Security-minded. Operator at heart.
I'm Dalton. At The Computer Guy I look after a whole portfolio of client businesses: Microsoft 365 tenants, FortiGate and UniFi networks, endpoint fleets in Datto RMM, and whatever lands in the queue at 2 a.m.
I came up through cybersecurity, with an associate's from Tulsa Community College and a bachelor's from Northeastern State University, and ran a managed services practice before my current role. That mix shapes how I work: think like a defender, build like an operator, and explain it in plain English.
Off the clock I build websites, tinker with PC hardware, and read far too much about cosmology and physics.
What I do
The work I do every day, across a wide mix of client environments.
Security & Incident Response
When something looks wrong, I move fast. I've contained live social-engineering attacks before a payload ever ran, managed EDR across client fleets, and turned every incident into hardening.
Microsoft 365 & Identity
Daily administration across multiple client tenants: Entra ID, Exchange Online, OneDrive migrations, and the DNS behind it all. SPF, DKIM and DMARC done right, so mail actually lands.
Networks & Firewalls
FortiGate firewalls managed as a fleet, plus UniFi Dream Machines, switches and access points. VLAN design, secure remote access, Wi-Fi that holds up, and log forensics that can tell a bad config from a failing power supply.
Automation & Endpoints
Datto RMM components and PowerShell that deploy, patch and report silently, with custom status fields so nothing quietly falls through the cracks.
Governance & Compliance
Assessments against NIST CSF 2.0, PCI DSS v4.0.1 and regulated-industry controls. I turn frameworks into plain-language fixes a business can act on.
Web & Development
I build too: client websites on WordPress, web platforms on shared codebases, and small tools that cut busywork for technicians.
What I keep running
The stack behind my day job at a Tulsa MSP. Client sites run FortiGate and UniFi gear; I manage, protect and back them up with the tools below, and tie it all together with Microsoft 365, ticketing, automation and documentation. The starred box is a tool I built myself.
How I work
Assess
Understand the environment before touching it: inventory, logs, and the people who actually use it.
Secure
Close the gaps that matter most first: identity, email, endpoints, and the network edge.
Automate
If I have to do it twice, I script it. RMM components, PowerShell, and alerting that reports back.
Document
Leave it better than I found it, with clear notes for the next tech and a plain-language summary for the client.
Featured case studies
Stopping a ClickFix attack before it executed
A fake "verify you are human" prompt, a user about to paste a malicious command, and a payload that never ran.
Read case studyNetwork SecurityFixing a memory leak across a FortiGate fleet
A firmware-level memory leak taking down firewalls, fixed with automation and rolled out site by site across 40+ units.
Read case studyBuilt by meZephyra: a portable tech toolkit
A password-protected, single-file Windows app that puts the team's go-to utilities and diagnostics one click away.
See the toolIndustries I've worked in
Every client environment is different. These are the kinds of organizations I've kept running.
What clients say
Great, reliable work done quickly and effectively, and all for very reasonable rates. I strongly recommend Dalton and The Computer Guy!
Dalton has done a fantastic job with Tailwind Inspection IT issues. The peace of mind knowing our computers are protected is worth the money!
Dalton is very professional and has come to our rescue at all hours.
A huge shout out to Dalton for always being there in our time of need.
Every tool in my belt
Everything I've worked with across my career, from the MSP stack I run today to earlier roles and coursework. Tap any tool in the stream to open it.
Datto RMM
Monitoring, patching and scripting across client fleets. I build custom components, like silent .NET 4.8 and Visual C++ installs, that report status back to UDFs.
FortiGate
Firewalls on client sites. I led a fleet-wide fix for a FortiOS memory leak across 40+ units with automation stitches, an SOP and a rollout checklist.
Microsoft 365
Daily administration across multiple client tenants: users, licensing, mailboxes and the security settings that hold it together.
Datto EDR
Endpoint detection and response. I enabled uninstall protection fleet-wide and ran the new agent experience as an internal beta before client rollout.
UniFi
Dream Machines, switches and access points, managed through the UniFi portal. The network gear I work with most.
Autotask
Our PSA: tickets, projects and billing. Where every alert, request and fix ends up.
Zephyra
My password-protected, dependency-free .exe that puts curated cmd and PowerShell utilities and diagnostics one click away for the team, with an activity log. Source on GitHub.
RocketCyber
Managed SOC and threat monitoring. I automated deployment through Datto RMM site variables so every new agent lands in the right client org.
Entra ID
Identity, conditional access and app controls. Evaluating hardening like restricting app registrations and security group creation.
IT Glue
Structured documentation for every client, and the source for the automated sync I built into GitHub.
AutoElevate
Privileged access management. I moved client orgs from audit mode to live enforcement and made it a standard onboarding step.
Rewst
Automation platform. I shipped the company's first production workflow: an IT Glue to GitHub documentation sync every eight hours.
INKY
Email security that flags phishing and impersonation right in the inbox, with banners users actually notice.
Exchange Online
Mail flow, connectors and policies. Traced 550 5.7.1 rejections after migrations back to leftover filtering records.
FortiGate Cloud
Fleet management and cloud scripting for FortiGates, including an on-demand script to kill a runaway process across devices.
Splashtop
Secure remote sessions for everyday support and after-hours fixes.
Graphus
AI-driven phishing defense that watches mailbox behavior and quarantines suspicious mail.
CIPP
Multi-tenant Microsoft 365 management: standards, users and settings across every client from one place.
DNSFilter
DNS-layer filtering that blocks malicious and unwanted destinations before a connection is made.
Thread
Client support intake. I wrote the default triage rules for its AI agent and I'm designing the app's tray icon.
SaaS Alerts
Monitors Microsoft 365 for risky sign-ins and behavior across client tenants.
VSA X
Kaseya's device and mobile device management for policy control beyond RMM.
Unitrends
Unified backup for client servers and data, the first line of recovery when something goes wrong.
Google Workspace
Users, devices and mail. Fixed DKIM signing so a dealership could deliver to Yahoo again.
BullPhish ID
Phishing simulations and security awareness training for client staff.
Dark Web ID
Watches for client credentials showing up in breach dumps and dark web markets.
Hornetsecurity
Virtual machine backup and disaster recovery.
MSP360
Cloud backup with central management and flexible storage targets.
RapidFire Tools
Network assessments, auditing and compliance work, including NIST CSF 2.0, PCI DSS and NIGC MICS.
myITprocess
IT roadmaps and quarterly business reviews that turn findings into a plan.
MyGlue
Client-facing documentation portal linked to IT Glue.
Network Glue
Automated network discovery and diagrams that keep documentation honest.
KaseyaOne
The single sign-on hub I start each day from to reach every Kaseya 365 module.
Microsoft Defender
Security and compliance settings across Microsoft 365 tenants through the Security admin center.
Azure
Cloud resources, virtual machines and app services.
OneDrive & SharePoint
File migrations, including Known Folder Move plans to retire on-prem file servers.
PowerShell
Scripting for RMM components, remediation and bulk administration.
Windows Server
File, application and database servers on client sites, up through Windows Server 2025.
Active Directory
On-prem identity and hybrid sync to Entra ID. Delta syncs are a button in Zephyra for a reason.
Cisco Catalyst
Restored SSH management and configured VLANs on a Catalyst 3650.
GitHub
Version control for our knowledge base, automation output and Zephyra.
AWS
Cloud servers and services through the management console.
GoDaddy
Domains and DNS, and the starting point for a lot of email migrations.
Bluehost
Domains and DNS for client websites.
audiT
Executive-level visual IT reports that help clients make decisions.
Octane
Branded client portal for tickets and access.
WiseStamp
Centrally managed, consistent email signatures.
Proofpoint Essentials
Cleaned up leftover Proofpoint records that were causing rejections after Microsoft 365 migrations.
XBlue PBX
Recovered a QB2 IP phone system after a factory reset wiped its configuration.
Carestream Imaging
Dental imaging software. Fixed CS Imaging 8 crashes on a new Windows 11 workstation.
Claude
AI pair for documentation, scripts, the knowledge base and this website.
Cloudflare
Designed a re-host of a client program hub on Cloudflare Workers with GitHub Actions deploys.
WordPress
This site and client sites, including an auction company rebuild on Avada.
Wix & Squarespace
Managing client websites on hosted builders.
Python
Security automation in school; ReportLab and python-docx for generating PDFs and Word documents at work.
JavaScript & HTML/CSS
Front-end work for my own sites and tools.
PHP & SQL
Back-end and database work for web projects.
C#, Java & C++
Object-oriented programming and secure software development in my degree.
NinjaOne
RMM platform from earlier MSP work: monitoring, patching and remote management.
SentinelOne
Next-gen endpoint protection deployed and managed in earlier MSP work.
CrowdStrike
Endpoint protection platform from earlier MSP work.
Webroot
Endpoint antivirus deployed and managed in earlier MSP work.
Cisco Meraki
Cloud-managed switching, wireless and security appliances.
PaperCut
Print management and tracking for client offices.
Nmap
Network discovery and port scanning for audits and troubleshooting.
Wireshark
Packet capture and analysis for network troubleshooting.
Kaseya Quote Manager
Building quotes for hardware and project work.
Distributor portals
Ordering hardware and licensing through TD SYNNEX, Ingram Micro and Dell.
Latest from the blog
Notes on security, MSP life, and the tools of the trade.
Have a role, a project, or a fire to put out?
I'm open to conversations about sysadmin and security roles, plus select freelance work for small businesses.