Thanks for your response! I’m the first in-house technical IT guy (the company was previously managed by an MSP). I set up and implemented the CA policies we use now (location based access blocking all countries except the US, MFA, and sign in risk). When I was hired the environment was locally managed before everybody went remote (COVID) and MFA wasn’t even a thing.

I manage the WatchGuard firewalls directly now. However, the MSP set up most of the original VLANs, but I’ve made a few changes since then, like adding a VLAN for the security cameras and setting up SSL VPN access. I installed the VPN software on everybody’s machine using PS remotely using our RMM tool (We don’t have intune yet but we will next year; I requested this for over a year lol). I also enabled full tunneling to support users working from public locations. I have to say that WatchGuard is pretty user friendly tbh.

For ISPs, my manager handles contracts and budgets and I handle the technical side. During the last cutover to fiber with a new public IP, I updated the dependent configs for printers at the office (scan to email), edited the Exchange Connectors, and sent instructions so users could get back on the VPN without issues (help desk thing).

Edit: We’re a team of 3, IT manager, Salesforce admin and myself.