CLOUD SECURITY • IDENTITY • AZURE INFRASTRUCTURE
Infrastructure Engineer working across Microsoft Entra ID, Azure security, automation, and enterprise Microsoft platforms.
ABOUT
I’ve been fascinated by technology since my dad brought home a Compaq desktop PC running Windows 3.1 when I was a kid. He put it in my bedroom. He showed me how to boot into Windows from the DOS command line. It was so interesting to me that he somehow just knew how to do this. I remember him carrying around one of those unmistakable 1990s IBM ThinkPads. That early exposure stuck with me, and I’ve been curious about computers and how systems work ever since.
Today I’m an infrastructure engineer working across Microsoft cloud, identity, and security technologies. My work includes Microsoft Entra ID, identity governance, authentication, Azure infrastructure, automation, and large-scale Microsoft enterprise environments.
I especially enjoy solving complex cross-service problems and building repeatable solutions with PowerShell, Microsoft Graph, Terraform, Python, Azure DevOps, GitLab, and GitHub Actions. My current focus is cloud security engineering, identity architecture, detection engineering, and secure infrastructure automation.
Entra ID, IAM, Conditional Access, PIM, RBAC, SSO, federation, identity governance
Azure Policy, Key Vault, Sentinel, KQL, Zero Trust, logging, security controls
PowerShell, Microsoft Graph, Terraform, Python, Azure CLI, infrastructure as code
Azure DevOps, GitLab, GitHub Actions, CI/CD, OIDC, workload identity federation
FEATURED PROJECTS
01
Modular Azure landing zone built with Terraform incorporating secure networking, Azure Policy governance, Key Vault RBAC, centralized logging, Azure Blob remote state, and secretless GitHub Actions CI using Entra workload identity federation.
02
HR-driven Joiner-Mover-Leaver automation for Microsoft Entra ID with user and group provisioning, department-based access reconciliation, offboarding, guest access reviews, privileged-role auditing, and application credential reporting.
03
Cloud-security detections for Azure RBAC, NSG, Key Vault, and Entra application activity using Azure and identity telemetry, with live validation and deployed Microsoft Sentinel scheduled analytics rules mapped to MITRE ATT&CK.
EXPERIENCE
Barclays
2022 — Present
Level 3 and final escalation engineer supporting Microsoft Entra ID, Identity Services, Copilot, and Microsoft cloud technologies within a 100,000+ user global banking environment.
Teneo
2020 — 2022
Supported identity, endpoint, cloud, and infrastructure operations across Active Directory, Entra ID, Okta, Microsoft 365, Azure, Windows, macOS, and enterprise SaaS platforms.
CERTIFICATIONS