On-premise Active Directory Migration to Entra ID

Modernized identity infrastructure by supporting the transition from traditional directory services to a cloud-centered identity model using Microsoft 365 and Entra ID.

Supported an identity modernization initiative focused on moving from traditional Active Directory-based administration toward a more cloud-driven identity model. Helped align user identities, authentication processes, and administrative workflows across Microsoft 365 services to improve scalability, consistency, and long-term manageability.

This effort included identity synchronization, account cleanup, administrative standardization, and support for a more centralized identity management approach using Microsoft Entra ID. The project helped reduce reliance on legacy identity processes while improving readiness for modern authentication and future Zero Trust security initiatives.

Tech Stack

Active Directory, Microsoft Entra ID, Microsoft 365, Azure AD Connect / identity synchronization, Exchange Online, PowerShell

Zero Trust IAM & Microsoft 365 Security Hardening

Strengthened enterprise identity security by enforcing MFA, Conditional Access, and modern access controls across the Microsoft 365 environment.

Designed and implemented a strict Zero Trust architecture by configuring contextual Conditional Access policies, enforcing Multi-Factor Authentication (MFA), and integrating Single Sign-On (SSO) for enterprise applications. This hardening effort was vital to protect against credential theft and unauthorized access in an increasingly decentralized workforce.

By systematically addressing Microsoft Secure Score recommendations and enforcing identity baselines, the project drastically reduced the organization's attack surface, ensured compliance with modern security standards, and provided a frictionless yet secure authentication experience for users.

Tech Stack

Microsoft Entra ID, Conditional Access, MFA, Enterprise Applications (SSO/SAML), Microsoft 365 Defender, Microsoft Defender for Cloud, Microsoft Secure Score

Microsoft Defender XDR, Sentinel & Security Automation Deployment

Built and improved security operations visibility, incident investigation, and automated response workflows using Microsoft Defender XDR, Microsoft Sentinel, playbooks, and Azure Logic Apps.

Deployed and supported Microsoft Defender XDR and Microsoft Sentinel to improve threat visibility, incident investigation, and security monitoring across endpoint, identity, and cloud environments. Worked with alerts, incidents, and telemetry to investigate suspicious activity, correlate signals across Microsoft security tools, and strengthen SOC workflows for triage and response.

The project also included security automation using Microsoft Sentinel automation rules, playbooks, and Azure Logic Apps to streamline incident handling and reduce manual effort. Used KQL for log analysis, hunting, detection tuning, and dashboarding, while supporting automated enrichment, notification, and response actions to improve operational efficiency and strengthen overall security operations maturity.

Tech Stack

Microsoft Defender XDR, Microsoft Sentinel, KQL, Azure Logic Apps, Sentinel Playbooks, Automation Rules, Log Analytics, Defender for Endpoint, Entra ID logs

Modern Endpoint Provisioning & Configuration using Intune

Standardized device deployment and security configuration using Windows Autopilot, Intune, and modern endpoint management practices.

Implemented and supported modern endpoint provisioning through Windows Autopilot and Intune to streamline device deployment and improve consistency across enterprise endpoints. Configured deployment profiles and enrollment settings to simplify setup, reduce manual imaging effort, and create a more efficient onboarding experience for users.

This project also focused on secure endpoint configuration through policy-based management. Supported the rollout of compliance policies, configuration profiles, security baselines, update rings, and other device controls to standardize endpoint setup, strengthen security, and improve supportability at scale.

Tech Stack

Microsoft Intune, Windows Autopilot, Microsoft Entra ID, Windows 10/11, Compliance Policies, Configuration Profiles, Security Baselines, BitLocker, Windows Update for Business

Cloud Telephony Migration: Microsoft Teams

A strategic transition from legacy Cisco hardware to a unified, cloud-hosted communication platform via Microsoft Teams.

Managed the end-to-end migration of the enterprise telephony system from legacy Cisco VoIP infrastructure to Microsoft Teams Phone. This initiative was driven by the need to unify communication channels, eliminate the maintenance costs of aging PBX hardware, and support a flexible workforce.

By mapping user extensions, configuring call routing, and migrating direct inward dialing (DID) numbers, the project successfully consolidated voice, video, and collaboration into a single pane of glass, improving user productivity and reducing overall telecommunications expenditure.

Tech Stack

Microsoft Teams Admin Center, Teams Phone System, Direct Routing / Calling Plans, PowerShell, Cisco VoIP

Cloud-Managed Network Infrastructure: Cisco Meraki

Designing and deploying a fully cloud-managed enterprise network stack including firewalls, switches, and wireless access points.

Orchestrated the deployment of a modernized, full-stack Cisco Meraki network architecture encompassing edge firewalls, core/access switching, and high-density wireless access points. The shift from traditional CLI-managed networking to a centralized cloud dashboard was transformative, offering unprecedented visibility, real-time analytics, and remote troubleshooting capabilities.

This deployment ensured robust network segmentation, simplified firmware lifecycle management, and created a highly resilient, easily scalable network foundation capable of supporting future enterprise growth.

Tech Stack

Cisco Meraki (MX Firewalls, MS Switches, MR Access Points), Meraki Dashboard, VLAN Tagging, 802.1X Authentication

Serverless User Onboarding Pipeline

A zero-touch, cloud-native automation that provisions Entra ID accounts, assigns dynamic security groups and Microsoft 365 licenses, and securely emails a Temporary Access Pass (TAP) to the hiring manager triggered by a Microsoft Form submission.

Microsoft 365 User Offboarding Automation

100% serverless, zero-trust automation pipeline for Microsoft 365 user offboarding. Designed to replace manual HR offboarding checklists, this solution leverages Azure Logic Apps and Azure Automation to instantly secure the accounts of departing employees, preserve critical business data, and immediately reclaim licensing costs.

AI-Powered SecOps & IT Help Desk Triage Pipeline

This project is a 100% serverless, AI-driven automation pipeline built to streamline front-line IT ticket handling. I created this architecture to solve a major operational bottleneck: the manual triage of support requests and security alerts.

By intercepting incoming support emails and utilizing Azure OpenAI (gpt-4o-mini) to intelligently analyze, categorize, and assign urgency to the issues, this system instantly routes structured ChatOps alerts directly to an operations center. It bridges standard IT support with modern Information Systems Engineering and SecOps workflows to drastically reduce response times.

Azure CI/CD Pipeline: Python Web App

This project demonstrates a complete Continuous Integration and Continuous Deployment (CI/CD) pipeline. I transformed a standard Python console application into a stateless Flask web app and automated its deployment to an Azure App Service using GitHub Actions.

Enterprise Azure Storage & CI/CD Pipeline

Infrastructure as Code (IaC) Terraform deployment for a secure, multi-tier Azure Storage architecture. It features a fully automated, "Zero Secrets" CI/CD pipeline utilizing passwordless OIDC federation between GitHub Actions and Microsoft Entra ID.

Identity Threat Management: Automated Brute-Force Response

A robust Identity and Access Management (IAM) security project focused on detecting and automatically neutralizing brute-force attacks within Microsoft Entra ID (Azure AD) using Microsoft Sentinel and Azure Logic Apps.

Stale Guest Account Sweeper

A serverless PowerShell automation script designed to run in Azure Automation Account. This tool queries the Microsoft Graph API to identify Entra ID guest accounts that have been inactive for over 90 days, and automatically emails a formatted HTML report to the SecOps/IT team.

Exchange Online Self-Service Delegation Manager

A robust, interactive PowerShell utility designed to streamline and standardize Exchange Online administrative tasks.

This menu-driven tool allows IT Administrators and Information Systems Engineers to rapidly manage Mailbox, Calendar, and Distribution Group permissions without needing to manually construct complex ExchangeOnlineManagement cmdlets or navigate the Microsoft 365/Entra ID portals.

VIP Mailbox Protection Audit

A PowerShell utility to automatically audit high-risk Microsoft 365 executive mailboxes for hidden delegations, litigation hold status, and active security logging.

Enterprise Hub & Spoke Cloud Architecture in Azure

The goal of this project was to design, provision, and secure an enterprise-grade Hub and Spoke network topology within Microsoft Azure. This architecture centralizes security and management resources while isolating departmental workloads, demonstrating a zero-trust approach to internal cloud traffic.

Azure Serverless Fleet Booking Automator

This project is an end-to-end, serverless business automation workflow built entirely in Azure. It demonstrates how to securely ingest customer data from a public-facing frontend, process it using event-driven serverless compute, store it in a relational database, and trigger automated stakeholder alerts.

Most importantly, this architecture implements Zero Trust security principles by utilizing Microsoft Entra ID Managed Identities and Role-Based Access Control (RBAC), eliminating the need to store or pass hardcoded database credentials.

Azure Network Intrusion Detection & Automated Response

This project demonstrates a fully functional, closed-loop Security Orchestration, Automation, and Response (SOAR) architecture deployed entirely within Microsoft Azure.

It is designed to expose a vulnerable asset, capture high-fidelity malicious telemetry from live simulated attacks, detect the intrusion using custom SIEM analytics, and automatically isolate the threat at the network level.