Security Operations Engineer working in identity and cloud security. I spent 2026 on the Cyber/CSOC team at the City of Newark's Office of Information Technology, running endpoint security across 2,000+ devices and managing hybrid identity for 2,500+ users in Microsoft Entra ID and Active Directory.
Everything below was built end to end: designed, deployed in a live tenant, and documented, including the parts that did not work.
Currently: studying for SC-300 and Security+, and building out AWS IAM and Terraform.
Enterprise IAM Architecture A full identity architecture for a fictional 2,000-person financial services firm. Conditional Access, PIM, Identity Governance, B2B/B2C, and OAuth 2.0 / OIDC SSO across three applications, with 10 architecture decision records explaining the tradeoffs behind each choice.
Microsoft Sentinel Detection Engineering A 10-rule KQL detection library covering break glass sign-ins, PIM activation anomalies, brute force and Conditional Access tampering, each mapped to MITRE ATT&CK. Deployed programmatically through PowerShell and the Azure REST API, with Logic Apps playbooks for automated containment.
Application Threat Model STRIDE and PASTA applied to a self-hosted financial application. Trust boundaries mapped, five vulnerabilities documented with CVSS scores, and two full attack chains modeled including AiTM session token replay and insider record manipulation.
CIS Azure Foundations Benchmark Automation Automated assessment across 100+ CIS controls using Azure Policy and PowerShell, producing an audit-ready report that ranks findings by risk and remediation order.
Purple Team Exercise An ATT&CK technique executed in an isolated lab, detection validated in Sentinel, coverage gaps identified, and the whole thing written up for CISO-level review.
Microsoft Entra ID · Conditional Access · PIM · Active Directory · Microsoft Sentinel · KQL · CrowdStrike Falcon · Azure Policy · PowerShell · Microsoft Graph API · Palo Alto · SCCM
Microsoft Azure Fundamentals (AZ-900) · CompTIA Security+ (in progress) · Microsoft Identity and Access Administrator SC-300 (in progress)
📍 Newark, NJ