Cybersecurity Portfolio

Identity Engineering
& Access Management

I design, automate, and govern identity and access across workforce, application, privileged, and workload identities. My work spans authentication, federation, lifecycle automation, access governance, Zero Trust, and secure identity engineering.

View IAM Projects
Enterprise Portfolio

Autumn Solutions

Autumn Solutions is the enterprise lab environment used throughout this portfolio. The projects model one connected identity security program across authentication, federation, lifecycle automation, access governance, privileged access, and workload identity security.

I / Identity

Identity & Access Management

The Autumn Solutions identity program covers authentication, Zero Trust, federation, lifecycle automation, privileged access, entitlement governance, access reviews, and revocation.

IAM-01

Zero Trust Identity Security

Designed and validated a layered Microsoft Entra Zero Trust identity security architecture using Conditional Access, phishing-resistant MFA, Identity Protection, Privileged Identity Management, emergency access controls, and legacy authentication blocking.

Technologies & Controls
Conditional Access MFA PIM Identity Protection Emergency Access
View Project Watch Walkthrough GitHub Evidence
IAM-02

Enterprise SSO & Federation

Implemented authentication and provisioning for a custom SaaS application using SAML, OpenID Connect, OAuth 2.0 Authorization Code with PKCE, Microsoft Graph, and SCIM.

Technologies & Protocols
SAML 2.0 OpenID Connect OAuth 2.0 + PKCE SCIM Microsoft Graph
View Project Watch Walkthrough GitHub Evidence
IAM-03

Identity Lifecycle Automation

Built a certificate-authenticated Joiner, Mover, Leaver workflow driven by an HR source with automated account creation, group assignment, license management, movement, disablement, and structured audit logging.

Technologies & Automation
Microsoft Graph Node.js JML Automation Certificate Authentication Audit Logging
View Project Watch Walkthrough GitHub Evidence
IAM-04

Governed Finance Access Lifecycle

Designed time-bound access to finance resources using business justification, approval workflows, entitlement provisioning, expiration controls, recurring access reviews, and governance-driven revocation.

Governance Controls
Entitlement Management Access Packages Approval Workflows Access Reviews Access Revocation
View Project Watch Walkthrough GitHub Evidence
IAM-05

Identity Threat & Workload Security

Built a Python and Microsoft Graph workload identity security assessment that identified 15 application and service principal findings, drove least-privilege and credential remediation, and reduced the environment to zero unresolved findings.

Technologies & Security
Workload Identities Service Principals Microsoft Graph Python Identity Threat Detection
View Project Watch Walkthrough GitHub Evidence
II / Enterprise Experience

Security & Enterprise Platforms

Additional hands-on experience across security operations, device management, risk and assurance, infrastructure, and security awareness.

Security Operations

TrendAI Vision One · Microsoft Defender · Microsoft Sentinel

Risk & Assurance

ServiceNow · Archer · ProcessUnity

Endpoint, Device & Infrastructure

Jamf · Lightspeed · Cloudflare · Barracuda Backup

Security Awareness & Human Risk

KnowBe4 · Security Awareness Administration · Infosec IQ

III / About

Identity Engineering in Practice

I focus on building and operating identity systems that make access secure, intentional, and auditable. My work spans authentication and federation, lifecycle automation, privileged access, identity governance, and workload identity security.

My broader cybersecurity background includes risk assessment, control evaluation, audit readiness, compliance, third-party risk, and security assurance. That experience helps me design identity controls that are technically sound, auditable, defensible, and aligned to business risk.