Welcome
This portfolio documents my work across identity and access management, cloud security posture, endpoint management, and enterprise automation in regulated environments where the margin for error is small. Career highlights include raising Microsoft Secure Score from 30% to 93% at one organization and to 98% at my current one, integrating 14 log connectors and three threat intelligence feeds into Microsoft Sentinel, migrating 610 devices to Intune with hybrid identity, and patching 1,000+ endpoints via SCCM/Intune co-management. I've also built 30+ Power Automate flows and Azure Logic Apps eliminating ~200 hours of manual work a year, stood up SCIM provisioning bridges for third-party platforms, enforced Zero Trust and Microsoft Purview data governance across hybrid infrastructure, and developed Copilot Studio agents — including MCP-connected solutions — that bring self-service intelligence into enterprise workflows. Explore my Projects, Labs, and Scripts pages for the detail behind each.
Technical Skills
Identity & Access
- Entra ID (SSO, SCIM, CA, MFA, PIM)
- RBAC
- Windows Hello (Hybrid)
- Passwordless Authentication
- Zero Trust Architecture
Security & Compliance
- Microsoft Defender / Defender for Cloud
- Defender for Cloud Apps (Shadow IT discovery)
- Microsoft Sentinel — Detection Engineering (60+ analytic rules, threat intel feed integration)
- CrowdStrike Falcon
- Purview DLP & Information Protection
- BitLocker, TLS/SSL
- Security Baselines
- Vulnerability Management
- Incident Detection and Response
- Least Privilege Access Governance
Cloud & Governance
- Microsoft Azure
- Azure Policy
- Defender for Cloud regulatory compliance
- Azure Well-Architected reviews
- Secure Score optimization
- Microsoft 365
- Exchange Online (Hybrid)
- SCIM Provisioning (third-party platform bridges)
AI & Copilot Agent Development
- Copilot Studio agent building
- MCP server integration (Microsoft Learn)
- Business-process agents (IT self-service, sales prospecting)
- Microsoft Agent Academy hands-on labs
- Enterprise AI Governance & Administration (Copilot, AI retention policy)
Endpoint Management
- Intune, Autopilot, MDM/MAM
- SCCM/MECM
- Co-Management
- PXE/MDT/WDS
- Windows 10/11 upgrades
- Endpoint Analytics
Automation & Scripting
- PowerShell
- Python
- Bash
- SQL
- Power Automate
- Azure Logic Apps
- Deployment & health-check automation
- SCCM remediation scripts
Infrastructure
- Windows Server (2016–2025)
- AD DS, GPO, ADCS
- VMware
- DNS/DHCP/VPN
- Firewall
- Cisco Switches
- Backup & Recovery
Certifications
Completed
- MS-102: Microsoft 365 Administrator Expert
- SC-300: Identity and Access Administrator Associate
- SC-200: Security Operations Analyst Associate
- SC-401: Information Protection Administrator
- MD-102: Endpoint Administrator Associate
- AB-731: AI Transformation Leader
- AB-730: AI Business Professional
- SC-900: Security, Compliance, and Identity Fundamentals
- AZ-900: Azure Fundamentals
- AI-901: Azure AI Fundamentals
- PL-900: Power Platform Fundamentals
- AB-900: Copilot and Agent Administration Fundamentals
- AZ-104: Azure Administrator Associate
- AZ-500: Azure Security Engineer Associate
- SC-500: Cloud and AI Security Engineer Associate
- SC-100: Microsoft Cybersecurity Architect Expert
- AB-620: AI Agent Builder Associate
- Completed all Current Microsoft Applied Skills
Pursuing
- AZ-305: Azure Solutions Architect Expert (Winter 2026)
- AI-103: Azure AI Apps and Agents Developer Associate (Late 2026/Early 2027)
- AZ-700: Azure Network Engineer Associate (Late 2026/Early 2027)
- GH-500: GitHub Advanced Security (Late 2026/Early 2027)
- GH-600: GitHub Agentic AI Developer (Late 2026/Early 2027)
- GH-300: GitHub Copilot (Late 2026/Early 2027)
- GH-200: GitHub Actions (Late 2026/Early 2027)
- GH-100: GitHub Administration (Late 2026/Early 2027)
- GH-900: GitHub Foundations (Late 2026/Early 2027)
- CompTIA Security+ (Q1 2027)
- AB-100: Agentic AI Business Solutions Architect (Early/Mid 2027)
- PL-400: Power Platform Developer Associate (Late 2027)
- AB-410: Intelligent Applications Builder Associate (Late 2027)
See Complete Microsoft Transcript for all Microsoft Certifications, Applied Skills and other Microsoft related Learning.
ETAs are estimates and subject to change. Certifications are prioritized to align with the requirements of my current role and employer.
Currently Working On
- Studying for AZ-305 (Azure Solutions Architect Expert) and CompTIA Security+
- Completing the Copilot Studio Agent Academy Recruit, Operative and Single Missions Next Gen labs
- Developing Copilot Studio agents for Company Policy, Automated AI Workflows, and Third-Party Cybersecurity Vendor Assessments to automate GRC workflows
- Exploring and Hardening the Azure AI Foundry Resource for Enterprise Agent Building Readiness
- Expanding Microsoft Sentinel detection coverage as the platform matures
- Leading an Azure subscription cost cleanup and optimization initiative
- Hardening Azure and Microsoft 365 with Zero Trust and Microsoft Purview data governance
- Driving automation for HR-driven IT provisioning and business workflows
- Building out SC-300, AZ-104, MD-102, and AZ-500 hands-on lab writeups now that all four certifications are complete
- Building out and fine-tuning my home lab
Looking for a senior IT leader who can secure, automate, and modernize your infrastructure? Let’s connect.