On-Demand Adobe SCIM Sync Trigger
PowerShell utility that lets the helpdesk force an immediate Entra-to-Adobe provisioning sync instead of waiting on the scheduled window. View Project →
Entra Stale Device Cleanup Automation
Automated lifecycle management for stale Microsoft Entra devices using certificate-based Graph authentication. View Project →
SSPR Rollout
Deployed Self-Service Password Reset across the organization, saving $8,000. View Project →
Windows Hello Deployment
Deployed Windows Hello to On Premises devices for a Hybrid environment. View Project →
Conditional Access Infrastructure
Created a Conditional Access infrastructure of over 10 policies to keep company safe from bad actors. View Project →
MFA Configuration and Deployment
Deployed MFA to the entire company securing identities. View Project →
SSO Deployments
Deployed SSO configurations to all internet facing apps View Project →
Entra ID Access Reviews
Deployed Entra ID Access Reviews for external users and applications View Project →
Entra Applications Management
Managed applications for Microsoft Entra, securing access to Microsoft Graph REST API View Project →
Microsoft PIM Deployment and Role Configuration
Implemented Microsoft PIM for the high privileged and critical roles View Project →
M365 Critical Account Creation and Protection
Per Microsoft Recommendation, created 2 break glass accounts in case of breach to regain access to the tenant View Project →
Risky User Management
Deployed conditional access to automatically deal with risky users and risky sign ins View Project →
Entra Connect Sync Staging Server
Deployed an Entra Connect Staging Server for High Availability of our on-premises to cloud sync View Project →
New User Creation Automation
Automated New User Creation via a PowerShell Script. View Project →
Security & Compliance
Defender for Cloud Apps: Shadow IT DiscoveryComing Soon
CASB-based shadow IT discovery using continuous firewall log ingestion via a Linux log forwarder. Ongoing: detections and policies are still maturing.
Microsoft Sentinel SIEM Migration
Migrated an on-premises SolarWinds SIEM to Microsoft Sentinel at roughly 63-70% lower annual cost, then built out baseline detections, ingestion, and SOAR automation. Ongoing: still being updated due to project scope. View Project →
Tenant-Wide Phishing Email Purge
Incident response tooling that finds and removes malicious email across every mailbox in the tenant, with enforced just-in-time privilege, mandatory preview, and full audit logging. View Project →
Automated Mailbox Permission Audit Reporting
Biweekly compliance reporting on mailbox permission changes, with automatic identity resolution and historical retention for auditor requests. View Project →
Secure Score Optimization
Improved Microsoft Secure Score from 30% to 87% through Conditional Access and MFA. View Project →
Defender for Identity
Deployed Defender for Identity in a Hybrid environment. View Project →
Deployed Attack Simulation Training
Deployed AST to train users on email phishing and social engineering View Project →
CrowdStrike Falcon Next Gen SIEM Deployment
Installed Falcon Agent automatically throughout the environment and connected all log sources to the SIEM, also deployed MFA for on-premises Domain Controllers View Project →
Cloud & Governance
Implemented Azure RBAC and PIM
Deployed RBAC and PIM in our azure cloud to protect existing subscriptions View Project →
BI Infrastructure
Configured connection, user provisioning and SSO for BI Infrastructure using Snowflake, Talend and Qlik View Project →
AI & Copilot Agent Development
Leading AI Implementation
Took AI adoption from a single free Copilot Chat license to a governed, org-wide AI program — Frontier enrollment, Copilot Studio agents, Azure AI Foundry, and compliance-driven retention for a regulated environment. View Project →
Leading Power Platform Implementation
Stood up Power Platform from scratch — designed a four-environment ALM strategy, least-privilege access model, and connector governance where none existed before. View Project →
Business Prospecting Agent
Agent that helps relationship managers research and prepare for prospective business clients using enterprise guidelines and a relationship-first approach. View Project →
MCP-Connected Microsoft Expert Agent
Microsoft Expert Agent connected to the Microsoft Learn MCP server to answer questions directly from Microsoft's official documentation. View Project →
Endpoint Management
Windows 11 25H2 Upgrade RemediationComing Soon
Diagnosing 25H2 feature upgrade blue screens caused by an undersized EFI System Partition (ESP) and remediating the fleet at scale.
BitLocker Automation via Intune
Automated BitLocker deployment for Intune Devices. View Project →
Windows 11 Upgrade
Led Windows 10 to Windows 11 upgrade for over 1000 company devices View Project →
BitLocker Automation On Premises
Automated BitLocker deployment across 1,000+ devices using GPOs and PowerShell. View Project →
Automatic Patching for Windows Updates
Automated monthly windows updates via SCCM co-management via Intune. View Project →
Office 365 Application Auto Patching
Deployed infrastructure for 0365 application auto patching View Project →
PC Deployment Server Upgrade and Revamp
Redid the PC deployment Workbench, moved the services to a specific, compliant and modernized server View Project →
Automation & Scripting
Power Automate Flows
Built and maintain 30+ production Power Automate flows automating HR onboarding, change management, fraud intake, and compliance reporting. In progress: still being built. View Project →
File Share to SharePoint Sync
Continuous one-way sync that bridged a network file share to SharePoint during migration, letting a department adopt the new platform at its own pace without stranding data. View Project →
Automated Mailbox Quota Enforcement
Monthly drift correction that keeps mailbox quotas aligned to policy across standard, tiered-exception, and shared mailboxes. View Project →
Automated Health Check Scripts
Implemented Scripts for Systems I was in charge of for automatic health checks and reports. View Project →
Shared Mailbox Creation Automation
Automation of Shared Mailboxes in a Hybrid environment via PowerShell. View Project →
Infrastructure
Exchange Online Transport Rule RemediationComing Soon
Fixing Exchange Online transport rules that were blocking delivery of mail already cleared by the email security gateway.
Exchange Online Migration
Migrated from on-prem Exchange, saving $2,000 in certificate costs. View Project →
Windows Server OS Upgrades
Upgraded entire server infrastructure of over 100 servers to Server 2019 and Server 2022 View Project →