Work

Technology, put to work.

Project reports covering scope, approach, completed work, and deliverables. Each summarizes related experience across engagements; figures are cumulative across my work, not results from a single project. Client details remain private.

Tenant build and security remediation

Assessment, access-control configuration, and handoff documentation for Microsoft 365 and Entra ID environments.

12+ tenant engagements
80+ Conditional Access policies

Microsoft 365
Entra ID
Conditional Access

Read project report

Context and scope

Led or significantly contributed to 12+ tenant build and remediation engagements across my consulting work. My broader client experience spans environments of approximately 20 to 1,000 users.

Approach

I assessed administrative roles, authentication, Conditional Access, licensing, and emergency access. The assessment informed configuration work and the standards documented for ongoing administration.

Work completed

I designed, implemented, maintained, and troubleshot 80+ Conditional Access policies across engagements addressing MFA, device compliance, user risk, privileged access, and emergency access. Related work included access models, tenant hardening standards, operating procedures, and security recommendations.

Outcomes and deliverables

Delivered tenant configuration and remediation work, reusable configuration standards, and client handoff documentation. These provided a reference for maintaining the environment after implementation.

Enterprise application integration

Application sign-in and provisioning integrations, from requirements through rollout and validation.

20+ SAML integrations
12+ SCIM integrations
50+ app registrations and service principals

SAML SSO
SCIM
Entra ID

Read project report

Context and scope

Enterprise application integration work spanning SAML single sign-on, SCIM provisioning, app registrations, and service principals across consulting engagements.

Approach

I worked from application requirements through configuration, rollout, and validation. The configuration covered claims, attribute mappings, dynamic groups, and application assignments.

Work completed

Across consulting engagements, I implemented or significantly configured 20+ SAML SSO and 12+ SCIM provisioning integrations. I also created and configured 50+ app registrations and service principals, connecting application access with identity administration.

Outcomes and deliverables

Completed sign-in and provisioning integration work through rollout and validation. Related consulting deliverables included identity and application documentation for ongoing reference.

PowerShell and Microsoft Graph automation

Automation of recurring identity, account, and Microsoft 365 administration tasks.

PowerShell
Microsoft Graph
Microsoft 365

Read project report

Context and scope

Recurring administration responsibilities across consulting and systems administration roles, including accounts, groups, licensing, and environment auditing.

Approach

I used PowerShell and Microsoft Graph to automate recurring administration activities. The work focused on tasks already part of my operational responsibilities.

Work completed

Automated user creation, group administration, licensing validation, service principal administration, and environment auditing. In my systems administration role, I also used PowerShell to streamline recurring account and system tasks.

Outcomes and deliverables

Reduced repetitive manual administration through scripted workflows for account and system tasks.

On-premises Active Directory user-creation automation

Automating the creation of user accounts in an on-premises Active Directory environment.

Active Directory
On-premises
User provisioning

Read project report

Context and scope

User-account creation within an on-premises Active Directory environment. This project focused on the account-creation step of provisioning.

Approach

I automated user creation so the account-creation task could be carried out through a repeatable workflow.

Work completed

Implemented automation for creating users in on-premises Active Directory.

Outcomes and deliverables

An automated user-creation workflow for the on-premises directory.

Privileged access with PIM and JIT

Configuration and support of privileged access with defined approval and activation controls.

40+ privileged access configurations

Entra ID
PIM
Least privilege

Read project report

Context and scope

PIM and just-in-time privileged access configurations across consulting engagements, alongside broader administrative role and identity security work.

Approach

I applied least-privilege principles through approval, activation, and expiration controls. Related responsibilities included administrative role assessments and emergency access.

Work completed

Configured and supported 40+ PIM/JIT privileged access configurations across consulting engagements. I also developed access models and security recommendations as part of the surrounding tenant and identity administration work.

Outcomes and deliverables

Delivered and supported privileged access configurations with approval, activation, and expiration controls. Access models and recommendations provided supporting documentation for maintaining the environment.

Risky-user and suspicious sign-in remediation

Investigation and remediation of identity activity, including MFA and account recovery work.

50+ account security cases

Entra ID
Sign-in logs
Account security

Read project report

Context and scope

Risky-user and suspicious sign-in cases within client identity environments. This report summarizes related investigation and remediation work without disclosing account or incident details.

Approach

I used sign-in and audit logs to investigate the activity and carried out account remediation as part of my responsibility for supporting and securing client environments.

Work completed

Investigated and remediated 50+ risky-user and suspicious sign-in cases across consulting engagements using session revocation, MFA remediation, and secure account recovery. Related identity work included authentication and user-risk policies.

Outcomes and deliverables

Completed investigation and account remediation work, including session revocation, MFA changes, and secure recovery.

Endpoint deployments and systems support

Endpoint changes and escalated technical support across office and manufacturing environments.

Windows
Active Directory
Infrastructure

Read project report

Context and scope

Systems administration work supporting office and manufacturing environments, including endpoints, identity, applications, networking, and escalated Tier 2/3 incidents.

Approach

I maintained ownership of complex incidents through resolution and coordinated with technical teams and vendors. Support procedures and administrative documentation formed part of the ongoing work.

Work completed

Supported endpoint deployments, hardware refreshes, application and identity changes, and network improvements. Resolved escalated incidents involving Windows, Microsoft applications, Active Directory, Entra ID, access, networking, and business applications.

Outcomes and deliverables

Delivered endpoint and systems support through deployments, changes, and incident resolution. Maintained support procedures and administrative documentation for continued operations.