Identity
Access control, MFA, role design, account lifecycle, least privilege, and privileged workflows.
Security
Security as Part of
the System
My focus is practical security: identity, hardening, visibility, segmentation, governance, response, and security controls that support the business instead of fighting it.
Approach
Security Without Losing the Operation
Security works best when it understands the environment it is protecting. Controls have to account for users, workflows, business systems, support requirements, recovery, and operational pressure.
My background in IT operations gives me a practical lens for security. I am interested in controls that reduce risk while still allowing systems and people to function effectively.
That is why identity, access control, logging, segmentation, hardening, documentation, automation, and recovery are recurring themes throughout my labs and projects.
Operating Model
From Fundamentals to Real-World Application
Protect
Secure configuration, endpoint hygiene, network segmentation, hardening, and reduction of unnecessary exposure.
Detect
Logging, monitoring, alert triage, abnormal behavior, and building better visibility into systems.
Respond
Containment, investigation, recovery, communication, documentation, and repeatable incident workflows.
Improve
Turn incidents, audits, troubleshooting, and operational friction into stronger systems and better controls.
Current Focus
Building Deeper Security Capability
I am combining structured certification study with hands-on infrastructure and security labs.
Identity & Access Management
Microsoft Entra ID
Conditional Access
Cloud Security
Security Operations
Governance & Risk
Endpoint Security
Network Segmentation
Logging & Monitoring
Automation
Security Projects
Learning Through Building
Identity & Access
Identity & Zero Trust Lab
Conditional Access, MFA, RBAC, account lifecycle, privileged workflows, and practical identity design.
Explore Project →
Security Operations
AI-Assisted Security Operations
Exploring local AI for event classification, log summarization, incident-response assistance, and workflow automation.
Explore Project →
“Resilient systems aren't built by accident.”