I own Zero Trust architecture for a hybrid environment with 10,000+ endpoints — Defender for Endpoint, Microsoft Sentinel, and Azure Security Center, working together instead of as separate bolted-on tools.



I led the migration off on-prem identity onto Microsoft Entra ID, including Conditional Access, Privileged Identity Management, and Continuous Access Evaluation.



Microsoft Defender XDR is my main detection and response platform day to day, and I advise on Microsoft Purview for data protection and compliance.



I've built PowerShell and Python tooling for Intune Proactive Remediations and reporting, so a good chunk of routine remediation now happens without anyone touching it.



I sit on our internal InfoSec Committee, where I've contributed to the ISO/IEC 27001 implementation and how we approach security monitoring day to day.



Alongside that primary engagement, I've taken on a few standalone projects: DNS infrastructure hardening for a media publisher, an endpoint rollout for an entertainment-industry client, and a domain controller/GPO migration for a financial-sector client. Each one meant scoping the work myself, not just executing someone else's plan.