A portfolio by
From physical badge gates at Amazon, to authentication failures at Microsoft, I engineer how the right people reach the right systems.
I am an IT and Cybersecurity professional with 4+ years of enterprise experience across Microsoft and Amazon — where I quietly hold the seams between the people who need access, and the systems that grant it.
My day-to-day is the lifecycle of identity: joiner, mover, leaver. I provision and decommission accounts in Microsoft Entra ID, triage authentication failures across 23+ global gaming studios, and review badge telemetry for the anomalies that don’t want to be seen.
I am presently studying for CompTIA Security+ and Network+, extending hands-on labs in hybrid identity (Windows Server 2025 + Entra Connect), SIEM-style log analysis with Python + MySQL, and incident response simulation in AWS.
Microsoft
XBOX · XGSIT · GPSO
Amazon
Physical access · Badge governance
Microsoft
Tier 1–2 · Enterprise endpoints
Subaru of America
Customer liaison · Workflow optimization
Where I learned to translate frustration into action.
AUDI
Client relations · Documentation
The first place I learned what premium actually means.
Five roles. One through-line.
A small selection of cybersecurity, cloud, and full-stack work. Each piece is its own little artifact — open source, fully documented, and built end-to-end.
A log analysis & incident-report automation tool that parses SSH, Apache and Windows Event logs and classifies threats via regex — brute force attempts, suspicious access hours, repeated 404s, unknown user accounts — with severity scoring. Parsed events land in a Railway-hosted MySQL backend; dark-themed HTML incident reports are generated through Jinja2.
On-premises AD + Azure Entra ID Sync. Deployed Windows Server 2025 AD DS
on an Azure VM (DC01, Canada Central), configured the parmeet.local
domain with three OUs, six users, three security groups, and enforced
enterprise-grade Group Policy. Configured Microsoft Entra Connect Sync
with Password Hash Synchronization to validate hybrid authentication.
An end-to-end AWS security incident response simulation covering CloudWatch alarm triage, unauthorized access investigation, and S3 public exposure remediation. Conducted CloudTrail forensics — extracted source IPs, timestamps, and error codes to reconstruct attacker activity, then remediated S3 exposure via bucket policy removal and Block Public Access.
Full-stack e-commerce application with a Spring Boot REST API backend, MySQL persistence layer, and a JavaScript frontend for product browsing, cart management, and checkout. JWT-based authentication with role-based authorization (admin vs. customer) and password hashing for secure user management.
A Spring Boot REST API connecting to MySQL via the DAO/JDBC pattern, exposing endpoints for the classic Northwind Traders sample dataset — products, customers, orders, and categories.
A Java CLI point-of-sale system for a deli, demonstrating inheritance, interfaces, polymorphism, and a clean separation of business logic from presentation.
A Hotel Management CLI, a Dealership Console, the Financial Transaction Tracker capstone, TurtlePaint, and a handful of smaller Java & Python projects — open source, all on the same profile.