// Azure Cloud Security & Identity Engineer

I turn access sprawl into least-privilege,
by design.

Hardening Azure identity and infrastructure with Terraform IaC — compliance as an outcome of strong security, not the objective itself.

view projects → github linkedin

/about

Security professional focused on Azure cloud security, infrastructure, and identity — hands-on with Microsoft Entra ID, Azure RBAC, Azure Policy, and Terraform IaC. My compliance experience spans SOC 2, FedRAMP, HIPAA, and NIST RMF, but I treat compliance as a natural outcome of strong security practices, not the objective itself.

Outside of work, I build Azure and AWS projects like this one to learn by doing.

/experience

Information Technology Analyst — Signature Performance, Inc.

Oct 2023 – Present
  • Remediate access control gaps and enforce identity and access policies across cloud and on-premises systems to reduce access-related security risk.
  • Strengthen access governance by implementing least-privilege policies and incident/event analysis across infrastructure and application controls; identify and remediate access provisioning gaps.
  • Improve SOC 2 audit preparation efficiency by designing alert filtering and reporting workflows that streamline control scope validation and simplify audit scope clarification.
  • Identify compliance gaps and coordinate remediation efforts across infrastructure and applications to reduce organizational risk.

Security & Systems Consultant — Auxidus Technologies

Dec 2024 – Present
  • Configure cloud platform security controls and identity management across cloud applications and infrastructure to enable secure deployments and multi-tenant environments.
  • Deploy cloud monitoring and security controls for threat detection and incident response using SIEM and identity platforms.
  • Design secure cloud architectures and identity management solutions for client applications, evaluating security posture and recommending implementations to reduce deployment risk.
  • Review cloud integrations and APIs built into company solutions for security gaps and compliance readiness before client deployment, ensuring secure connectivity.

Web Systems Analyst — XPRIZE

Apr 2021 – Oct 2023
  • Resolved platform support tickets while maintaining high satisfaction scores, supporting access, infrastructure, and compliance requests.
  • Enforced least-privilege access controls and managed identity lifecycle via Azure AD across the organization, reducing access-related security risk and supporting compliance requirements.
  • Diagnosed and resolved complex infrastructure and application issues, improving system stability.

/featured

all projects →
  1. 01

    Cloud Security Operations Lab Infrastructure Azure · AWS · Terraform

    Terraform IaC template for a multi-cloud SOC lab (Azure, AWS) with automated security controls, cloud-native SIEM, monitoring pipelines, and detection rules.

    view →
  2. 02

    Entra ID Audit Tool PowerShell · Microsoft Graph · Entra ID

    Automated Entra ID governance auditing via Microsoft Graph covering identity/access risk checks with a self-contained dashboard.

    view →
  3. 03

    Network Change Detection Tool Python · Flask

    Web-based nmap scan-diffing tool: detects new/changed hosts, ports, and service versions against a saved baseline, with plain-English risk hints for each change.

    view →
  4. 04

    Cloud Resume (this site) Bicep · Azure Functions · Cosmos DB

    Serverless Azure architecture: Python Functions API, Cosmos DB, Bicep IaC, GitHub Actions CI/CD, custom domain.

    view →

/skills

Languages

  • Python
  • PowerShell
  • Bash
  • JSON/YAML

Databases

  • SQL
  • PostgreSQL
  • SQLite
  • Cosmos DB

Platforms

Azure

  • Entra ID
  • Managed Identity
  • Azure Policy
  • Key Vault
  • Sentinel

AWS

  • IAM
  • VPC
  • EC2
  • S3
  • Lambda

Tools

  • Docker
  • Terraform
  • Linux
  • Git
  • Windows
  • Jira
  • Onspring
  • Zendesk

Expertise

  • Identity & Access Management
  • Cloud Security
  • Zero-Trust Architecture
  • Risk Assessment
  • NIST RMF
  • FedRAMP
  • SOC 2
  • HIPAA

Certifications

  • Security+
  • CySA+
  • PenTest+
  • CASP+
  • AZ-104

Education

  • Western Governors University — MS in Cybersecurity and Information Assurance
  • California State University, Channel Islands — BS in Business Administration