❯
Zero Trust Architecture·
M365 Security·
AI Security & Copilot·
Cloud Defense·
Graph API
▋
I build Zero Trust architectures with Microsoft Entra ID, Defender, and Sentinel. My playground: Conditional Access, PIM, workload identities, and Graph API guardrails that do the boring security work for you. Breaking things on purpose so attackers can't.
I'm the person you call when things break under pressure. I stay calm, debug the chaos, and ship a fix. Years of global client work taught me to read a room as fast as I read a log file.
I've wired up SAML/OIDC/OAuth2, wrangled B2B and cross-tenant setups, and pushed hard for least privilege across Azure and multi-cloud. Security Copilot is basically my sidekick; Microsoft Foundry and AI Gateway keep me busy with agents, models, and their guardrails.
I lead teams, work through sales processes, and still get my hands dirty with delivery. Presales, pricing, mentoring engineers, then back to the logs. If it's repetitive, I script it.
Sharing knowledge builds stronger defenders. I publish tools and learning content to help teams and individuals secure cloud estates.
Identity & Zero Trust
›Entra
ID architecture
& impl.
›Conditional Access · PIM›Workload
identities & Graph API
›Private
Access · B2B scenarios
Threat Defense
›Defender XDR / MDE /
MDO / MDI
›Sentinel SIEM &
analytics rules
›Email
security &
phishing defense
›Purview
information
protection
AI Security
›Security
Copilot
deployment›Custom
Copilot Store agents
›AI
governance frameworks
›Secure
agentic AI
integration›Foundry & AI Gateway
architecture
Cloud & DevSecOps
›Azure
& M365 security
posture
›GitHub
Advanced Security
›Key
Vault &
secrets management›Security
automation &
pipelinesAzure Helper teaches Azure and M365 admin work from your real Entra ID or External ID tenant with read-only checks, Portal, Graph, and PowerShell guidance. The browser Side Panel for Chromium-based browsers and Firefox adds a free Graph query resolver for live portal calls, debugging, and snippet export.
Practice platform for Microsoft Security certifications with hints, scenario-based questions, weak-area tracking, and full exam simulations for SC-100, SC-200, SC-300, SC-401, SC-500, and SC-730.
Free browser-based Zero Trust Assessment tool. Validate your Microsoft 365 tenant against 150+ security controls based on NIST, CISA, CIS standards. Sign in with your Microsoft account, grant read-only Graph API permissions, and get a detailed HTML report in 5-15 minutes.
Deploy and manage Conditional Access policies with ease. Import policies from CSV files or GitHub repositories and deploy multiple CA policies to Entra ID at once. Use pre-built templates for NIST, Zero-Trust, and more. View, edit, and delete policies with real-time status.
Comprehensive Entra ID analysis with advanced security assessment. Complete user, group, identity configuration, conditional access policies, and security compliance analysis with risk assessment. Export comprehensive documentation to GitHub or SharePoint with executive summaries and technical details.
A PowerShell-based monitoring solution to track Microsoft Learn certification expiration dates with intelligent automation and comprehensive notification system. Works in both Windows and Mac!
PowerShell 7+ reconnaissance framework for Azure AD/Entra ID tenants. The script automates tenant discovery, service fingerprinting, authentication flow testing, certificate transparency research, digital footprint enrichment, and report generation. Designed for defenders, red teams, and security researchers.
A free, AI-powered study assistant that helps professionals prepare for SC-100, SC-200, SC-300, SC-401, and AZ-500 certifications. Uses 80+ official Microsoft Learn pages.
Subscribe to deep learning sessions on Microsoft Security topics, including Entra ID, Purview, Azure security, Defender XDR, and Security Copilot.
Cross-platform PowerShell toolkit for database schema visualization, security auditing, and AI-assisted understanding via MCP. Maps tables, foreign keys, stored procedures, and permissions across SQL Server, Azure SQL, and PostgreSQL. Works with GitHub Copilot and Claude via MCP server integration.
Powerful, flexible PowerShell tool for extracting and analyzing blog post metadata across any platform. Seamlessly aggregates posts from markdown front matter, JSON APIs, or web services. Features intelligent data decoupling, multi-source support, and extensible category mapping — built for portfolio auditing, content migration, and analytics workflows.
