Harri Jaakkonen FortytwoFortytwo.io 🛡Security Architect MVPMicrosoft MVP
❯Zero Trust Architecture·M365 Security·AI Security & Copilot·Cloud Defense·Graph API▋
Harri Jaakkonen

Harri Jaakkonen |

SEASONED SECURITY LEADER

PS HarriJaakkonen :~> Get-SecurityProfile

Microsoft MVP for Security who lives and breathes Identity, Cloud, Data and AI defense - breaking things on purpose so attackers can't.

./book-time-with-me

work experience

MANAGING DIRECTOR OF FINLAND // CURRENT

Fortytwo | 2026-Present

Growing Fortytwo in Finland: business development, sales processes, customer relationships, and yes, I still get my hands dirty with delivery. Presales, scoping, pricing, then making sure what we sold is what we ship. Got us listed in Microsoft's Entra Verified ID Service Partner Gallery and shipped agentic AI security deliveries. Day-to-day I live across Entra ID, M365 security, Defender XDR, Sentinel, and Security Copilot. My AI security work brings Foundry models and agents into that mix, chasing better security, less complexity, and AI that actually helps instead of slowing the business down.

PRINCIPAL CLOUD SECURITY ENGINEER

Fortytwo | 2025-2026

Building Zero Trust architectures on Entra ID, Defender, Sentinel, and Purview, because implicit trust is a vulnerability. My playground: Conditional Access, PIM, workload identities, and Graph API automation that does the boring security work for you. I've wired up SAML/OIDC/OAuth2, wrangled B2B and cross-tenant setups, and pushed AI security across Azure and multi-cloud. With Microsoft Foundry and Azure API Management (APIM), that means isolating AI workloads, locking down agent permissions, and getting models useful for the task at hand. I also mentor engineers and push hard for least privilege everywhere.

NORDIC SECURITY PRACTICE LEAD

Avanade Finland | 2023-2025

Ran security teams across Finland, Sweden, Norway, and Denmark, keeping people trained, happy, and billable. Was the go-to Security SME on global Azure, M365, and multi-cloud projects, deep in Defender, Sentinel, Purview, and IAM.

SENIOR SECURITY CONSULTANT

Avanade Finland | 2021-2023

Designed and shipped identity and security solutions for clients around the world.

past experience

Lead Cloud ArchitectMPY Yrityspalvelut | 2012-2021
Software SpecialistNovo Group Oyj | 2002-2003
System AdministratorKehätieto Oy | 2007-2012
Technical SpecialistNovosys Oy | 2001-2002
System AdministratorData Group Oy | 2003-2007
IT SupportTelia Mobile Oy Ab | 1997-2001

AI security in my work

Security Copilot is basically my sidekick, and I'm deep in the integrations too. I use Microsoft Foundry to put models and agents to work on threat intelligence, security operations, and tenant admin. Then comes the part I enjoy: figuring out what they can touch, what they shouldn't, and what happens when a prompt tries to cross that line.

I put APIM / AI Gateway in front of model traffic and get the permissions, quotas, and routing sorted. Infrastructure isolation means private networking, managed identities, and keeping test workloads out of production's way. If I'm configuring the same thing twice, PowerShell, Microsoft Graph, or a pipeline is probably getting involved.

A confident answer isn't necessarily a useful one. I work on grounding and retrieval, instructions, and tool permissions to make models useful for the actual job. Then I check the output with evaluation and monitoring. New model, new data, new tool? Time to test again.

built security solutions

// Security Automation & Tooling: Built Azure Helper Side Panel and Cloudpartner Academy, plus custom OSINT tooling and Security Copilot Store agents for threat intelligence workflows.

// Identity & Access Management: Architected Entra ID and Verified ID solutions and built CA Policy Manager and Entra Assessment Tool for policy deployment and tenant assessment.

See more at learn.cloudpartner.fi and intro.cloudpartner.fi.

extended competency list

Microsoft 365 & Azure Security: I live in identity management, Defender, and Azure security. Compliance and monitoring included, no extra charge.

Security Tools & DevSecOps: Hands-on with XDR, EDR, NDR, and email security. Comfortable wiring DevSecOps and CI/CD pipelines in GitHub.

AI Security: Security Copilot is basically my sidekick. Foundry agents and AI Gateway keep me busy with the integrations and guardrails too.

Identity & Access Management: Entra ID, B2C, SSO, and workload identities. I automate identity so nobody has to remember another password.

Cloud Governance & Compliance: I speak fluent compliance: cloud frameworks, regulations, and Microsoft Purview for data governance and protection.

Security Automation: If it's repetitive, I script it. PowerShell and Microsoft Graph do the boring parts for me.

Device, Data, & Application Security: Locking down devices, data, and Azure Web Apps/IIS.

Database & Third-Party Security: SQL Server security is second nature, and I keep Okta and Zscaler's Zero Trust setup honest.

Leadership: 15+ years running multinational teams: training, wellbeing, and keeping everyone billable.

Sales processes & presales: From the first customer conversation to scoping, pricing, and delivery. I can read the room, explain the technical bits, and stay involved when it's time to build.

Analytical Skills: 10+ years reading the security market: strategy and pricing, data, and enough client-facing polish to make it land.

references

References available on request, just ask.