Portfolio

Designing a governance-first, multi-subscription Azure foundation for 50+ product teams — with automated subscription vending, 200+ Policy definitions, hub-and-spoke networking, and 100% infrastructure as code from day one.

Deploying Microsoft Defender for Identity across a hybrid Active Directory environment of 18,000 identities — building detection coverage for credential theft, lateral movement, privilege escalation, and domain dominance attacks, integrated with Microsoft Sentinel for unified XDR response.