Portfolio

Designing a governance-first, multi-subscription Azure foundation for 50+ product teams — with automated subscription vending, 200+ Policy definitions, hub-and-spoke networking, and 100% infrastructure as code from day one.

Eliminating standing administrative privileges across a 5,000-seat financial institution using Entra PIM, Conditional Access, and automated access reviews - reducing the privileged attack surface by 94% without disrupting operations.