Azure Infrastructure Lead · Identity & Platform Security · Entra ID / AKS
I run production Azure for a living: an Entra ID tenant of roughly 10,000 users and multiple production AKS clusters. I'm growing that foundation into identity security engineering, and rebuilding what I learn in a personal lab so I can publish it here.
Nothing is published here yet. These are being built and will appear as repos when they're ready:
- Delegated OAuth automation for a service account, with a written threat model
- A hardened AI workload on AKS: workload identity, network policies, pinned images
- SC-300 (in progress), then SC-200, then SC-500
- SecOps and detection engineering with KQL
- AI workload security: treating AI agents as non-human identities
Azure · Entra ID · AKS · Terraform · PowerShell · Bash · Azure DevOps · KQL
Hackers don't break in, they log in.
