Real work, real outcomes — a look at what I've designed, built, and secured.
A multi-site enterprise was running a flat network with no logical segmentation — all devices in the same broadcast domain, with no visibility into lateral movement.
Designed and deployed a full VLAN architecture across all sites, configured inter-VLAN routing with OSPF, and implemented access control lists to enforce traffic policies between segments.
IT staff were manually creating user accounts, assigning licenses, and logging each action — a process that took nearly two hours per batch and was prone to inconsistency.
Built a Python script integrating with the Microsoft Graph API to automate account creation, group assignment, license provisioning, and structured audit logging end-to-end.
A 15-account AWS organization had grown organically — no guardrails, inconsistent IAM policies, no centralized logging, and several accounts with admin-level access too broadly granted.
Implemented AWS Organizations SCPs, centralized CloudTrail and Config logging, enforced least-privilege IAM baselines, and introduced policy-as-code reviews for any future account changes.
Years of rule accumulation left the organization's firewall bloated with unused, overlapping, and overly permissive rules — creating significant attack surface and audit risk.
Conducted a full rule audit, removed over 300 unused entries, consolidated overlapping rules, and tightened ingress/egress policies to align with the principle of least privilege.
The team had no centralized visibility into network or server health — outages were discovered by end users calling the helpdesk, not by proactive monitoring.
Designed and deployed a real-time monitoring dashboard with SNMP polling, threshold-based alerting, and runbook-linked incident notifications for the on-call team.
Four internal systems maintained overlapping data — CRM, ticketing, billing, and inventory — requiring staff to manually re-enter the same information across platforms multiple times a day.
Built a lightweight Python integration layer using each system's REST API, with OAuth-based auth, error handling, and logging — syncing records automatically on create/update events.