Identity & Access Management / Systems Administration
Helpdesk Associate/Junior Enterprise Systems Admin, EspriGas|Houston, TX
I work where identity and access management meets enterprise systems administration. Day to day I administrate Active Directory, Entra ID and Okta, manage endpoint enrollment and compliance in Microsoft Intune, and automate provisioning, deprovisioning and group policy with PowerShell for 80 to 110 endpoints. I enforce SSO and MFA for 125+ staff and run least-privilege access reviews.
A path from live production and helpdesk support into identity administration and systems operations.
Administrate an Active Directory domain, Entra ID and Okta. Automate provisioning and deprovisioning with PowerShell and Microsoft Intune across 80 to 110 endpoints, enforce SSO and MFA for 125+ staff, and support the FortiClient VPN migration off Cisco ASA alongside Microsoft 365 and AWS console maintenance.
Deploy and manage SSO with MFA enforcement across cloud and on-premises applications for 125+ staff. Monitor security events in a SIEM and run least-privilege RBAC with quarterly access reviews.
Run a small IT contracting practice. Built and shipped commercial and open-source security tooling, including an AI security audit platform and a self-hosted identity stack.
Provided Tier 1 and Tier 2 support for 125+ staff with sub-24-hour turnaround. Managed Active Directory accounts and automated onboarding and offboarding workflows.
Operated professional audio and video systems for live production and streaming.
The identity, endpoint and automation stack I operate hands-on in a production environment.
Identity, endpoint and AI-security projects built and shipped, with working demos and source.
AI-powered IAM risk auditor that analyzes AWS, Azure and GCP policies using GPT-4o-mini, surfacing severity-rated findings mapped to NIST, CIS, Zero Trust and SOC 2 frameworks.
Turns a folder of reported .eml files into a ranked triage list: SPF, DKIM and DMARC results, sender and Reply-To mismatches, brand impersonation and lookalike domains, suspicious links, and dangerous or macro attachments, each scored and explained. Writes CSV, HTML and JSON reports and can gate a pipeline on a verdict. Read-only by design and tested on Linux and Windows CI.
Identity hygiene auditor that turns a Microsoft Entra ID account export into a ranked findings list: stale accounts, guest sprawl, licenses wasted on disabled users or reclaimable from stale ones, MFA gaps, and privileged accounts missing MFA or long idle. Writes a CSV and a self-contained HTML report. Read-only by design and tested on Linux and Windows CI.
Guided, config-driven onboarding and offboarding wizard for IT and identity teams. Dry-run by default, keeps a human in the loop at every manual step, and a hard last-day safety guard halts an unsafe offboarding. Tested on Linux and Windows CI.
Production-grade self-hosted identity stack on Oracle Cloud with Authentik SSO, Traefik reverse proxy, HTTPS and Cloudflare domain management.
Simulated enterprise Active Directory environment on Oracle Cloud with Windows Server 2022, OU and GPO design, PowerShell automation for onboarding, offboarding and access review, and live security event monitoring.
Automated user lifecycle management via Microsoft Entra ID and Power Automate with full onboarding and offboarding flows and audit logging. Earlier prototype; the runnable PowerShell version is the Identity lifecycle wizard above.
Commercial AI security audit platform covering 14 attack vectors, built with Cloudflare Workers, Mailjet and Stripe. Five pricing tiers for LLM vulnerability assessment.
Multi-phase adversarial evaluation of tool-using LLM agents, testing prompt injection, secret exfiltration and privilege escalation across GPT-4o-mini and Claude.
Open-source IR guide covering detection through recovery for phishing and ransomware, with automation scripts.
Field notes on identity, automation and AI security.
Why I built a dedicated AI agent and what it means to have an autonomous partner in security operations.
Authentik, Traefik, Docker and a Cloudflare tunnel. Enterprise identity infrastructure on a single ARM instance.
Zero-touch identity automation with a Terraform-powered provisioning pipeline for hybrid AD and Entra ID.
Autonomous red-teaming: when AI agents probe other AI systems, the attack surface changes entirely.
Sanitized writeups from the service desk, one a week. Read all →
Twelve weeks into a new job, I read three years of the help desk's own ticket history to understand the place I'd walked into.
Wiring the ERP into the onboarding script through its API, auditing every user, and finding people who were only partly offboarded.
Extending an onboarding script into a batch automation, and the read-only audit that found paid licenses sitting on deactivated accounts.
Diagnosing why work was falling through the queues, delivering new-hire IT onboarding myself, and standing up a proper dev toolkit.
Preparing laptops for new hires with Autopilot, and learning that the hard part of a rollout is never the automation, it is the handoff.
A record ticket week, and the PowerShell and WMIC commands that removed stubborn software the packaged uninstaller would not.
How one question during a support case uncovered a group giving nearly all staff access to a whole site, and hit a device-removal milestone.
Two standard operating procedures and a forty-six thousand row report, and why documentation is how a small team scales.
Merging a device list with a user export to work a rollout site by site, and using vendor support instead of fighting an MFA issue alone.
Pulling a device inventory, testing the uninstall on myself first, and planning a fleet-wide change by site instead of by hope.
How I treated my first week on a service desk as a sprint to understand the environment, and why documentation from day one compounds.
The resume covers the complete history and the details that did not fit on this page. Grab it, or reach out directly.