Infrastructure automation and security compliance — built, tested, documented.
Cutting identity sync latency from 30 minutes to seconds using event-triggered automation on Windows Server.
Automated, read-only compliance auditing for Windows Domain Controllers — 60 CIS Level 1 controls evaluated in 6.3 seconds.
The v1 auditor extended to the cloud tenant — deterministic Graph API auditing on a Developer Program tenant, with an honest record of what the platform allowed and where it drew the line.
A deterministic, role-driven pipeline across on-prem AD and Microsoft Entra ID — human checkpoints for the judgment calls, and a complete audit trail.
An AI agent extended our on-prem Active Directory into the cloud — provisioning, networking, and validating a new, additional domain controller, with a human approving every credentialed step.
A swing migration of a two-DC domain to Windows Server 2025 — clean install, FSMO transfer, demotion, and the DC4 identity saga, with every state change snapshot-gated and read back from a second vantage.
An AI agent found and closed the real security gaps behind a working Azure DC — weak IPsec crypto, a 16,384-port firewall grant, a VPN CA key on a workstation — and proved each fix, with a human approving every privileged change.
An AI agent provisioned a no-secrets, fully identity-based AKS + SQL + Key Vault + ACR stack for an employee portal — then validated, revoked, and tore it all down cleanly, with a human approving every privileged step.