Identity and access governance with Microsoft Entra ID and Active Directory
Biography
About
Security Analyst and DevSecOps Engineer
North Bay, Ontario - Remote, hybrid, or on-site
I build security controls that reduce risk and still fit real operations.
I have spent 5+ years securing Microsoft identity, Azure, endpoints, networks, and production web platforms across public-sector, telecom, service-desk, and client environments. I focus on practical controls, measurable risk reduction, and clear handoff documentation so your team can keep operating confidently after implementation.
Profile
I design and operate practical security controls across IAM, cloud, endpoints, and networks. My work includes Entra ID and Active Directory governance, RBAC, MFA, Conditional Access, Azure VM and NSG hardening, Microsoft Sentinel detections, Defender and ESET response workflows, SolarWinds monitoring, firewall cleanup, wireless segmentation, vulnerability remediation, automation, and secure web/server operations.
I have supported 1,000+ endpoints, mitigated 150+ monthly security incidents, and helped reduce firewall exposure by 25% while preserving approved business traffic.
Beyond security operations, I deliver production web platforms and support server operations, DNS, SSL/TLS, deployment workflows, and client communication so your team gets outcomes that are both secure and usable.
I got into security because I like solving hard puzzles that directly protect people, systems, and business continuity.
Focus
01
Where I drive the most impact.
I stay focused on identity, cloud, endpoint, network, and delivery security so your organization can lower risk with measurable progress.
Azure cloud security, NSG hardening, Defender, Sentinel, ESET, and SolarWinds monitoring
Network security, firewall cleanup, VPN, VLAN segmentation, WPA3, and wireless isolation
DevSecOps, secure web platforms, hosting, client support, and server management
Credentials
02
Certifications with status and maintenance dates.
I keep credentials visible because they complement hands-on delivery and give you a quick baseline of my current learning path.
01Certified
CompTIA Security+
CompTIA
Last updated: May 2026
- Threat, attack, and vulnerability identification
- Risk management and risk mitigation techniques
- Threat management operations
- Intrusion detection practices
- Core cybersecurity function readiness
02Certified
Google Cybersecurity Certificate
Google / Coursera
Last updated: May 2026
03In Progress
Microsoft SC-300: Identity and Access Administrator
Microsoft
Last updated: May 2026
Academic preparation
03
Education.
Graduate
Computer Engineering Technology
Mohawk College
- Advanced Networks
- Server Administration
- Web Security
- Operating Systems
- Programming Foundations
Recognition
04
Selected highlights.
2026
Published Azure IAM Security Architecture reference project
GitHub - Ngenzipack/Azure-IAM-Security-Architecture
2024
Reduced reported suspicious incidents by 30% through security awareness training
Near North District School Board
2023
Reduced firewall attack surface by 25% and excessive permissions by 19%
Bell