I'm an Identity and Access Management professional with hands-on experience managing enterprise-scale identity infrastructure in a critical infrastructure environment. My work centers on Privileged Access Management, hybrid identity architecture, and increasingly, AI-assisted IAM automation — using Microsoft Graph, PowerShell, and Azure OpenAI to build smarter, faster identity workflows.

I believe the future of IAM isn't just about managing access — it's about automating governance, detecting anomalies intelligently, and enforcing least-privilege principles at scale without slowing the business down.

This GitHub is where I build and share that work publicly.

Identity & Access Management    ████████████████████  Enterprise-scale
Privileged Access Management    ████████████████████  BeyondTrust Certified
Microsoft Entra ID / Azure AD   ███████████████████░  Deep hands-on
PowerShell + Graph Automation   ████████████████░░░░  Active development
AI-Assisted IAM Workflows       ████████████░░░░░░░░  Building now

Production-ready PowerShell scripts for automating identity lifecycle operations using the Microsoft Graph SDK. Built for IAM engineers and consultants who need reliable, auditable, least-privilege automation.

Scripts available:

• New-EntraUser.ps1 — Interactive user provisioning with loop support, group assignments, forced password reset, and full audit logging
• Remove-EntraUser.ps1 — Six-step structured offboarding: revoke sessions → disable → randomize password → remove groups → clear manager → optional deletion
• Get-StaleAccounts.ps1 — Stale account detection with CSV export for access review and remediation workflows
• Get-UserAccessReport.ps1 — Full role and group membership reporting per user — ideal for access reviews and audit requests
• Get-ConditionalAccessReport.ps1 — Audit and export all Conditional Access policies for compliance documentation and gap analysis
• Import-EntraUsersFromCsv.ps1 — Bulk user provisioning from CSV — automates high-volume onboarding workflows at scale
• New-EntraGroup.ps1 — Security and Microsoft 365 group creation with static or dynamic membership, owner assignment, and duplicate detection

Coming next:

• Add-EntraGroupMember.ps1 — Bulk and individual group membership management with audit logging
• Get-MFAStatusReport.ps1 — Organization-wide MFA enrollment and compliance status reporting
• Get-PrivilegedRoleReport.ps1 — Privileged role assignment audit across Entra ID — flags standing access and PIM eligibility gaps

Integrating Azure OpenAI with Microsoft Graph to build intelligent identity automation — moving beyond scheduled scripts toward context-aware, anomaly-detecting IAM pipelines.

Planned projects:

• AI Access Review Summarizer — Pull group membership data via Graph, pass to Azure OpenAI, generate plain-English executive summary for non-technical stakeholders
• Stale Access Anomaly Detector — Flag unusual access patterns using AI scoring against baseline identity behavior
• Natural Language IAM Query Tool — Ask questions about your Entra ID tenant in plain English, get structured answers

Identity Platforms: Microsoft Entra ID · Active Directory · BeyondTrust Password Safe

Microsoft Graph: User lifecycle · Group management · Conditional Access · PIM · Identity reporting

Protocols: OAuth 2.0 · SAML · OIDC · RBAC · MFA · SSO · Conditional Access

Automation: Microsoft Graph PowerShell SDK · Azure CLI · PowerShell scripting · Python

I work at the intersection of three areas that are increasingly converging in enterprise security:

1. Identity Governance — Making sure the right people have the right access, and nothing more. Lifecycle management, access reviews, privilege reduction.

2. Privileged Access Management — Protecting the accounts that can do the most damage. Credential vaulting, session governance, just-in-time access.

3. AI-Assisted Automation — Using Microsoft Graph + Azure OpenAI to build workflows that don't just execute tasks, but reason about identity data and surface insights human administrators would miss.

Daily driver: Pop!_OS | Dev server: Ubuntu 22.04 LTS

Actively running and maintaining open source security infrastructure in my home lab:

• OPNsense — Enterprise-grade firewall and routing on a dedicated VP2410 4-port Intel Celeron J4125 appliance. Handles network segmentation, VPN, and perimeter security for the lab environment
• Wazuh — SIEM and XDR platform for security monitoring, threat detection, and identity-related event correlation
• Pi-hole — Network-level DNS filtering and traffic visibility across the lab environment

Building toward integrating open source IAM tooling alongside my Microsoft identity stack — including Keycloak, OpenLDAP, and HashiCorp Vault — to develop platform-agnostic identity and secrets management skills.

• IAM consulting engagements — implementations, assessments, architecture reviews
• Contract and fractional IAM work — remote, part-time or project-based
• Collaboration on open-source IAM tooling and automation projects