Automated Active Directory user and group provisioning with PowerShell, replacing manual ADUC workflows with repeatable, scalable account-management scripts.

Troubleshot account lockouts and GPO/RDP access issues by analyzing Active Directory logs, PowerShell/CMD diagnostics, and configuration settings to identify and resolve root causes.

Configured and enforced Group Policy controls for password policies and endpoint restrictions across domain-joined clients, while deploying and troubleshooting the environment on Microsoft Azure infrastructure.

Triaged and investigated simulated CEO account-takeover activity in Wazuh, analyzing authentication, account, file, and process events to distinguish relevant security activity from routine alerts.

Developed and validated custom Wazuh detection rules for suspicious logins, administrator creation, sensitive file access, downloads, and process execution, troubleshooting detection and telemetry issues through repeatable attack simulations.

Correlated endpoint events into an incident timeline using Python and FastAPI, enabling systematic investigation from initial authentication activity through post-compromise actions and supporting evidence-based incident reporting.

Built and operated an isolated 4-VM cyber range to simulate realistic attacker and defender workflows across segmented virtualized infrastructure.

Conducted reconnaissance and simulated web/remote exploitation against vulnerable systems, tracing attack activity across the environment to evaluate detection and response capabilities.

Investigated attack telemetry using Suricata IDS and Splunk, correlating alerts into an incident timeline, documenting IOCs, identifying root causes, and developing remediation recommendations.

Engineered & Deployed Dedicated Linux Infrastructure: Hosted a dedicated Minecraft server environment on Ubuntu Linux using Crafty Controller, managing system background services (systemctl), background process isolation, and resource allocation.

Configured Zero-Trust Network Tunneling: Implemented secure WAN connectivity and automated port forwarding via Playit.gg, enabling low-latency remote user access without exposing local network infrastructure to direct public inbound routes.

Automated System Resiliency & Power Management: Authored system-level service configurations and power policy overrides to guarantee high availability, enabling automated boot-time initialization, auto-recovery upon host restarts, and continuous 24/7 server uptime.