Five plus years of enterprise IT in New York, spent mostly in environments where the systems are not allowed to fail. This is the long version — the short one is on the home page.
Grouped by how it shows up in practice rather than by keyword. Where a capability has been exercised outside of work, the lab or project is linked.
Endpoint troubleshooting, profile and policy issues, application and peripheral faults, imaging and refresh work, and the escalated tickets that come back a second time.
User and group management, licence assignment, Exchange and Teams administration, shared mailbox and distribution list hygiene, and tenant-level settings that affect everyone downstream.
Account lifecycle from onboarding to offboarding, group membership and nested-group untangling, MFA enforcement, credential reset and recovery workflows, and least-privilege reviews.
Incident, request, and change practices under ITIL 4 — prioritisation, queue management, escalation paths, knowledge management, and the documentation that makes a service supportable by more than one person.
Python and shell automation, REST API integration, OAuth token lifecycle handling, local state in SQLite, and multi-agent AI orchestration with validation gates and retry logic rather than blind execution.
Reading authentication and system logs, writing queries that separate signal from noise, tuning thresholds, and documenting the response so it holds up to review. Security as part of good operations, not a separate job.
Nothing here is listed for decoration — these are the platforms and practices I have used to get real work finished.
ITIL 4 Foundation in April 2023, CompTIA Security+ in May 2025 — with a dedicated page for each.
Threat analysis, security architecture, network security, identity management, operations, governance, risk, and compliance.
Service value chain, four dimensions model, guiding principles, and continual improvement practices for enterprise IT.