Identity & Access Management and Windows infrastructure engineer, 20+ years. Seattle, WA · Available for consulting and contract engagements.
I design, fix and automate identity infrastructure: Active Directory, Entra ID, federation (SAML / OIDC), PKI and hybrid Exchange. I've done this work across higher education, enterprise and media/entertainment. Most of my automation is PowerShell, with Python, Terraform and Ansible where they fit.
- Active Directory & Entra ID: security audits, hardening, hybrid sync, domain migrations, privileged access
- Federation & SSO: SAML, OIDC, CAS, Shibboleth, Keycloak, Okta, PingFederate integrations and troubleshooting
- PKI & certificates: AD CS design and consolidation, EJBCA, Keyfactor, Venafi, Sectigo, certificate lifecycle automation
- Microsoft 365: hybrid Exchange, Conditional Access, security testing with Maester
- Automation: PowerShell modules, infrastructure as code, repeatable runbooks
| Project | What it does |
|---|---|
| AD-Audit | PowerShell module for Active Directory security and performance auditing, with remediation guidance and reporting |
| Entra-Hardening | Modular PowerShell toolkit for applying Entra ID security baselines, including Conditional Access |
| Azure-PIM-Solution | Deploy and report on Entra ID Privileged Identity Management (just-in-time admin access) |
| PKI-Consolidation | PowerShell module that automates AD CS consolidation |
| Audit-Azure | Checks Azure subscriptions against Azure Security Benchmark and CIS controls |
| Windows-Server-Powershell-Solutions-Suite | Scripts and modules for Windows Server roles: AD, AD CS, ADFS, DNS, DHCP, Hyper-V, clustering |
- Identity & Active Directory: DNS-Audit · AD-Replication-Manager · Get-Privileged-Report · Auto-Domain-Migration · Maester-O365
- PKI: EJBCA-Automated-Lab · Keyfactor-CLM-Implementation
- Platforms: ACM (Vault, DSC, AWX and monitoring on Azure) · Mac-Compliance-System (macOS endpoint compliance) · Vaultwarden-Serverless
- Labs & scripts: Azure-Free-Tier-Datacenter · Azure-Win-Lab · azure-sql-docker-demos · Infra-Scripts
PowerShell · Python · Terraform · Ansible · Azure · Microsoft Graph · Docker / Kubernetes · Git & GitHub Actions
Open to consulting on identity, PKI and Windows infrastructure projects. 📧 adrian207@gmail.com


