Security Engineer
Microsoft 365 · Endpoint · Network Security
Empowering organizations through robust Microsoft 365 security architectures, zero-trust implementation, and comprehensive threat defense utilizing Sophos and Entra ID frameworks.
Empowering organizations through robust Microsoft 365 security architectures, zero-trust implementation, and comprehensive threat defense utilizing Sophos and Entra ID frameworks.
I'm a security engineer specializing in Microsoft 365, endpoint and network security for modern organizations and enterprises, including regulated financial services clients. I work across Entra ID, Defender XDR, Purview, Intune and Sophos, applying Zero Trust principles to identity, endpoints and data.
I also design and segment networks, from VLAN design and zone-based firewall policy to the documentation auditors ask for. I've taken projects from site assessment through deployment to audit-ready handover, and I coach a cybersecurity cohort covering network security, endpoint protection and identity and access management.
Redesigned the flat, unsegmented network of a CBN-regulated microfinance bank into 11 isolated VLANs with zone-based firewall policy, QoS-prioritized core banking traffic, and full inter-VLAN routing — closing a compliance gap ahead of a regulatory audit and hardening the network against lateral movement from a single compromised endpoint.
Network architecture diagram for the VLAN segmentation deployment. Device identifiers and production-specific labels have been sanitized.
The organization faced increasing security risks across identity, endpoints, cloud applications, and email systems. Users were vulnerable to phishing attacks, compromised credentials, anonymous IP access, and unauthorized cloud application usage. There was limited centralized visibility, no automated threat response, and security controls were fragmented across the environment.
To design and implement a unified security architecture using Microsoft 365 E5 Security solutions, enabling end-to-end protection, threat detection, and automated response across identity, endpoints, email, and cloud applications.
Problem: Disparate AV solutions across global branches causing alert fatigue and missed localized ransomware threats.
Solution: Rolled out Sophos Central with Intercept X across 300+ endpoints. Configured synchronized security with Sophos Firewalls to automatically isolate compromised nodes.
Outcome: Unified endpoint visibility across 300+ endpoints in Sophos Central, with Synchronized Security automatically isolating compromised devices.
Problem: Absence of structured classification for PII and IP, risking regulatory non-compliance during email transmission and external sharing.
Solution: Implemented Microsoft Purview Information Protection, creating auto-labeling policies for sensitive data across Exchange Online and SharePoint.
Outcome: Sensitive data in email and SharePoint is now automatically classified and labeled, with DLP policies and audit trails supporting regulatory compliance.
Problem: Enterprise environments had poorly structured networks, weak perimeter security, and limited visibility, failing to meet regulatory requirements.
Solution: Redesigned network architecture, deployed Sophos Firewall for perimeter protection, optimized routing and APs, and aligned with CBN compliance.
Outcome: Strengthened security and access control, improved network performance, enhanced traffic visibility, and supported regulatory compliance readiness.
Hands-on Microsoft Entra ID security simulations I explain on YouTube.
3 videos · 5 topics
Beyond implementing security architectures, I am passionate about elevating the industry's baseline knowledge. I coach a cybersecurity cohort covering network security, endpoint protection and identity and access management, with a focus on hands-on technical skills and real-world implementation.
Guided students through endpoint protection concepts including threat detection, attack surface reduction, and real-world security scenarios.
Conducted interactive workshops covering endpoint agent deployment, behavioral policy tuning, and ransomware mitigation tactics.
Guided students through network security fundamentals, including segmentation, firewall policy and secure network design.
Guided students through identity and access concepts, including authentication, access control and Microsoft Entra ID.
Open to Security Engineer roles. Let's talk.