Platform Specialist - London Borough of Harrow - London, UK
(2024-07)
Harrow is an organisation of over 2500 staff, 5000+ devices. Working across a Hybrid, Zero Trust, Microsoft E5 Environment; Here I have discovered, designed, provided solutions, implemented and maintained a variety of systems. Covering the Security Manager role for a day a week for 6 months. In the Platform Team, I provide Tier 3 support (30%) and project work (70%), focuses on IAM, Exchange Hybrid, Sentinel and the E5 Defender suite.
- Guest User Automation Onboard/Offboarding (EXO / Logic Apps / API / Service Now Script)
- Defender EASM (Plan, configured and integration into Sentinel)
- Microsoft Sentinel - Custom alerting, tuning, logic apps, automation playbooks
- 1Password - Password Management Solution for 1 year IT Pilot
- Exchange Server 2016 / 2019 – Upgrade, email modernisation of SMTP to OAuth
- M365 Data Retention Policy – engaged with Legal and DPO to ensure compliance
- Co-Author for the Incident Response Plan/SOPs, Risk Register
- Extensive E5 Defender Tools configuration, BAU Ops and business tailored improvements: Defender for Identity (Sensor Setup and Integration to Sentinel), Defender for Cloud (CSPM, Defender for Server/Storage etc., compliance), Defender for XDR (Cloud Apps, Endpoint/s, Office)
- Incident Response Plan and SOPs
- Technical Lead on Incidents from start to finish
- Root Cause Analysis and Remediation work
- Management of Incident and Comms to executive levels
- PowerShell - Configuration and extensive use across Internal and Cloud
- Sentinel Lead - Configuration, connectors, tuning, alert creation, incident handling and automation playbooks; Including automated Azure policy deployment across infrastructure
- Entra Conditional Access Policies - Analysis, rework and security improvements
- IAM - Configuring identity protection, protocols, M365 sharing config, SSPR, licensing and standards
- AD & Entra ID - User account analysis, sanitising and standardisation
- Admin configuration - Cleaning up Service, SA(Admin), Entra PIM accounts
- E-Discovery Investigation & Cases - Management, Content Searches, designed / implemented secure processes with guides and presentations to Staff
- Enterprise Applications - Custom configuration, SSO, API, Provisioning, CAP
- Azure Infrastructure - Security, health, backup, cost and configuration hardening
- Exchange EOP - Configuration, testing and implementation, DMARC and DNS
- Intune Management of Devices - Managed/Registered Microsoft, Android and Policies
- 3rd party vendors Assessments - such as MS 'Threat Protection' assessment & CSAT
- Other Tools - ManageEngine AD Backup, Barracuda (M365 Backup), Nessus Tenable, PatchMyPC
Backend Web Developer - Contract Position
(2024-05 - 2024-07)
As the lead backend developer I am responsible for Logic, Databases, identities, API's, Automation workflows and Security working with a team of 4 front-end graphic designers.
- Zapier & Webflow APIs with custom REST APIs
- MemberStack Identity Platform integration and migration of 1400 users
- Payment integration and creation with automation workflows with STRIPE
- Custom Automation and Workflow GUI to backend logic with Xero Accounting software
- Google Drive and document integrations and workflows
- DNS hosting and configurations with Authentication with Shibboleth
Cyber Security Specialist - NZ Police - New Zealand
(2020-11 - 2024-05)
Police is an organisation of over 15,000 staff, 30,000+ devices. Whilst here Police's CIS Benchmarks score grew 1.8 points. My primary portfolio was across all Police managed and connected cloud domains, where I was a key or sole security specialist for the following:
- Incident Response, handling and remediation
- M365 E5 Adoption Program / Projects Implementation – Delivered in 1 year
- Microsoft Azure Landing Zone Design and Compliance Assessment (ALZ)
- E5 Security Defender Tools implementation and operations (Microsoft)
- Security Lead for multiple projects handling and external vendor engagements
- PCI-DSS compliance of NZ Police (e-commerce and card present)
- Website Migration to Microsoft Cloud including Gitlab and Azure DevOps
- BYOD device connectivity and security
- Microsoft Exchange Online Migration (from On Premise Hybrid)
- Government C & A (Certification and Assurance - NZ requirement - GRC)
- Technical Operations and SOC Tier 2/3 support incident response (Hands on)
- C – Level, Director and ICT and Business Operation Team presentations and engagements
- Mentoring team members progressing operation efficiency ideas
- SIEM / SOAR alongside scripting and querying with EDR (XDR) and other solutions
- IAM - Identity and Access Management - CASB, CAP, 2FA, SASE (ZScaler)
- Threat Intelligence / Threat Hunting / OSINT / DLP & Alert Creation (SIEM)
Cyber Security Advisor - NZ Police - New Zealand
(2021-02 - 2021-11)
Advising on various systems (from hardware to enterprise wide software). Whilst here our Cyber Security Team grew from 7 to 28, where I started with large portfolios transitioning to specified technologies to support the business growth. I regularly engaged with internal and external staff from all levels such as CISO and CIO to provide security focused advice on systems to improve the overall security posture of the business.
- Vulnerability Management: External WAF, Email System assessments / security monitoring and incident response, Web Applications and External Services assessments, Proxy security assessment and technical configuration changes
- Mobile iOS and Windows Desktop Application SRA's
- Hardware Assessments
- Active Directory, GPO and SAP database monitoring and configuration
Cyber Security Intern - NZ Police - New Zealand
(2020-11 - 2021-02)
Chosen over 30 candidates to become a intern at NZ Police. Working with the Security Operations and GRC team to clear a year old backlog of Security Risk Assessments (completed in 2 months). Worked on Cloud and Projects.
- Security Risk Assessment (Mobile, Web & Desktop Applications)
- Phishing email forensics and handling
- Email Security Reporting and DMARC improvement
- Code reviews of both PHP, Java and PowerShell
VR Engineer - Scholarship then Contracting
(2019-11 - 2020-07)
For 3 Months as a team of 4, 2 engineers and 2 designers we created a realistic decision making VR simulator 'Proof of Concept'; developed in Unreal Engine 4. Eventually we migrated to a 'Proof of Concept' in Unity. Extended by contract over 5 months I took the lead role in the development of a Minimal Viable Product, with core work focused on the AI character and its architecture.
- Unreal Engine Simulation Development (C++ programming)
- Unity Development and migration of project (C# programming)
- Distribution
- GitHub CI/CD pipelining
- Vive Pro Hardware optimisation with Custom IOT hardware integration (Sensors)
- AI NPC creation and integration
Physical Security Supervisor - Wellington Council - Wellington
(2013-01 - 2013-12)
In this role, I managed a client and 17 staff full time staff including the security of 98 sites for the Wellington City Council. In addition to this I completed tasks of H & S documentation, SOP's, rostering and created my own staff upskill charts (for their personal development).
Farming - Self-Employed - New Zealand
(2014-01 - 2016-02)
Various Roles from Machine Operator to Dairy Milking and herd management. I trained to have a Full Truck license with Wheel, Tracks, Roller endorsements. Completing a 9 month USA tour where I decided to go into IT.
