Security & Access Management
Selected work demonstrating this service.
- Enhanced data security by implementing 1 000 RBAC rules for developers, application instances, PostgreSQL, MS SQL, and other Linux servers, preventing unauthorized access; documented with Ansible automation.
- Prevented security breaches by leading access management initiatives, utilizing M365, 1Password, Red Hat SSO, and OKTA SSO.
- Managed and troubleshooted 8 WireGuard VPN and IPSEC VPN connections, ensuring secure communication across Google Cloud and Linux systems.
- Improved team communication and collaboration by implementing Slack, Mattermost, 1Password, and Jira, saving 8,000 hours of labor.
- Administered network infrastructure for over 1,000 servers, ensuring optimal system deployment, security, and troubleshooting.
- Automated SSL/TLS certificate creation for 100 Docker applications, ensuring secure connections across Ubuntu Linux hosts.
- Designed an organization context‑switching system with client localStorage and server‑side cookie mirroring, letting users act as managed organizations while enforcing least‑privilege authorization.
- Implemented startup mail‑provider validation across three providers (SendGrid, SMTP2GO, Azure ACS) with environment‑aware behaviour — logging in development, failing the boot in staging and production.
- Provisioned Azure infrastructure as code with Bicep — Container Apps, PostgreSQL Flexible Server, Front Door/WAF and networking — across the development, staging and production environments.
- Hardened the application with nonce‑based CSP, HSTS, SameSite cookies, least‑privilege database roles and server‑side entitlement re‑checks.
- Automated team collaboration, password management, task and time management, and built a semi‑automatic project‑showcase system, raising team productivity.
- Integrated a company‑wide password‑management system, strengthening security and streamlining access control.