SELECTED PROJECTS

Real challenges.
Practical engineering.

A selection of work from my Microsoft cloud engineering roles, covering security, automation and data protection.

These anonymised examples describe my contribution within previous and current engineering roles. Project stages are shown for context.

01 / AUTOMATION

Validated pilot

Vulnerability alerts across multiple tenants

A central workflow that identifies relevant vulnerabilities, sends targeted alerts and checks that monitoring is still running.

The challenge: New vulnerabilities needed to be identified across separate customer environments without relying on repeated manual checks.
My contribution: I built and tested a multi-tenant workflow using Defender hunting queries and Azure Logic Apps. Alerts focus on recent High and Critical vulnerabilities with an available exploit and affected endpoints. Deduplication prevents repeated notifications; a separate health check flags missing or stale monitoring results.
The outcome: The pilot validated tenant-specific alerts and deduplication. The health check makes a missed monitoring run visible, so silence is not automatically treated as a clean result.

02 / CLOUD SECURITY

Implemented

Identity, endpoint protection and data access brought together in a phased security improvement project.

The challenge: Overlapping configurations and inconsistent access controls made the environment harder to secure and maintain.
My contribution: I reviewed existing policies, removed outdated or conflicting settings and implemented a Conditional Access framework. I strengthened endpoint protection through Intune and Defender, including encryption, attack surface reduction and compliance controls. Changes were introduced in phases and checked through monitoring and testing.
The outcome: The environment gained a consistent access framework and standardised security settings, with clearer controls for administrators, employees, guests and unmanaged devices.

03 / DATA GOVERNANCE

Reusable blueprint

A reusable Microsoft Purview blueprint that connects document classification with protection and data loss prevention.

The challenge: Information protection needed a clear, repeatable starting point that could be adapted to each customer’s requirements.
My contribution: I designed a label structure covering Public, Internal, Confidential and Highly Confidential. The blueprint defines default and mandatory labelling, protection settings and DLP rules for confidential information and personal identifiers. It also documents dependencies, exceptions, test steps and the implementation sequence.
The outcome: A documented blueprint gives engineers a consistent starting point for implementation and validation, while leaving room for customer-specific decisions.

START A CONVERSATION

Tell me about your environment and what you would like to improve.