CompTIA Security+ ce
Earned June 2024 · Valid to June 2027
Vendor-neutralSecurity fundamentals
Security and IT
Technical knowledge supports my work as a brand design engineer. My security and cloud certifications, Microsoft Intune lab and four personal learning projects help me understand the products and teams I design for. These are learning credentials and labs, not claims of professional security consulting.
(01)
Certifications
3 active
AWS Certified Cloud Practitioner
Earned October 2024 · Valid to October 2027
CloudFoundational
HashiCorp Certified: Terraform Associate (003)
Earned December 2024 · Valid to December 2026
Infrastructure as codeFoundational
(02)
Course certificates
Coursera, verifiedMicrosoft IT Support Specialist Professional Certificate
Earned December 2025
Professional CertificateIT support
Google Cybersecurity Specialization
Earned February 2024
SpecializationSecurity operations
(03)
In preparation
Microsoft role-basedExam date pending
Microsoft MD-102: Endpoint Administrator
Study since August 2026. The exam was moved in September and the new date is pending. The Intune and Entra ID lab below is the practical side of the same syllabus.
IntuneEntra IDAutopilotDefender for Endpoint
(04)
Personal lab: Microsoft Intune and Entra ID
Own tenant, 2026012026
Device join
Joined a Windows 11 virtual machine to Microsoft Entra ID and enrolled it in Intune. Traced join error 801c03ed to two device settings tightened three days earlier, fixed them, and completed the join.
Entra IDIntune
022026
Windows Autopilot
Imported the machine's hardware hash, then built a user-driven deployment profile and the dynamic group that assigns it. The deployment ran end to end and the device renamed itself to the naming template.
AutopilotDynamic groups
032026
BitLocker
Drove encryption to completion, with the 48-digit recovery password escrowed to the device's Microsoft Entra ID record.
BitLockerEntra ID
042026
Device recovery
A wipe and a snapshot rollback left a machine that believed it was enrolled while Intune had no record of it. Recovered it through Autopilot, whose registration survives a wipe.
AutopilotIntune
052026
Defender for Endpoint
Enabled the Defender to Intune connector, deployed an endpoint detection and response policy with onboarding set to auto from the connector, and confirmed the device onboarded.
Defender for EndpointIntune
(05)
Learning labs
4 write-ups01 · CI/CD securityLearning lab
Azure CI/CD Breach Simulation →
Insecure and hardened pipelines side by side. OIDC federation replaces a static secret.
GitHub ActionsOIDCAzure
02 · Supply chainLearning lab
Fintech Supply-Chain Pipeline →
A poisoned dependency that Bandit misses and a Trivy image scan blocks.
BanditTrivyDocker
03 · LLM securityLearning lab
AI Prompt Injection Lab →
Four OWASP LLM01 attacks against regex and keyword defences: two bypass, two blocked.
OWASP LLM01Python
04 · ML pipeline securityLearning lab
Novamind AI/ML Security Pipeline →
Bandit and Pylint on a three-stage ML pipeline, with the gaps named.
BanditPylint
(06)
Tooling
Labs and study, not productionPipeline security
GitHub ActionsTrivyGitleaksSonarQubeOWASP ZAPDockerTerraform
AI security
OWASP LLM Top 10MITRE ATLASPyRITGarakPrompt injection testing
Endpoint and identity
Microsoft IntuneEntra IDWindows AutopilotBitLockerDefender for Endpoint