Skill → Task → Result → Proof
Explore the work behind each skill area. These are personal-lab demonstrations unless explicitly identified as owner-reported professional experience.
Core technical areas span Windows infrastructure, Microsoft cloud, application SSO, Linux application hosting, HTTPS, virtualization, automation, endpoint administration, and IT operations. Each supporting link opens the original retained artifact or the relevant case study.
PROJECT 15 / AUTOMATION & SCRIPTING
A local PowerShell 7 administration interface for Microsoft Graph inventory, hybrid identity checks, Windows LAPS validation, Azure Arc inspection and guarded Active Directory provisioning. Seven workflows provide Run, Edit and Log controls; the portfolio validation card is edit-only.
Read the case study →Five directly accessible PASS screenshots document observed results. The public portfolio displays proof; it does not execute local PowerShell commands.
The retained DC01 inventory summary records Windows Server 2022 with AD DS, DNS, DHCP, and Group Policy Management installed. It is a sanitized derivative with upstream provenance, rather than a supplied raw inventory.
Sanitized results record modern LAPS schema attributes, authorized retrieval, denied standard-user retrieval, and forced rotation events.
The retained Cloud Sync validation record documents scoped provisioning, Department synchronization, source-anchor correlation, and password-change authentication testing.
PROJECT 14 / IDENTITY & APPLICATION ACCESS
Integrated Ubuntu-hosted Grafana OSS with Microsoft Entra sign-in. Original screenshots demonstrate a single-tenant application registration, AzureAD-synchronized user identity, Viewer authorization, explicit application assignment, assignment-required configuration, and Microsoft My Apps integration.
PROJECT 14 / LINUX & SECURE APPLICATION HOSTING
Enabled and verified Grafana under systemd on Ubuntu, issued a Let’s Encrypt certificate using Cloudflare DNS-01, and accessed the application over HTTPS. Original screenshots show the running service, certificate issuance and expiry, and DNS permissions scoped to the lab domain.
Sanitized command output records a shared mailbox, FullAccess and SendAs delegation, a distribution group, and an enabled external-sender transport rule.
Post-Autopilot output records Entra join and successful authentication; the BitLocker record reports the OS volume fully encrypted with protection on.
Seven retained scripts implement read-only tenant, user, group, licensing, role, stale-account, and Intune inventory. A new delegated Microsoft Graph JSON user-export application adds authentication guards and eight locally passing Pester tests. Source and tests are public; tenant exports are not.
The VMM screenshot shows HVHOST01 with host status OK and one VM. The retained Proxmox restore summary documents one isolated Linux01 restore drill.
The WS01 inventory summary records a successful secure channel, domain membership, DHCP, and DNS configuration. It supports the captured client state, rather than a broad firewall or network-security claim.
The retained Arc summary records two connected Windows Server machines and one SQL Server 2022 Developer instance. VMM01 local service rereads were limited by rejected credentials.
The PDI project README documents request, requested-item, approval, fulfillment-task, and automatic closure relationships. Physical procurement and deployment were simulated; this is documentary support.
The Linux01 record documents an SSSD socket/responder correction and successful post-remediation identity lookup and AD-authenticated SSH.
The validation matrix separates APNs and Intune policy objects from simulated ABM/ADE enrollment. Endpoint FileVault escrow, Platform SSO registration, and app installation were not performed on a managed Mac.
