~/projects

Projects

Infrastructure builds, security implementations, and home lab experiments. All production or near-production configurations.

Azure Zero Trust Lab

Active

Personal Azure tenant configured end-to-end with Zero Trust principles: Named Locations, risk-based Conditional Access policies, PIM just-in-time activation workflows, and Defender for Cloud security posture baseline.

Azure Entra ID Conditional Access PIM Defender for Cloud

Synology Home Lab

Active

Fully automated media and infrastructure stack on Synology DS923+. Docker-compose managed containers, hardware-accelerated HEVC transcoding via VAAPI, 10GbE with jumbo frames, and Git-versioned configuration.

Synology Docker Jellyfin 10GbE VAAPI Networking

M365 Security Hardening Baseline

In Progress

Implementation of the CIS Microsoft 365 Foundations Benchmark across a tenant. Covers Secure Score baselines, legacy auth blocking, MFA enforcement, mailbox auditing, and SharePoint data governance policies.

M365 CIS Benchmark Security Compliance PowerShell