I'm Andrew, a senior identity and security engineer. I make sure the right people can get to the right systems, and nobody else can. Most of my work is in Microsoft Entra ID and Active Directory: sign-in policy, application access, privileged access, and a lot of PowerShell holding it together.
Eighteen-plus years across infrastructure, operations, and security, in transportation, financial services, life sciences, and manufacturing. Most recently a senior security engineer on the enterprise identity team at a Fortune 100 company. Based in Aurora, Illinois, just outside Chicago.
What I'm good at
- Access policy that is strict and livable. Designing Conditional Access with the people who have to work under it, testing it before it ships, and writing down how to roll it back.
- Turning a manual, ticket-driven process into a script that runs the same way every time. Idempotent,
-WhatIf-safe, logged, and boring in the best way. - Explaining identity to people who don't do identity. Directors, auditors, application owners, in their vocabulary and not mine.
Where to look
Projects has the work, each one opening with a plain-English summary. GitHub has the code. Experience has the timeline. About has the rest, in PowerShell help-file format, because some habits are worth keeping.