Every repository, grouped by what it builds.
Work tells the story of a few projects. This is the whole shelf: each public repository, in the project it belongs to, with the language it is written in and when it last moved.
- Repositories
- 26
- Projects
- 7
- With a case study
- 11
- Languages
- 5
Biira Bank, the enterprise lab
One fictional bank, built for real: a segmented network with a SIEM and a scanner, hybrid identity across AD, Okta and Entra, AI agents with their own identities, and the bank's public website.
enterprise-security-homelab
The bank's network: Proxmox, pfSense with six VLANs, Active Directory, Wazuh, Greenbone, an enterprise CA and Keycloak, with a runbook for every step.
enterprise-iam-lab
Hybrid identity for the bank: a tiered Active Directory federated to Okta and Entra ID over SAML and OIDC, with network-aware conditional access.
ai-agent-identity-lab
AI agents as non-human identities: their own accounts, least privilege proven by 403s, secrets filtered before anything leaves the network.
biirabank-web
The bank's public site on Cloudflare, hardened header by header from an F to an A+.
Cloud security on AWS
Posture, exposure, cost and incident response in AWS: scanners turned into dashboards, findings turned into fixes, and credentials that can be revoked in a hurry.
cloud-security-posture-dashboard
Prowler and ScoutSuite findings across clouds, gathered into one dashboard and mapped to CIS, NIST and PCI, with remediation as code.
aws-security-posture-exposure-mgmt
Security Hub, Inspector and GuardDuty with automated response: exposure analysis, compliance monitoring and remediation playbooks.
aws-security-role-invalidation
Revoking IAM role sessions after a credential leak, demonstrated end to end with CloudFormation.
cloudguard-ai
AI-assisted threat detection over AWS logs.
aws-cost-optimizer
A Python CLI that finds idle EC2, unattached EBS, stale snapshots, unused Elastic IPs and idle RDS before they cost money.
cloud-resume-challenge
The Cloud Resume Challenge, stage by stage: a React front end first, then S3 and CloudFront, a serverless counter, infrastructure as code and CI/CD.
aws-wordpress-arch-evolution
WordPress grown from one EC2 instance into an elastic, self-healing design with RDS, EFS, Auto Scaling and an ALB.
aws_projects
EarlierSmaller AWS builds, one service at a time.
Azure, built twice
AZ-104 labs, each built by hand in the portal and then again as Bicep, with predictions written down first and something broken on purpose.
azure-labs
Twenty labs: governance and policy, storage tiers, networking, identity, backup, monitoring and a full environment from one template.
azure
EarlierThe first Azure notes, kept for the record.
Identity and access
Single sign-on, provisioning and the logs that show who signed in where, plus a tool that watches the IAM job market.
okta-security-monitoring-dashboard
Okta authentication logs analysed for failed sign-ins, MFA patterns and signs of attack.
onelogin-enterprise-sso-configuration
OneLogin SSO for enterprise applications, with automated provisioning.
onelogin-sso-integration
The provisioning backend: OneLogin API integration, bulk user operations and admin workflows.
iam-job-scout
An automated job board for junior to mid-level IAM roles across the USA.
Assessments and audit
Security programmes judged from the outside: findings, frameworks and remediation plans written for the people who have to act on them.
collins-aerospace-audit
A post-incident IT audit: five critical findings, a CMMC Level 3 gap analysis and a remediation plan.
cyberdyne-security-assessment
A defence-in-depth assessment and strategy for a 400-person manufacturer.
Forensics and graduate study
Digital evidence, packet analysis and the law around both, from the M.S. in Cybersecurity and Digital Forensics at Illinois Tech and the study around it.
digital-evidence-itms583
Digital Evidence (ITMS 583): acquisition, analysis and reporting, spring 2026.
cyber_forensics
Hands-on forensics projects across platforms and devices.
Legal-and-Ethical-Issues-in-IT-ITMM-585-
Legal and ethical issues in IT (ITMM 585).
road-to-wireshark
EarlierPacket analysis with Wireshark, worked through capture by capture.
Automation and AI engineering
The tooling underneath the labs: configuration management, and how large language model applications are built and broken.
llm-engineering
The AI Engineer core track: prompts, retrieval, tools and agents, notebook by notebook.
ansible-tutorial
Ansible from first playbook up, on a Vagrant and VirtualBox lab.