Broad infrastructure automation and security operations role for a local authority. Deployed and maintain Grafana + LibreNMS dashboards for real-time network observability and SNMP health monitoring. Built an authorised nmap/Zenmap estate mapping programme feeding a live node-status board.

Administered full Microsoft 365 stack: Exchange Online, Entra ID/hybrid AD, Intune (Windows, Android Enterprise, iOS, macOS), Defender, Purview DLP, and Priva for SAR/FOI compliance. Implemented hardened DMARC/DKIM mail flow and Conditional Access with MFA enforcement and TAP on-boarding.

Deployed Wazuh SIEM for security event visibility; developed a cyber risk register with automated RAG scoring aligned to NCSC CAF, ISO 27001, and NIST CSF. Secured democratic election infrastructure. Responded to phishing incidents and triaged Defender alerts.

Automated Entra ID/Intune group assignments via Microsoft Graph PowerShell. Wrote Python and PowerShell scripts for bulk AD operations, PST-to-MBOX migration, Power BI dashboards, and CSV/XLSX data pipelines. Code-signed scripts via internal AD CS CA for Intune deployment.

Engineered and secured medical edge devices for clinical environments (HeartRhythmIreland). Built hardened custom RHEL images with podman-bootc; deployed Wazuh Cloud SIEM/XDR for real-time monitoring and incident response across distributed infrastructure.

Architected secure GitHub Actions CI/CD runners with mandatory branch protections and IBM Container Registry secrets management. Deployed OpenBAO with AppRole auth, short-lived token TTLs, and immutable audit logging. Implemented Vault Agent templating to surface secrets at runtime, eliminating hardcoded credentials and env-var exposure.

Delivered secure DevOps automation on a classified defence programme under strict change-control and SLA requirements. Led SDDC automation workstream — Ansible-driven full lifecycle provisioning and teardown of VMware ESXi environments, reducing build time from days to hours.

Architected enterprise secrets management with HashiCorp Vault/OpenBAO: AppRole auth, short-lived TTLs, Vault Agent sidecar injection into Docker microservices, namespace isolation, and immutable audit backends. Mentored junior and client engineers; ran policy design workshops and code reviews.

Wrote pytest suites embedded in Bitbucket CI/CD. Integrated Ansible with iDRAC for bare-metal provisioning. Applied shift-left security gates and OS hardening playbooks across Windows/Linux.

IT and cybersecurity support across distributed civil engineering sites. Liaised directly with the Managing Director on risk mitigation, network troubleshooting, and endpoint security advice.

Conducted forensic examination and retrieval of evidence from computers, mobile devices, and digital media as part of live criminal investigations. Produced evidential reports for law enforcement and legal teams, ensuring chain of custody and court admissibility.

Proficient with Cellebrite UFED and Physical Analyzer, GrayKey (full-filesystem iOS/Android extraction), Passware Kit Forensic for encrypted evidence recovery, and EnCase / FTK / Autopsy / X-Ways / Oxygen Forensic Suite. Contributed to development of in-house forensic tooling and plug-ins.