Energy services01
Zero Trust
One Zero Trust design. An entire hybrid estate. — read case study
Bringing identity, access and detection into one coherent Azure security architecture.
7,000 + 900
endpoints and servers under one design
2 min read
Security that
ships with
the product.
I turn enterprise security challenges into architecture that works — for the business, the engineers, and the people who use it.
Architecture. Engineering. Accountable outcomes.
AB / SECURITY ARCHITECTURECLARITY / CRAFT / IMPACT
15+
years in security
7,000
endpoints in one Zero Trust design
900
servers in the same design
100%
of vendor CVEs auto-mapped to Jira
Where I’ve worked
- Energy services
- Private banking
- Government
- Retail banking
- Global IT services
01 / Selected work
Complex challenges.
Practical outcomes.
Six engagements. Different environments.
A consistent focus on making security work.
Energy services02
Vulnerability management
From scattered findings to a continuous programme. — read case study
A vulnerability management programme built from scratch, with compliance KPIs automated in Power BI.
~99%
across compliance metrics
2 min read
Swiss private bank03
Cloud migration
Moving a private bank to Azure, securely. — read case study
Security architecture spanning landing zones, data protection, endpoint detection and encryption.
On-prem → Azure
security across the migration
2 min read
Government · UAE04
Secure SDLC
Making security part of the delivery path. — read case study
Merge and deployment gates, threat modelling and developer training for a government platform.
Merge + deploy
security gates where code moves
2 min read
Retail bank05
AI automation
Release intelligence without the weekly chase. — read case study
An autonomous release tracker on GitHub Actions, replicated across three vendors.
100%
of vendor CVEs mapped to Jira
2 min read
Global IT services06
Audit readiness
Building the team behind audit-ready security. — read case study
Leading security R&D and deployment through ISO 27k, PCI DSS, ISAE 3402 and GDPR audits.
24
people in the security team
2 min read
Client identities are withheld. The work and its outcomes are the story.
02 / The toolbox
The right tools.
A clear purpose.
Technology follows the problem.
These are some of the tools I work with.
- Detect
- Microsoft Sentinel · QRadar · ArcSight · DarkTrace
- Protect
- Defender XDR · CrowdStrike · SentinelOne · Zscaler · Palo Alto
- Identity
- Entra ID · Okta · DUO · PAM: OneIdentity, BeyondTrust, Thycotic
- Data
- Microsoft Purview · Symantec DLP · BitLocker / FileVault
- Exposure
- Qualys VMDR · Tenable · Wiz · SecurityScorecard
- Ship
- GitHub Actions · SonarQube · Fortify · JFrog Xray · OWASP ZAP
- AI era
- Claude Code · MCP · Codex · AI audit (AAIA)
03 / From the notebook
Thinking out loud.
Notes on architecture, assurance and automation.
All writing
Architecture
Zero Trust is a set of decisions.
Automation
The security automation worth owning.
04 / Where I can help
From the big picture
to the pull request.
I work where security strategy meets engineering: shaping a cloud migration, building a Zero Trust architecture, bringing order to vulnerability management, or making assurance part of delivery.
I bring the same approach to each: understand the risk, make the decision clear, and help the team put it into practice.
A little more about me05 / Get in touch
Good security starts
with a conversation.
Have a security challenge, an interesting role, or a different perspective?
I’d like to hear about it.