8+ years across MSSP operations, enterprise infrastructure, and threat engineering.
Microsoft · CrowdStrike · FortiGate · Zero Trust ecosystems.
Senior Security & System Engineer with 8+ years in cybersecurity, enterprise infrastructure, and network security. Currently operating as a Security Engineer at an Australian MSSP (Subnet), delivering threat detection and endpoint defence across a portfolio of ~50 managed enterprise tenants.
Expertise spans EDR/XDR (CrowdStrike, SentinelOne), SIEM (Microsoft Sentinel, KQL), firewalls (FortiGate, SonicWall), Zero Trust architecture, vulnerability management (Nessus TVM), and identity security (Microsoft Entra ID, Conditional Access).
Strong hands-on background with Windows Server, Active Directory, VMware ESXi, Microsoft Dynamics NAV/BC, and hybrid backup & disaster recovery. Skilled in networking (Cisco, Meraki, Ruckus) and infrastructure automation (Terraform, Ansible). Pursuing an Executive MSc in Information Security.
Replaced aging Dell T110 II legacy hardware with virtualised Dell R440 hosts running VMware ESXi 7. Upgraded MS Dynamics NAV (Server 2019→2022), Active Directory (2008R2→2016), and implemented SonicWall SSL-VPN with LDAP integration and Nakivo/QSAN NAS disaster recovery.
Migrated from legacy ESET on-prem to SentinelOne EDR/XDR with autonomous threat response and ransomware rollback. Upgraded SonicWall TZ-300 to TZ-370 for improved DPI throughput. Hardened SSL-VPN for least-privilege remote access.
Designed and deployed LAN-to-LAN IPsec tunnel between SonicWall TZ370 (HQ) and TZ270 (Branch) using IKEv2. Applied strict firewall policies and AES-256 encryption with static routing for seamless inter-office resource access.
Project supervisor for large-scale IT infrastructure deployment: end-to-end installation of structured networking, fiber optics, VLAN switching, and physical security systems across a multi-zone smart home environment.
Full-stack gamified web app to train employees on phishing and password security. Features live leaderboards, scenario-based challenges, JWT auth, and PostgreSQL persistence. Deployed to Vercel.
Custom internal platform built on Google AppSheet centralising asset lifecycle tracking, incident reporting, automated governance workflows, and PDF report generation for IT compliance.
Comprehensive AppSheet CRM digitising field sales operations with retailer geo-mapping, distributor network tracking, role-based access, and real-time order management bridging reps and management.
Windows Batch scripts enforcing 3-2-1 backup rule: auto-identifies latest Dynamics NAV SQL .bak artifacts, encrypts via WinRAR (AES), and distributes to NAS, portable HDD, and OneDrive. Includes connectivity checks, error handling, and timestamped audit logs.
Personal R&D lab and consultancy bridging complex engineering problems with practical low-code automation solutions. Focus on SaaS development, AI integration, and Google Cloud stack delivery.