Security Operations · IAM · Endpoint Security

Security built on
operational experience.

I secure enterprise identities, endpoints, and access—then validate the work through audits, investigations, and hands-on labs.

3+ yearsEnterprise IT and security

Current roleIT Technician · Ducommun Inc.

Open toCybersecurity roles

01 / EXPERIENCE

Professional
experience.

Enterprise identity, endpoint security, access, compliance, and IT operations.

2025 — PRESENTST. CROIX FALLS, WI

Ducommun Inc.

IT Technician

Supporting enterprise identity, endpoint security, access controls, and compliance operations.

01

Identity & accessActive Directory, Okta, Microsoft 365, MFA, YubiKey, and privileged access.

02

Security toolingCrowdStrike Falcon, Tanium, Zscaler, Varonis, and BitLocker posture.

03

Audit readinessMonthly SOX reviews plus NIST/CMMC evidence and remediation support.

2023 — 2025MINNEAPOLIS, MN

North House

IT Manager

Owned day-to-day IT operations, account access, device deployment, and technical support for a growing creative organization.

01

Accounts & accessManaged onboarding, offboarding, user accounts, permissions, and access across business SaaS platforms.

02

Endpoint operationsConfigured and deployed Windows and macOS devices, applications, and employee workstations.

03

Support & trainingResolved hardware, software, and connectivity issues while helping users work more securely and efficiently.

OPERATIONAL COVERAGE

Security OperationsIdentity & AccessVulnerability ManagementEndpoint SecurityGovernance & Compliance

02 / PROJECTS

Hands-on
security projects.

Documented labs covering detection, vulnerability management, identity, and DNS security.

Wazuh SIEM dashboard from Samson's homelabOpen write-up ↗

DETECTION / 01

Wazuh SIEM Homelab

Monitored Windows and Linux endpoints and investigated alerts, file changes, vulnerabilities, and ATT&CK mappings.

  • Wazuh
  • FIM
  • MITRE ATT&CK
Nessus scan configuration from Samson's labOpen write-up ↗

EXPOSURE / 02

Nessus Vulnerability Lab

Ran credentialed Windows scans, analyzed findings by severity, and prioritized remediation by risk.

  • Nessus
  • Windows 11
  • Remediation
Active Directory lab virtual machinesOpen write-up ↗

IDENTITY / 03

Active Directory Lab

Built a Windows Server domain with DNS, domain authentication, Group Policy, and role-based access.

  • AD DS
  • Hyper-V
  • Group Policy
Pi-hole DNS dashboard from Samson's labOpen write-up ↗

NETWORK / 04

Pi-hole DNS Filtering

Deployed centralized DNS filtering and analyzed query activity, blocklists, and network-level controls.

  • Pi-hole
  • DNS
  • Query Analysis

03 / CREDENTIALS

Certifications &
current study.

Verified CompTIA credentials with Cisco CCNA study in progress.

04 / PROFILE

Technical work.
Clearly communicated.

My background spans IT support, infrastructure, identity, endpoint administration, and security operations. I reinforce that work through labs, certifications, and concise technical documentation.

TECHNICAL CONTENT & COMMUNITY

@securitywithsam

23K+followers across Instagram and Facebook in under two months

Practical cybersecurity guidance, IT education, and project documentation.