Chinedu K. Asuzu — Cloud Security Engineer
Cloud Security Engineer with hands-on experience across Microsoft Azure and Microsoft 365 — Entra ID, Purview, Defender and Sentinel — automating with Terraform and PowerShell, and expanding into AWS. I'm looking to join a security team where I can protect identities, data and cloud workloads from day one.
My labs connect around a practical Microsoft cloud security model: secure access, defend communication, protect sensitive data, monitor activity and automate repeatable work.
Conditional Access, MFA, FIDO2, PIM and Zero Trust controls for Microsoft 365 access.
Exchange Online and Defender for Office 365 controls for phishing, links and attachments.
Microsoft Purview labels, custom sensitive information types, DLP, retention and audit.
Azure infrastructure, network security, Azure Policy governance and Terraform automation.
Sentinel KQL detections, analytics rules, incident investigation and Splunk SIEM monitoring.
Each project is documented with implementation detail, validation evidence and lessons learned. GitHub holds the technical proof; this site tells the story.
Designed, automated and validated a Microsoft Purview data protection pilot in a shared Microsoft 365 tenant. The lab covers scoped sensitivity labels, a custom employee-ID sensitive information type, tiered DLP from simulation to enforcement, retention, audit investigation and PowerShell scope validation.
View repository →Built identity security controls around Conditional Access, MFA, FIDO2, PIM and Zero Trust principles to protect Microsoft 365 access.
View repository →Configured Microsoft 365 email security controls including Defender for Office 365, anti-phishing protections, Safe Links, Safe Attachments and mailbox security policies.
View repository →Full Microsoft 365 tenant build for a smart-manufacturing startup: domain integration, user provisioning, Exchange Online, Teams Premium, SharePoint, Copilot configuration and structured user acceptance testing.
View repository →
Deployed a Windows Server 2022 domain controller on Azure in a single terraform apply:
VNet, subnet, NSG and static-IP NIC in code, with AD DS install, forest promotion and integrated
DNS automated through a Custom Script Extension, then verified with PowerShell.
Deployed Splunk Enterprise on Azure, ingested Active Directory event logs through the Universal Forwarder, wrote SPL detection queries, built security dashboards and automated brute-force alerting.
View repository →Part 1: built the SOC foundation with Terraform (Windows Server 2025 endpoint, Log Analytics, Azure Monitor Agent, Data Collection Rules). Part 2: wrote three KQL detections mapped to MITRE ATT&CK, turned failed-logon detection into a scheduled analytics rule, investigated the incidents it raised and built a SOC workbook.
Part 1: SOC infrastructure → Part 2: Detection engineering →End-to-end zero-touch Windows deployment: hardware hash registration, Autopilot profiles, OOBE provisioning, MFA enforcement, Windows Hello for Business and device compliance.
View repository →A controlled Purview implementation for a fictional organization inside a shared Microsoft 365 development tenant. Scoped to avoid tenant-wide impact, validated through negative tests and proven with a read-only PowerShell verification script.
The portfolio is organized around capabilities that map directly to Azure, Microsoft 365, security operations and compliance engineering work.
Entra ID, Exchange Online, Teams, SharePoint, OneDrive, Defender for Office 365 and tenant administration.
Sensitivity labels, custom SITs, DLP, retention, Activity Explorer, audit investigation and compliance controls.
Azure networking, subnet segmentation, NSGs, Linux and Windows VMs, Azure Policy and initiatives, RBAC and resource locks.
Terraform provisioning of Azure networking and compute, variables and outputs, sensitive-value handling, plan/apply discipline and VM bootstrapping with Custom Script Extensions.
Microsoft Sentinel KQL detections, analytics rules, MITRE ATT&CK mapping, incident investigation and workbooks; data onboarding with Log Analytics and Data Collection Rules; Splunk SIEM and SPL detections.
PowerShell, Microsoft Graph PowerShell, Azure CLI, Git/GitHub, validation scripts and evidence-led README documentation.
Security and Microsoft certifications that frame how I design, validate and document controls.
Core security operations, threats, architecture, identity and risk management.
Information Security Administrator — Purview labels, DLP, retention and insider risk.
Azure Administrator — identity, governance, storage, compute and networking in Azure.
I'm a Cloud Security Engineer based in the New Jersey / New York area, focused on Azure, Microsoft 365, identity security and data protection, with infrastructure and security controls automated through Terraform and PowerShell. My portfolio is built around practical labs that simulate enterprise problems: controlling access, protecting email, preventing data exposure, validating governance controls and monitoring security activity.
I approach projects with an evidence-first mindset: define the problem, design the control, implement safely, validate the outcome, document the proof and record the lessons learned.
Identity, email, Purview data protection and Azure infrastructure labs, each validated with test cases and documented on GitHub.
Terraform deployments of an Azure domain controller and the Sentinel SOC infrastructure, plus PowerShell build and read-only validation scripts in the Purview lab.
Microsoft Sentinel detection engineering (KQL, analytics rules, incident investigation, workbooks) and Splunk SIEM work — ingestion, SPL detections, dashboards and alerting.
New Jersey Institute of Technology · CompTIA Security+ · Microsoft SC-401 · AZ-104 in progress.
I'm open to roles in cloud security, Microsoft 365 / Purview security, SOC analysis and IT administration in the NJ/NY area. The fastest way to reach me is email.
I usually reply within one business day.