About

I’ve spent over a decade in the parts of enterprise IT where things quietly go wrong: the seams between on-premises and cloud, the permissions nobody cleaned up, the identity plumbing everyone assumes someone else is watching, and the dashboards everyone trusts until the numbers stop adding up. Security engineering, hybrid cloud and large-scale infrastructure delivery, mostly in environments where getting it wrong is expensive enough that you learn to be careful.

This site is where I write about that work. Nothing clever, nothing that only makes sense in a slide deck: just the controls that hold up under pressure, the detections you can read and defend at 2am, and the unglamorous discipline that separates a system you understand from one you’re hoping is fine. I write it the way I’d explain it to a colleague who already knows the field, because that’s the only version worth reading.

Everything here stays generic and educational. No specific employer, tenant or real incident, and nothing confidential. The point is to be useful to whoever’s dealing with the same problem right now.

Ongoing series

• Defensive DAX: the habits that stop Power BI reports quietly breaking
• Entra Identity: Conditional Access, break-glass accounts, and hardening identity without locking yourself out
• Hugo on Cloudflare: building this site from an empty folder to a hardened site that publishes itself
• KQL Hunting: building real Sentinel detections one line at a time, from a first query through password spray and MFA fatigue, with impossible travel next
• Security Copilot: the setup, permissions and capacity side the marketing skips

Alongside the writing, I package some of it into things you can use straight away: a KQL detection pack and a hands-on hunting lab for Sentinel, and a starter kit for the Hugo and Cloudflare setup this site runs on. The posts always teach the technique for free; the products just save you the typing.

This site is the home for everything. The same posts syndicate to Medium and Dev.to, and you can follow along on Bluesky or connect on LinkedIn.

How this site handles your information is on the privacy page.