Topics

This blog explores cloud security through the lens of resilience: building systems that survive when (not if) things go wrong.

These are areas I write about or plan to cover. The tool lists describe my work; the blog and labs catalogs show the articles and projects currently published.

Identity & Access

The new perimeter. MFA, Conditional Access, Privileged Access Management, and why “who are you and should you be here?” is the most important question in modern security.

Tools I work with: Entra ID, AWS IAM Identity Center, PIM, Conditional Access

Cloud Architecture

Multi-cloud security across Azure and AWS. Network segmentation, landing zones, and keeping your blast radius small when something inevitably breaks.

Tools I work with: Azure Virtual WAN, Transit Gateway, Security Groups, NSGs

Data Protection

Classification, encryption, key management, and DLP. Because everything else exists to protect the data.

Tools I work with: Purview, Macie, Key Vault, KMS

DevSecOps

Shift-left security that developers don’t hate. Pipeline security, container scanning, infrastructure as code, and catching problems before they hit production.

Tools I work with: GitHub Advanced Security, Terraform, Checkov, Trivy

Threat Detection & Response

SIEM, XDR, threat hunting, and writing KQL queries that actually find things. Turning noise into signal.

Tools I work with: Sentinel, Defender XDR, GuardDuty, Security Hub

Resilience & Recovery

Planned coverage: backups, disaster recovery, incident response, and practical RTO/RPO tradeoffs. Dedicated recovery walkthroughs are not yet part of the published catalog.

The Human Element

Planned coverage: security awareness, culture, and training. Dedicated awareness and training articles are not yet part of the published catalog.

The Philosophy

I don’t believe in perfect security. It doesn’t exist. I believe in:

• Assuming breach: Planning for what happens after prevention fails
• Verifying continuously: Never trust, always verify, log everything
• Limiting blast radius: When something breaks, keeping it contained
• Recovering fast: Resilience beats perfection

That’s what “Nine Lives” means. Systems get knocked off the ledge. The question is whether you’ve built them to land on their feet.

Looking for something specific? Check out the blog or reach out. I’m always happy to talk shop.