portfolio

Infrastructure and Security Engineer with hands-on experience securing Azure and on-premise environments across an 80+ site estate. Day-to-day: SIEM monitoring, Microsoft Purview (DLP, Sensitivity Labelling, Insider Risk), vulnerability management, firewall hardening and infrastructure automation. Progressed from IT Technician to Infrastructure & Security Engineer in under three years - delivering real security improvements at every step. Eligible for UK Security Clearance.

// core skills

~/.config/skills

CLOUD_PLATFORM = Azure (VMs, Automation, Blob Storage), Conditional Access, Entra ID, Intune, Purview (DLP, Sensitivity, Insider Risk), Defender, Exchange Online

SECURITY_OPERATIONS = SIEM (Defender, SentinelOne), EDR monitoring, Vulnerability management, Monthly pen-test remediation, Impact and risk assessment

INFRASTRUCTURE = Hyper-V, Windows and Linux servers, Multi-site networking, Firewalls, Zabbix monitoring, Acronis/Azure/Barracuda backups

AUTOMATION = PowerShell, Azure Automation, Power Automate, Copilot Studio, RMM scripting

SITE_INFRASTRUCTURE = Wi-Fi and switch deployments, Internet uplinks, VoIP (Myriad, Horizon, LG, Call2Teams), Disaster recovery testing

// experience — git log

Oct 2025 - Present

[INFO]Infrastructure & Security Engineer · Maria Mallaband

Proactive monitoring of infrastructure and security posture across an 80+ site estate. SIEM alert triage tied to EDR (SentinelOne, Defender). Working with the security leadership team on vulnerability remediation from weekly scans and monthly penetration tests. Deployment of Azure and on-prem systems including internal SaaS and Zabbix monitoring. Own Intune configuration and compliance policies. Leading Microsoft Purview implementation for DLP and Information Protection. Conditional Access design. Exchange Online administration including transport rules and anti-malware policies. SharePoint security with dynamic security groups. Power Automate flows with Copilot Studio integrations. Technical product owner for Zabbix, Intune and Purview.

Dec 2024 - Oct 2025

[INFO]IT Systems Engineer · Maria Mallaband

3rd line escalation point and technical lead for new system rollouts. Scoped, tested and implemented new IT systems across the estate. Windows and Linux server monitoring, Hyper-V and Azure VM deployment. Managed Intune configuration and compliance. Administered Exchange, Entra ID and Purview.

Jan 2024 - Dec 2024

[INFO]IT Support Engineer · Maria Mallaband

2nd line escalation and on-site infrastructure delivery across remote sites. Delivered complete network infrastructure for new-build care homes: uplinks, managed switches, Wi-Fi and firewall changes. Disaster recovery testing. VoIP platform configuration.

Jul 2023 - Dec 2023

[INFO]IT Technician · Maria Mallaband

1st line support for head office and 78 care homes. Autopilot and Intune MDM device provisioning. Hardware repair and lifecycle extension.

2019 - Jul 2023

[INFO]Sales & Marketing Executive · Stone Dam Mills

Marketing projects, website development, content management. Built systems, replaced infrastructure and provided technical support - the years that turned a marketing job into an IT career.

// certifications — checklist

CompTIA Security+

earned

MS-102 Microsoft 365 Administrator

earned

MD-102 Microsoft Endpoint Administrator

earned

CompTIA A+

earned

MS-900 Microsoft Fundamentals

earned

UniFi Wireless Admin

earned

UniFi Full Stack Professional

earned

AZ-104 Azure Administrator

booked - August

AZ-140 Azure Virtual Desktop

next

SC-200 Security Operations Analyst

next

// projects & homelab

github.com/lrawnsley — ls -la ~/projects

Certeli

Certification exam simulator with 30K+ questions across 49 exams. Built it to learn how exam prep works from the other side of the table.

CV Human

AI-powered CV builder with ATS optimisation. Next.js, FastAPI, Stripe.

Self-hosted infrastructure

Production VPS estate: Next.js apps, PostgreSQL, CI/CD via GitHub Actions, nginx, Cloudflare, PM2. Intrusion containment experience the homelab didn't plan for.

luke@rawnsley: ~/contact

Open to Infrastructure, Security and Cloud Engineering roles - defence and aerospace especially. Eligible for UK Security Clearance.

[ email me ]
Luke Rawnsley — IT Professional & Portfolio