portfolio

Infrastructure & Security Engineer running a 1,500-endpoint, 78-site Azure/hybrid estate. Day-to-day I look after Intune, Defender, Purview and the SIEM stack; evenings I build cloud, CI/CD and AI security tooling from a homelab and push it to GitHub.

core skills

Cloud & Infrastructure

AzureHyper-VWindows ServerLinuxTCP/IPFirewallsVPN/WireGuard

Endpoint & Identity

Microsoft IntuneEntra IDAutopilotExchange AdminMDM Compliance

Security & Monitoring

Microsoft DefenderSentinelOneSIEMPurview DLPWebrootAcronisBarracuda

Automation & Scripting

PowerShellBashAzure AutomationZabbixRMM Automations

DevOps & Cloud Platforms

GitGitHub ActionsCloudflareVercelDockerLinux Hardening

AI & Automation

AI Agent DeploymentLLM Gateway IntegrationPrompt Security Scripting

experience

Infrastructure & Security Engineer

Maria Mallaband Care Group

Oct 2025 - Present

Monitoring, hardening and project work across a 1,500-endpoint, 78-site Azure/hybrid estate. Run the SIEM stack (Sentinel One, Webroot, Microsoft Defender) and handle alert triage and incident response. Lead monthly vulnerability remediation cycles from pen test findings. Own Intune config profiles, compliance policies and Conditional Access design. Leading Microsoft Purview rollout for DLP and Information Protection.

IT Systems Engineer

Maria Mallaband Care Group

Dec 2024 - Oct 2025

3rd-line escalation point and project lead for new system rollouts. Scoped, tested and rolled out new infrastructure and SaaS platforms. Ran Exchange, Entra ID, Intune and Purview admin across the full estate. Moved additional workloads onto Azure and Hyper-V.

IT Support Engineer

Maria Mallaband Care Group

Jan 2024 - Dec 2024

2nd-line escalation and on-site infrastructure delivery. Delivered network infrastructure upgrades, internet uplinks, managed switches and firewall changes across 78 remote care home sites. Led full networking deployments to new-build care homes. Ran disaster recovery tests for business-critical systems.

IT Technician

Maria Mallaband Care Group

Jul 2023 - Dec 2024

1st-line IT support across head office and 78 care home sites. Provisioned and configured PCs, laptops, tablets and smartphones via Autopilot and Intune MDM. Repaired and repurposed hardware to extend asset lifecycle.

Sales & Marketing Executive

Stone Dam Mills

2019 - Jul 2023

Owned marketing, social media, website content and the electronic purchase ordering system. Maintained all office IT systems and printers; built and optimised workstations.

certifications

CompTIA Security+

Earned

CompTIA A+

Earned

MS-102 Microsoft 365 Administrator

Earned

MD-102 Microsoft Endpoint Administrator

Earned

MS-900 Microsoft 365 Fundamentals

Earned

UniFi Wireless Admin

Earned

UniFi Full Stack Professional

Earned

AZ-104 Azure Administrator

In Progress

AZ-140 Azure Virtual Desktop Specialty

In Progress

AWS Cloud Practitioner (CLF-C02)

In Progress

projects & homelab

github.com/lrawnsley

Hermes Agent (Python) - AI Agent Platform

Contributed to an open-source AI agent framework supporting 200+ LLM providers, multi-platform messaging gateways, scheduled automations, and isolated subagent delegation. Ships with CLI/TUI, FTS5 session search, and seven deployment backends.

BlueTeam Toolkit (Bash) - Defensive Security Toolkit

CLI-first, zero-cost defensive security toolkit covering system auditing, local network recon, vulnerability scanning, DNS security checks and Linux/macOS hardening. Designed for cron and AI-agent-driven security workflows.

Homelab - AI Agent Staging & Secure Remote Ops

2-node homelab (Mac mini M-series + Dell Optiplex) running Linux server workloads. Mac mini serves as AI agent staging server. WireGuard VPN for remote SSH access. Cloudflare for DNS and edge protection. GitHub Actions for CI/CD on personal projects.

get in touch

Looking for junior cloud, infrastructure or DevOps opportunities.

email me →