Identity and access management. MSc Cyber Security and Forensic IT, University of Portsmouth.
Most cells in an access matrix should be empty. The interesting work is proving that the ones that aren't belong there, which is where I've chosen to specialise after a background in penetration testing and digital forensics.
Identity and Access Management lab: a working identity model in Microsoft Entra ID for a four-department organisation: 25 users, six role profiles, least-privilege access design.
I seeded segregation-of-duties conflicts and privilege accumulation into it deliberately, so the review process has something real to catch rather than clean data confirming itself. PowerShell automates detection of those conflicts across role assignments.
Covers joiner-mover-leaver workflows through access packages, Conditional Access, Privileged Identity Management for just-in-time admin access, and quarterly access reviews. In progress, September-October 2026.
AR-Glasses: real-time speech translation for a wearable heads-up display, across ten languages. Android speech recognition into a Dockerised translation service, framed over Bluetooth SPP to an ESP32 rendering to an OLED over SPI. University-funded final-year project. Kotlin, Android, C++, Docker.
Multi-device forensic investigation: full examination of a Windows computer, Android device and TomTom GPS unit under a simulated criminal investigation. ACPO-compliant: forensic imaging with hash verification, documented chain of custody, deleted file and registry artefact recovery, court-ready reporting. Not published; assessed casework.
Secure network services: Cisco ASA firewall configuration with security levels, NAT and ACLs for segmentation; BIND DNS with forward and reverse zones; Apache on Rocky Linux with HTTPS through OpenSSL and mod_ssl.
| Identity | Microsoft Entra ID, Conditional Access, PIM, entitlement management, RBAC, access reviews, segregation of duties |
| Forensics | FTK, XRY, XAMN, Autopsy, PRTK, Registry Viewer, ACPO methodology |
| Assessment | Nmap, Burp Suite, Wireshark, Kali Linux, Shodan, Censys |
| Build | PowerShell, Bash, Python, Kotlin, Java, C/C++, Docker, Git |
Co-founded ZynCrypt CyberTechnologies Pvt. Ltd. in Kerala with three others during my final undergraduate year — a small registered company running penetration testing engagements and delivering security training. A student venture rather than a large operation, but it taught me how security work actually reaches someone: scoping it, testing, and writing it up so a non-technical reader can act on it.
Microsoft SC-300 exam scheduled for 1 October 2026.