SCROLL
// Welcome to My Portfolio!

Oluwatosin
Lamodi

Hey, I'm Tosin — an Azure Cloud Security Engineer with 3+ years supporting the design, assessment, and implementation of secure Azure environments for enterprise organizations. I specialize in Microsoft Sentinel, IAM, Defender for Cloud, and cloud automation using PowerShell, Python, and Terraform. Take a look around and see what I've built.

Available for new opportunities · Atlanta, GA · U.S. Citizen
Oluwatosin Lamodi
Azure Cloud Security + Microsoft Sentinel + KQL & Log Analytics + Defender for Cloud + Identity & Access Management + PowerShell & Terraform + NIST 800-53 / ISO 27001 + Cloud Migration & Security Posture + CI/CD & DevOps Pipelines + Docker & Containerization + Azure Cloud Security + Microsoft Sentinel + KQL & Log Analytics + Defender for Cloud + Identity & Access Management + PowerShell & Terraform + NIST 800-53 / ISO 27001 + Cloud Migration & Security Posture +
About
HOW I GOT HERE
& WHERE I'M GOING.
"Security isn't a checkbox — it's an engineering discipline. I build systems that stay secure at scale."

I'm Oluwatosin Lamodi — an Azure Cloud Security Engineer based in Atlanta, GA. I bring 3+ years of production experience supporting secure Azure environments for enterprise organizations, with deep hands-on work in Microsoft Sentinel, Defender for Cloud, KQL-based threat detection, and cloud security posture assessment.

My approach combines technical depth with clear communication — translating complex security findings into actionable recommendations for both technical teams and non-technical stakeholders. I've supported cloud readiness assessments, Azure Monitor and Log Analytics optimization, and identity hardening using Entra ID Conditional Access and RBAC.

I hold the AZ-104 Azure Administrator, CompTIA Security+, AWS Cloud Practitioner, ITIL Foundation, and Splunk Core Certified User certifications. In my home lab I run live Sentinel detection engineering, Terraform IaC deployments, and CIS Benchmark assessments — mirroring real client-facing deliverables.

6+Certifications
3+Years Experience
200+Users Supported
40%Manual Work Reduced
Experience
Mar 2025
— May 2026
Tiatra — Atlanta, GA
IT Systems Operations Specialist
  • Supported design, assessment, and implementation of secure Azure cloud capabilities for a 200+ user enterprise environment, reviewing Azure configurations to identify security and operational gaps and support remediation planning.
  • Operated Microsoft Sentinel in production — data connector onboarding, validation, Log Analytics workspace analysis, writing KQL queries for log analysis, alert validation, ingestion review, and security investigation.
  • Administered Microsoft Defender for Cloud and Azure Policy to improve cloud security posture, remediating misconfigurations across compute, storage, and identity resources.
  • Configured secure Azure networking patterns including Key Vault, NSGs, Azure Firewall, private endpoints, and managed identities supporting privileged access workflow improvements.
  • Supported Azure Monitor and Log Analytics operational reporting and diagnostic setting review, identifying duplicate connectors and high-volume tables to improve cost-conscious logging efficiency.
  • Administered Entra ID including RBAC, Conditional Access, and MFA, enforcing least-privilege principles across cloud and hybrid infrastructure.
  • Translated technical findings into clear recommendations for technical and non-technical stakeholders, working directly with application owners and infrastructure teams.
  • Developed PowerShell, Python, and Terraform automation for provisioning, compliance reporting, and log analysis — reducing manual workload by approximately 40%.
01
Nov 2024
— Feb 2025
Cox Enterprises — Atlanta, GA
Cybersecurity Analyst
  • Monitored security events using Microsoft Sentinel and Palo Alto Panorama, investigating threats across cloud and on-premises environments with structured incident response documentation.
  • Performed vulnerability assessments using Tenable and Qualys, producing prioritized remediation reports aligned with compliance frameworks.
  • Administered CyberArk PAM privileged access controls, contributing to a 15% reduction in privileged account onboarding time through workflow optimization.
02
Jan 2023
— Oct 2024
International Tech Solutions — Atlanta, GA
Cloud Support Engineer
  • Supported cloud security operations across Microsoft Azure for ~150 users, managing RBAC, Conditional Access, and MFA while monitoring for anomalies and misconfigurations.
  • Assisted with cloud security architecture reviews, evaluating configurations against best practices and contributing remediation documentation.
03
Aug 2022
— Sep 2023
TK Elevator — Atlanta, GA
GRC Analyst (Internship)
  • Assessed IT security controls against NIST 800-53 and ISO 27001 Annex A frameworks across 30+ controls in a regulated enterprise environment.
  • Contributed to compliance documentation and remediation prioritization.
04
Projects
FROM SCRIPTS
TO FULL PIPELINES.
DevOpsCI/CDDockerAWS
• 2025 — Present
Cloud DevOps
Platform Lab
Built an enterprise-grade cloud platform lab simulating a real DevOps engineering environment. Provisioned reusable AWS infrastructure modules using Terraform, built end-to-end CI/CD pipelines with GitLab CI, containerized applications using Docker, and implemented monitoring and alerting using CloudWatch and AWS SNS. Practiced disaster recovery workflows including backup validation, failover testing, and RTO/RPO documentation — mirroring production Cloud Common Platform responsibilities.
Terraform AWS GitLab CI/CD Docker CloudFormation CloudWatch IAM
# GitLab CI/CD Pipeline
stages: [validate, plan, apply, test]

$ terraform init && terraform validate
✓ Configuration is valid
$ terraform plan -out=tfplan
✓ Plan: 18 to add, 0 to change

$ docker build -t platform-api:v1.2 .
✓ Image built & pushed to ECR
$ aws ecs deploy --cluster prod
✓ Deployment successful. 0 errors.
SecuritySentinelIaC
• 2025 — Present
Azure Cloud Security
& Sentinel Lab
Provisioned multi-tier Azure infrastructure via Terraform (VNets, NSGs, Key Vault, VMs), evaluated configurations against CIS Benchmarks, and produced remediation documentation mirroring client-facing assessment deliverables. Deployed Microsoft Sentinel with data connector onboarding, developed KQL queries for threat detection, alert validation, and practiced ingestion cost optimization workflows.
TerraformMicrosoft SentinelKQLAzureCIS Benchmarks
$ kql > SecurityEvent
| where EventID == 4625
| summarize FailedLogins=count() by Account
| where FailedLogins > 10
| order by FailedLogins desc

✓ Alert triggered: Brute force detected
✓ Incident created in Sentinel workspace
AutomationIAM
• 2025
PowerShell & Terraform
Automation Suite
Developed PowerShell, Python, and Terraform automation for AD provisioning, compliance reporting, and log analysis. Configured Entra ID RBAC and Conditional Access policies mirroring production IAM responsibilities. Reduced manual operational workload by ~40% across a 200+ endpoint environment.
PowerShellPythonTerraformEntra IDAzure CLI
PS> .\Provision-ADUsers.ps1 -CSV users.csv
Processing 47 accounts...
[OK] jsmith@corp.local — provisioned
[OK] adoe@corp.local — provisioned
...
Complete. 47/47 accounts provisioned.
Compliance report exported to ./reports/
IaCSecurity Assessment
• 2025
Azure Infrastructure
& CIS Assessment
Provisioned and administered multi-tier Azure infrastructure using Terraform, evaluated configurations against CIS Benchmarks and NIST 800-53, and documented findings in client-ready remediation reports. Practiced secure networking patterns including Key Vault, private endpoints, and NSG configurations.
TerraformAzureNIST 800-53CIS BenchmarksKey Vault
$ terraform plan -out=tfplan
Plan: 14 to add, 0 to change, 0 to destroy.
✓ VNet + NSGs configured
✓ Key Vault with private endpoint
✓ Managed identity assigned

$ python3 cis_assessment.py
CIS Score: 87/100 — Report exported
Tools I Use
☁️
Azure
🛡️
Sentinel
🔎
Defender for Cloud
📊
Log Analytics
🔒
Entra ID
💻
PowerShell
🏭
Terraform
🐍
Python
🔐
CyberArk
🔍
Palo Alto
📈
Tenable
📋
Qualys
📄
ServiceNow
🚀
AWS
⚙️
Intune
📨
Exchange Online
🐧
Linux
📝
Splunk
📹
Docker
🔧
GitLab CI/CD
⚖️
CloudWatch
🛠️
CloudFormation
My Certifications
AZ-104
Azure Administrator Associate
Microsoft · AZ-104
Security+
CompTIA Security+
CompTIA
ITIL
ITIL Foundation
AXELOS / PeopleCert
AWS CCP
AWS Cloud Practitioner
Amazon Web Services
AZ-900
Azure Fundamentals
Microsoft · AZ-900
📊
Splunk Core Certified User
Splunk

It means a lot that you took the time to go through my work. Whether you're a hiring manager, a fellow engineer, or just someone curious about cloud security — I genuinely appreciate your time. If anything here resonates, I'd love to connect.

OL
Oluwatosin Lamodi
Azure Cloud Security Engineer Cloud DevOps & Platform Engineering Atlanta, GA