IAM • ENTRA ID • AZURE • CLOUD SECURITY

John Calvin
Tyler.

IT and cybersecurity professional specializing in Microsoft Entra ID, identity and access management, and Azure cloud administration.

Combining professional IT support experience with hands-on expertise in Conditional Access, privileged identity management, Azure RBAC, Microsoft Graph PowerShell, and security automation.

John Tyler in a navy suit at a modern building entrance
John Tyler in formal attire beside historic architecture

ABOUT

Built on IT experience. Focused on cloud security.

I’m an IT and cybersecurity professional with experience in technical support, identity lifecycle administration, access control, and Microsoft 365 environments. My background combines hands-on troubleshooting, identity operations, and a strong foundation in enterprise IT systems.

From 2021 to 2023, I supported physical identity and access management operations at VIP Access Management, including credential administration, access authorization, and audit documentation. At Oatridge Security Group (2023–2026), I supported Windows endpoints, Microsoft 365 users, Active Directory and Entra ID account operations, MFA troubleshooting, and incident resolution using ServiceNow and PowerShell.

My current technical focus is Microsoft Entra ID, Azure administration, identity governance, and security automation. Through independent enterprise-style labs and GitHub projects, I implement and validate Conditional Access policies, phishing-resistant MFA, PIM/JIT access, Azure RBAC, Microsoft Graph integrations, and KQL-based security monitoring. These projects demonstrate practical security administration, troubleshooting, and automation skills.

3+ Years
Professional IT support experience
Azure / Entra
Cloud identity and access governance labs
A+ / Security+
CompTIA certifications
A.S. CIS
Computer Information Systems

PROFESSIONAL CERTIFICATIONS

Current, verifiable credentials.

Open CompTIA’s official verification page, then enter John Calvin Tyler and the verification code shown on the credential.

CompTIA Security+ Certified badge

CompTIA Security+ ce

Valid through August 31, 2029

Issued August 31, 2026 · John Calvin Tyler

561761119d6a4f25b92bf9ea30f18233Verify with CompTIA
CompTIA A+ Certified badge

CompTIA A+ ce

Valid through August 31, 2029

Issued June 17, 2026 · John Calvin Tyler

9dfdc8ff493643b8a3786c8cafcb9552Verify with CompTIA

EXPERTISE

Technical expertise across identity, cloud, and IT.

Professional IT support experience reinforced by hands-on cloud administration, identity governance, security monitoring, and technical automation projects.

Identity & Access Management

Microsoft Entra ID, Active Directory, user lifecycle management, RBAC, Conditional Access, MFA, PIM/JIT, SAML SSO, SCIM provisioning, and identity governance.

Azure & Cloud Administration

Azure resource management, subscriptions, resource groups, Azure RBAC, virtual machines, networking, Azure Policy, and cloud security configuration.

Windows & Systems Administration

Windows 10/11, Windows Server labs, Active Directory, Group Policy, Microsoft 365 administration, endpoint troubleshooting, and system diagnostics.

Security Operations & Monitoring

Microsoft Entra sign-in logs, Log Analytics, KQL queries, security alerting, Splunk workflows, access auditing, and incident investigation.

PowerShell & Automation

PowerShell scripting, Microsoft Graph PowerShell, Azure CLI, identity administration, automated reporting, and repeatable operational workflows.

Networking & Infrastructure

TCP/IP, DNS, DHCP, VPN troubleshooting, routing fundamentals, network diagnostics, connectivity analysis, and infrastructure monitoring.

IT Support & Service Management

Tier 1/2 technical support, ServiceNow incident management, Microsoft 365 troubleshooting, account provisioning, MFA support, escalation, and documentation.

Security Engineering Projects

Building identity governance dashboards, Entra-integrated applications, cloud security tools, monitoring solutions, and automation workflows using modern development platforms.

FEATURED PROJECTS

Work that demonstrates the work.

Hands-on projects in cloud engineering, identity and access management, cybersecurity, systems administration, and automation—documented through labs, tools, and technical walkthroughs.

Showing all 18 projects

Azure & Entra Labs

Cloud infrastructure, Entra identity governance, access lifecycle, and repeatable Azure delivery.

ZERO TRUST & PRIVILEGED ACCESS

Microsoft Entra Conditional Access + PIM JIT Governance Lab

Problem
Reduce standing Contributor access in an Entra ID and Azure lab.
Implemented
Scoped MFA Conditional Access with a break-glass exclusion; PIM eligibility with two-hour JIT activation, MFA, justification, and ticket requirements.
Validated
Checked sign-in logs, PIM activation, Azure RBAC behavior, and Azure Monitor Activity Logs.
Conditional AccessMicrosoft Entra IDPIMJIT AccessAzure RBACZero Trust

AZURE IDENTITY GOVERNANCE

Azure Tenant Governance Dashboard

Problem
Review identity posture and access in a live Entra tenant without switching between portals.
Implemented
Connected a read-only browser dashboard to a live Microsoft Entra tenant with MSAL, then queried Microsoft Graph and Azure Resource Manager for users, groups, MFA posture, Entra roles, Azure RBAC assignments, governance findings, and recent sign-in activity.
Validated
Reviewed the generated findings and least-privilege recommendations against live tenant data.
Microsoft Entra IDMicrosoft GraphAzure RBACMFA PostureIdentity GovernanceLeast Privilege

AZURE IDENTITY & ACCESS LIFECYCLE

Azure MFA RBAC Lifecycle Administration

Problem
Verify least-privilege access through assignment and revocation.
Implemented
Configured MFA, security-group membership, and resource-group Azure RBAC.
Validated
Tested access before and after role revocation.
Microsoft Entra IDAzure RBACMFAIAMIdentity LifecycleLeast Privilege

AZURE CLOUD ADMINISTRATION

Azure Enterprise Administration Lab

Problem
Practice governed Azure infrastructure in an enterprise-style lab.
Implemented
Configured VNets, NSGs, group-based RBAC, Azure Policy, resource locks, cost controls, alerts, and Windows Server.
Validated
Used PowerShell to validate the lab configuration.
Microsoft AzureNetwork SecurityRBAC & IAMAzure PolicyAzure MonitorWindows Server

CLOUD IDENTITY AUTOMATION

Microsoft Entra ID Administration with PowerShell & Microsoft Graph

Problem
Make cloud identity administration repeatable.
Implemented
Used Microsoft Graph PowerShell to enumerate users, groups, and privileged roles.
Validated
Verified delegated OAuth scopes and RBAC assignments, then terminated the administrative session.
Microsoft Entra IDMicrosoft GraphPowerShellIAMRBACOAuthCloud Identity

AZURE CLOUD DELIVERY & CI/CD

Azure Static Web Apps CI/CD Lab

Problem
Create a repeatable cloud deployment workflow for two cybersecurity apps.
Implemented
Deployed Security+ Command Center and PhishLens using Azure Static Web Apps and GitHub Actions with deployment-token authorization.
Validated
Documented deployment and verification procedures with a linked walkthrough.
Microsoft AzureStatic Web AppsGitHub ActionsCI/CDCloud Deployment

AZURE CLI RESOURCE LIFECYCLE

Azure CLI Resource Group Lifecycle Lab

Problem
Practice the full lifecycle of an Azure resource group safely in Cloud Shell.
Implemented
Created a resource group with Azure CLI, verified its properties, then removed it when the lab was complete.
Validated
Confirmed the resource group existed after creation and was gone after deletion.
Microsoft AzureAzure CLIAzure Cloud ShellResource GroupsResource Lifecycle

AZURE PIM JUST-IN-TIME ACCESS

Azure PIM JIT RBAC Activation Lab

Problem
Replace standing Azure access with privilege that is time-bound and auditable.
Implemented
Configured eligible Azure RBAC access and activated a time-limited Reader role through Microsoft Entra PIM.
Validated
Checked activation and audit records to confirm the access window and least-privilege scope.
Microsoft Entra PIMAzure RBACJIT AccessLeast PrivilegeAudit Logs

Cybersecurity

Security monitoring, threat triage, preparedness, and practical cybersecurity learning tools.

SIEM & SECURITY MONITORING

Splunk SOC Security Monitoring Dashboard

Built and configured a Splunk-based SOC monitoring environment using Windows Security Logs and Sysmon telemetry to investigate authentication activity, process execution, PowerShell activity, security events, and potential threat indicators through centralized dashboards and analysis workflows.

Splunk EnterpriseSIEMSysmonWindows SecurityThreat Detection
  • Centralized Windows telemetry

    Windows Security Logs and Sysmon telemetry brought together for investigation.

  • Authentication activity

    Review sign-in activity and authentication-related security events.

  • Process & PowerShell analysis

    Inspect process execution and PowerShell activity for potential threat indicators.

  • SOC monitoring dashboards

    Centralized dashboards support log analysis and security investigation workflows.

POWERSHELL & WINDOWS SECURITY

PowerShell Security Awareness & Endpoint Posture Dashboard

A PowerShell assessment tool that performs 31 read-only Windows security checks and generates an interactive HTML dashboard with endpoint posture scores, prioritized remediation guidance, Windows security event summaries, and security awareness training.

PowerShellWindows SecurityEndpoint HardeningHTML Reporting
  • Read-only security assessment

    Checks Microsoft Defender, Windows Firewall, BitLocker, SMB, logging, and other endpoint controls.

  • Prioritized findings

    Scores security posture and organizes findings with severity, evidence, and remediation recommendations.

  • Windows security signals

    Summarizes failed logons, account lockouts, process creation, and Defender detections.

  • Security awareness

    Includes a user guidance playbook and interactive knowledge check.

LOCAL EMAIL TRIAGE

Phishing Email Detector

PhishLens is a local browser-based tool for inspecting suspicious emails, sender-domain mismatches, URLs, and attachment filenames, with explainable risk signals and evidence reports. An optional PowerShell launcher opens the app; email analysis runs in the browser.

JavaScriptEmail SecurityLocal AnalysisPowerShell Launcher

CYBERSECURITY LEARNING TOOL

Security+ Command Center

A browser-based CompTIA Security+ SY0-701 study dashboard with original scenario-based questions, flashcards, acronym and ports review, domain accuracy tracking, missed-question review, and local progress storage. Created for aspiring cybersecurity professionals.

CompTIA Security+CybersecurityJavaScriptStudy DashboardLocal Storage

Systems & IT Support

Endpoint diagnostics, server administration, access control, and service desk workflows.

POWERSHELL DIAGNOSTICS

Windows IT Diagnostic Toolkit

A PowerShell-based troubleshooting toolkit that automates Windows system health, network connectivity, Microsoft Defender, firewall, service, and event-log checks, with structured HTML reporting to speed up endpoint diagnosis and support workflows.

PowerShellWindowsTroubleshootingAutomationEndpoint Support

LINUX SERVER ADMINISTRATION

Linux Server Administration & Secure Web Infrastructure

A hands-on Ubuntu Linux administration lab demonstrating remote server management over SSH, package management, Nginx deployment, systemd service administration, HTTP/HTTPS configuration, SSL/TLS certificate setup, configuration validation, and troubleshooting in a virtualized environment. Includes a Bash automation workflow for repeatable deployment.

Ubuntu LinuxSSHNginxsystemdSSL/TLS

IDENTITY & ACCESS CONTROL

Active Directory Access Control Lab

Built a Windows domain access-control environment using Active Directory users, security groups, NTFS permissions, and network-share permissions to implement and validate group-based least-privilege access to organizational resources.

Active DirectoryWindows ServerIAMRBACLeast Privilege

IT SERVICE MANAGEMENT

LabDesk - ITSM Platform

A simulated enterprise IT service management and help desk platform that connects Active Directory users, departments, tickets, and assets inside a realistic service desk environment. Demonstrates ticket assignment and escalation, asset tracking, role-based technician/admin access, password reset and account unlock workflows, troubleshooting documentation, and day-to-day IT operations.

ITSMActive DirectoryHelp DeskAsset ManagementTicketing

Portfolio & Products

Public technical work and hands-on technology education.

OPEN TECHNICAL PORTFOLIO

Technical Portfolio

A growing portfolio of hands-on IT and cybersecurity projects spanning IAM, Microsoft Entra ID, Windows and Linux administration, security monitoring, PowerShell automation, ITSM, phishing analysis, and security tooling. Includes 25+ documented labs, browser-based security applications, diagnostic utilities, and practical projects built around real-world infrastructure and security workflows.

IAMCybersecurityPowerShellCloud & Infrastructure
  • Documented labs

    Active Directory, Entra ID, Windows Server, Linux, Splunk, networking, and PowerShell.

  • Cloud deployment work

    Azure administration and Static Web Apps CI/CD projects with documented verification.

  • Security applications

    PhishLens email analysis and a browser-based Security+ study dashboard.

  • Operational tooling

    Windows diagnostics, ITSM workflows, automation playbooks, and practical support documentation.

TECHNICAL EDUCATION CHANNEL

John’s Tech

A hands-on IT and cybersecurity channel documenting practical labs, real-world administration, troubleshooting, automation, and technical education across Microsoft Entra ID, Azure, PowerShell, Windows Server, Linux, networking, IAM, cloud infrastructure, and security operations.

Entra IDAzurePowerShellCybersecurity
  • Cloud & identity walkthroughs

    Microsoft Entra ID, Azure administration, IAM, and cloud infrastructure labs.

  • Systems administration

    Hands-on Windows Server and Linux configuration, networking, and troubleshooting.

  • PowerShell & automation

    Practical scripting and repeatable workflows for administration and technical support.

  • Cybersecurity education

    Security operations labs and technical explanations grounded in hands-on practice.

PROJECT WALKTHROUGH

Microsoft Entra ID + Azure RBAC | Identity 360 & Effective Authorization Demo

A hands-on walkthrough of my Azure Identity Governance Console, combining Microsoft Entra ID identities and Azure RBAC assignments to trace a user's effective access. The demo follows Michael Chen's Identity 360 view, Finance group membership, and authorization paths, then validates access in the Azure Portal.

INTERACTIVE IAM & SECURITY TRAINING LAB

Cloud Security Lab for IT & IAM Professionals

CyberOps Triage Lab

CyberOps Triage Lab is a browser-based hands-on training environment built for IT support, IAM, and cybersecurity professionals to practice realistic identity, access, cloud, and security decision-making in a safe simulated environment.

  • Practice identity and access decisions without touching production systems.
  • Work through realistic IAM, Microsoft Entra, endpoint, and SOC scenarios.
  • Build judgment around access, authentication, privileged activity, suspicious behavior, and escalation.
  • Track progress across scenarios and investigations.
Microsoft Entra IDIAMIdentity SecuritySOC TriageAzureMicrosoft DefenderIncident ResponseAccess Control

Built for practice and skill development—not a production security platform. Scenarios use fictional evidence; no production systems or cloud tenant are connected.

CyberOps Triage Lab
All systems simulated

YOUR OPERATIONS OVERVIEW

Welcome to the lab.

Investigate the evidence. Make the right call.

TRAINING ENVIRONMENT

Real scenarios.
Better security decisions.

SOC triage, identity response, and cloud access management.

Total XP
0
Accuracy
0%
Cases completed
0

Investigation queue

Impossible travel, familiar device

Microsoft Defender · SOC

Medium

A wave of password failures

Microsoft Defender · SOC

High

PowerShell on a finance workstation

Microsoft Defender · SOC

High
IAM Administration
Identity Incidents
Azure / Entra
Ticket Queue

Fictional data. Real decision-making. Progress stays in your browser.

Illustrative lab preview · Simplified representation of the live dashboard, showing a fresh practice workspace—not live security data.

FREE SECURITY+ STUDY RESOURCE

Security+ Command Center

A study resource I built for aspiring cybersecurity professionals pursuing CompTIA Security+. Practice key concepts, review what you miss, and build a consistent study routine with questions, quick references, and progress tracking in one place.

Independent study resource by John Tyler. No account required; progress stays in your browser.

  • Scenario practice

    Work through original questions with immediate explanations.

  • Flashcards & quick references

    Review security concepts, acronyms, and common ports and protocols.

  • Domain progress

    Track accuracy across study domains to see where to focus next.

  • Missed-question review

    Revisit incorrect answers in a dedicated review queue.

EXPERIENCE & DIRECTION

A deliberate technical progression.

My path has progressed from security operations and access control into IT support, systems troubleshooting, and identity lifecycle support. I’m now deepening my cloud, IAM, and automation skills through hands-on labs and public technical projects.

OATRIDGE · SUPPORT SCOPE

Windows endpoints
30+
Microsoft 365 users
200+

Supported 30+ Windows endpoints and over 200 Microsoft 365 users across headquarters and client sites, resolving identity, application, and connectivity issues.

2021–2023 · VIP ACCESS MANAGEMENT

Security Operations & Access Control

Supported employee, contractor, and visitor credentials, approved access requests and deactivation, access logs, and audit documentation.

2023–2026 · OATRIDGE

IT Support Specialist

Supported AD and Entra identity lifecycle provisioning and deprovisioning, password and MFA issues, groups, access changes, and account and authentication troubleshooting, using ServiceNow and PowerShell diagnostics.

CURRENT DIRECTION · LABS & PROJECTS

Cloud, IAM & Automation

Developing advanced Conditional Access, PIM/JIT, Azure RBAC governance, Graph PowerShell, Entra-authenticated web console, and enterprise Azure infrastructure skills through hands-on labs and projects—not employer production deployments.

WHAT I’M BUILDING

Focused on systems that are secure, useful, and built to last.

Azure administration
Entra ID & IAM
Cloud security
PowerShell automation
Cybersecurity tooling
Useful web & SaaS products
John Tyler working at a coding workstation at night

VENTURES & PRODUCTS

Technology Ventures & Digital Products

Building technology-driven products across cybersecurity, financial systems, and long-term value creation.

CYBERSECURITY GOVERNANCE & RISK PLATFORM

Praevyn

Praevyn is a cybersecurity governance platform built to transform complex security risk into clear, defensible decisions—combining maturity assessment, exposure management, remediation tracking, and compliance oversight in one system.

PERSONAL TECH SERVICES

Technology made simpler.
Digital life made safer.

Patient, practical help for computers, phones, online accounts, home Wi-Fi and scam prevention—especially for older adults and families.

Devices & home technology

Less frustration. More confidence.

Computer & phone checkupsSecurity, updates and everyday device health.

Review updates, security protection, suspicious software and browser extensions. Phone safety includes screen locks, app permissions, spam filtering and emergency settings.

New devices & everyday supportGet set up, connected and comfortable.

Help with transfers, email, printers, password tools and backups on a new device; everyday help with email, printing, Wi-Fi, video calls and passwords. Remote access is only used with your permission.

Home Wi-Fi & smart devicesSafer connections, cameras and doorbells.

Review router credentials, encryption and firmware. Set up secure accounts, sharing and alerts for cameras, doorbells and smart-home devices.

Backups & recoveryKeep important files within reach.

Help with cloud or external backups and restoring files. Complex recovery and major malware cleanup are quoted separately.

Accounts, identity & privacy

Your digital life. Your control.

Passwords & safer sign-insPractical protection without the confusion.

Set up Bitwarden or 1Password, MFA, passkeys, security keys and recovery options. You retain your master password and enter your own passwords and codes.

Account reviews & privacyReview access and reduce exposure.

Review recovery information, sign-ins, connected devices and forwarding rules for email and important accounts. Help with privacy cleanup and identity-theft prevention; you submit any credit freezes or fraud alerts yourself.

Scam prevention educationRecognize the warning signs. Know how to verify.

Practice spotting impersonation, suspicious texts, AI voice scams and family-emergency claims. Verify requests through a known source rather than the contact details in a suspicious message.

Digital emergency & legacy planningPrepare thoughtfully for the unexpected.

Help prepare digital emergency information and supported legacy contacts. You retain your credentials; banking passwords, master passwords and recovery codes are not retained.

CLEAR OPTIONS. AGREED UP FRONT.

Choose the support that fits.

Contact me to discuss pricing, scope and availability before booking.

A reassuring starting point

Senior Digital Security Checkup

up to 90 minutes

A review of your primary device and priority accounts, including security, recovery and backups, with written recommendations.

A more complete setup

Complete Personal Cybersecurity Setup

usually 2–3 hours

The checkup plus agreed password manager, MFA, Wi-Fi security, privacy or recovery setup.

Focused scam protection

Scam Defense Setup

60–90 minutes

Secure priority email and selected financial accounts, set up phone spam filtering, and practice scam verification.

Ongoing, scheduled support

Personal Tech Concierge

one scheduled remote session monthly

One scheduled remote support session monthly plus limited suspicious-message review. Session length, review limits and response times are agreed before enrollment.

Extra devices/accounts/tasks may need added time; complex recovery and major malware cleanup quoted separately. Hardware, subscriptions, apps and any travel fee are separate and approved in advance.

How it works

  1. Describe your issue
  2. Agree on scope, price & appointment
  3. Receive support & a written summary

Let’s make your technology work for you.

Start with a question or tell me where you need a hand.

  • CompTIA A+ & Security+ certified
  • You control your accounts
  • Transparent, approved support
Privacy & support boundaries

You enter your own passwords and codes. Banking passwords, master passwords and recovery codes are never retained. You remain in control of your accounts.

Remote access is only used with your permission. No financial advice or transfers are provided. Support reduces security risk; it is not a guarantee. Concierge support is scheduled, with agreed limits and response times—not instant or 24/7 support.

PROFESSIONAL OPPORTUNITIES

Let’s work together.

Open to IAM, Microsoft Entra ID, cloud identity, Azure administration, and cloud security opportunities.

GET IN TOUCH

Start a conversation

Tell me what you’re working on, the problem you need solved, or the opportunity you’d like to discuss.

By submitting, you agree that I may use these details solely to review and respond to your inquiry.