// IT infrastructure · cloud · automation

I run infrastructure at scale—and automate the parts that shouldn't need a human.

IT Administrator managing 470+ endpoints across locations in Iowa, Minnesota, and South Dakota, hybrid Entra ID/Active Directory, Intune at scale, and OT network segmentation at an agriculture cooperative. CCNA · Security+ · AZ-104.

Azure Entra ID Intune PowerShell Python Cisco Meraki CCNA Security+ M365

// ask me anything

portfolio agent · powered by Claude
Hey — I'm an AI trained on Dylan's background. Ask me about his experience, projects, what he's built, or what he's looking for. What do you want to know?

Powered by an Azure Function proxy that pulls the Claude API key from Key Vault via managed identity, running on Azure Static Web Apps — full architecture in the dvinfosec.com — the agent case study below.

// selected projects

AgvanceQR
Problem: Grain dispatchers were tracking loads with paper tickets and spreadsheets — no single source of truth, no auto-updates, no safety net when a dispatcher's machine dropped connection.
What I did: I built a production-grade Python system tray app from scratch — threading for background polling, retry loops for network drops, and auto-update pushed via network share. Deployed to 15–20 dispatcher machines, now on v1.3.5.
Outcome: TODO
Python Threading Retry Logic Auto-update Windows Tray App
in production
Secure Boot remediation
Problem: Microsoft's June 2026 Secure Boot DB certificate expiration threatened to break boot on managed endpoints and servers if nothing was done ahead of time.
What I did: I wrote proactive Intune Remediation scripts to detect and fix affected devices automatically, and ran a remote audit across the server fleet to confirm coverage before the deadline.
Outcome: Remediation scripts are in staged rollout across the fleet ahead of the certificate expiration deadline.
PowerShell Intune Remediation Scripts Secure Boot
building
Browser extension audit
Problem: Nobody had full visibility into which Edge/Chrome extensions were installed org-wide, or whether the Intune lockdown policy was actually holding.
What I did: I ran an org-wide audit of installed extensions, compared results against the Intune lockdown policy, and built a delta analysis between audit periods to catch policy drift.
Outcome: Delivered a structured Excel report to leadership flagging policy gaps and closing the visibility blind spot.
PowerShell Intune Security Audit Excel Reporting
shipped
Warehouse WiFi deployment
Problem: A metal dividing wall in the warehouse was killing WiFi coverage on one side — dead zones where handheld scanners and floor devices couldn't reliably connect.
What I did: I ran an RF site survey around the dividing wall and designed a Cisco Meraki AP layout with separate access points per side instead of relying on one AP to punch through metal.
Outcome: Full coverage on both sides of the warehouse, no more scanner dead zones.
Cisco Meraki RF Site Survey Wireless Deployment
shipped
dvinfosec.com — the agent
Problem: A resume and a project list don't answer follow-up questions — visitors can't dig into specifics without an actual conversation.
What I did: I built this site as an Azure Static Web App with an Azure Function proxy to the Claude API, keys secured in Azure Key Vault via managed identity — a live agent trained on my background, not a static bio.
Outcome: The agent you're using right now — powered by this project.
Azure Static Web Apps Azure Functions Azure Key Vault Claude API Managed Identity JavaScript Python
shipped
Windows Hello remediation
Problem: Windows Hello enrollment was breaking on Entra ID/Intune-managed devices at scale — corrupted NGC vaults and stale PIN containers were locking users out of biometric sign-in.
What I did: I scripted a full remediation: NGC vault cleanup, WinBioDatabase clearing, and certutil-based PIN container removal, deployed across affected devices.
Outcome: Restored Windows Hello sign-in fleet-wide without manual device-by-device fixes.
PowerShell Entra ID Intune Windows Hello Scripting
shipped

// how i work

Automate the parts that shouldn't need a human.

When something's repetitive or easy to get wrong by hand, I'd rather build a small tool for it. That's basically the story behind the dispatcher app, the endpoint remediation scripts, and even this site's chat agent.

Honest status over polish.

I'd rather tell you where something actually stands than make it sound finished. A project marked "building" stays "building" until it's really done, and if a number isn't real yet, it just says TODO instead of a guess.

Ownership at scale.

470+ endpoints across three states — hybrid Entra ID/Active Directory, Intune, OT segmentation. It's a big surface and I run all of it.

Security-minded by default.

Conditional Access, managed identity, and least-privilege access are the starting point for anything I build or manage — from this site's API key handling to everyday endpoint policy.

// stack

Identity & Access

Entra ID Active Directory Conditional Access M365

Cloud/Azure

Azure Static Web Apps Azure Functions Azure Key Vault Microsoft Graph API

Endpoint

Intune

Networking

Cisco Meraki

Automation/Languages

PowerShell Python Git / GitHub

Infra/DNS

Cloudflare

Certs

CCNA Security+ AZ-104