IT Systems & Support Specialist with 14+ years in the field (Dublin, Ireland), now going deeper into endpoint engineering, Microsoft 365 automation and security. ITIL v3 certified, OSCP track. I build focused, open-source tools at the intersection of IT operations, security and code — each one meant to be genuinely useful.
$juan = [pscustomobject]@{
Role = 'Microsoft 365 & Endpoint Engineer'
Based = 'Dublin, Ireland · 14+ yrs in IT'
Focus = @('Intune / Entra', 'PowerShell + Graph automation', 'Security · SOC · recon')
Certs = @('ITIL v3', 'OSCP (in progress)')
Building = 'IntuneGraph — Intune tenants as queryable graphs'
Mantra = 'Ship small tools that solve a real problem, in the open.'
}Cloud & Endpoint Microsoft 365 · Intune · Entra ID · Microsoft Graph · Autopilot · Azure
Languages PowerShell · C# / .NET · Python · Bash · JavaScript
Build & Web WPF · Astro · SQLite · Git · GitHub Actions
Security SOC analysis · OSINT / recon · phishing analysis · Hack The Box
| Project | What it is | Links |
|---|---|---|
| IntuneGraph ⭐ | Turn an Intune tenant into an interactive relationship graph — target resolution, blast-radius impact preview, and assignment hygiene checks. Ships an MCP server so an AI assistant can answer why a policy applies. Read-only, offline demo. |   |
| Enterprise-Onboarding-Platform ⭐ | Enterprise user onboarding automation for Active Directory / Entra / M365. | |
| InventoryIQ | A Microsoft 365 Copilot agent for IT asset & datacenter reasoning. | |
| sc300-practice | 25 original scenario questions for Exam SC-300 (Identity & Access Administrator), with an explanation for every option — right and wrong. One HTML file, works offline, no account. |  |
| Project | What it is | Links |
|---|---|---|
| DorkCraft | Google-dork / OSINT generator (Astro + FastAPI). | |
| EntraHuntKit | SecLists, but for M365 defenders — paste-ready, ATT&CK-mapped KQL threat-hunting queries and IOCs for Entra ID and Microsoft 365. | |
| Phishing-Detection-Sim | Lightweight SOC phishing-analysis tool. | |
| PassiveReconn | CLI for passive reconnaissance. | |
| sherlock-telegram | Sherlock-style OSINT reconnaissance for Telegram identities. | |
| Project | What it is | Links |
|---|---|---|
| AdminForge | Self-hosted toolbox of browser-based utilities for sysadmins — subnets, certificates, DNS, mail records, Windows error codes. One container, no database, no accounts. Good first issues open. |  |
| job-application-tracker | .NET 8 WPF app — Kanban board, Obsidian sync, PDF & email import. |  |
| claude-usage-monitor | C#/.NET 8 WPF tray app, DPAPI-encrypted, packaged release. | |
| InventoryMaper | Inventory system for an IT department. | |
| Project | What it is | Links |
|---|---|---|
| FlipperKit | 🐬 Companion CLI for the Flipper Zero — back up the SD card, parse NFC / Sub-GHz artifacts. | |
| AI-IT-Support-Copilot | AI service-desk assistant for IT support. | |
| RepoSimpleView | Read any GitHub repo, identify its algorithms, and see them as flowcharts. | |
| Project | What it is | Links |
|---|---|---|
| cv-juan | My CV as a static Astro site, deployed to GitHub Pages. |  |
| tecnicosuy | Site for Técnicos UY — freelance IT & cybersecurity consultancy for Spanish-speaking SMBs. | |
- 🔭 Building IntuneGraph — assignment resolution, blast-radius previews and an MCP server for Intune.
- 🌱 Deepening offensive security on the OSCP track, with Hack The Box as the lab.
- 🤝 AdminForge has good first issues waiting — each one is a self-contained tool. Pick one.
- 💬 Ask me about Intune assignment resolution, Microsoft Graph automation, or why your policy is not applying.