Available for New Roles
// Mark Schwinn · Enterprise IT & Cloud Security

Enterprise ITTo SecurityEngineering

I work in enterprise IT supporting identity and access in a HIPAA regulated hospital, and I build Terraform, Python and AWS projects on my own time, all on GitHub. Open to a wide range of tech roles, with security engineering as my direction.

View GitHub View Resume
Mark Schwinn
MARK_SCHWINN.EXE // LOADED
Network
Philadelphia, PA
Status
Available
SailPoint IdentityNowMicrosoft Entra IDConditional AccessActive DirectoryCisco ISEHIPAA Security RuleIdentity GovernanceVPN AdministrationCitrixMicrosoft 365AWSTerraformPythonPowerShellServiceNow SailPoint IdentityNowMicrosoft Entra IDConditional AccessActive DirectoryCisco ISEHIPAA Security RuleIdentity GovernanceVPN AdministrationCitrixMicrosoft 365AWSTerraformPythonPowerShellServiceNow
About

Who I Am

I work in enterprise IT with hands on experience supporting identity and access management in a HIPAA regulated healthcare environment serving 10,000+ users. I troubleshoot authentication and access issues across Active Directory, Microsoft Entra ID and Cisco ISE, and I support identity governance activities in SailPoint IdentityNow.

Outside work, I build cloud and automation projects to turn that experience into practice. I separate professional experience, personal labs and practice scenarios throughout this site. That distinction matters to me.

This is a portfolio in progress, not a claim to have every answer. It is a record of the skills I am developing, the projects I can explain, and the direction I am deliberately growing toward: security engineering.

LAB
PERSONAL CLOUD PROJECTS
WORK
ENTERPRISE IT EXPERIENCE
OPEN
TO TECH ROLES
✓ CompTIA Security+
✓ Google Cybersecurity
↗ B.S. IT · Strayer · 4.0 GPA · 2027
↗ AWS Solutions Architect Associate · In Progress
↗ CompTIA CySA+ · In Progress
Get In Touch LinkedIn Profile
Enterprise ITIdentity & AccessAccess ReviewsHIPAA-Aware WorkCloud SecurityPython AutomationTerraform LabsHealthcare IT
// 01
Enterprise IT Experience
Aug 2025 to present at a hospital system serving 10,000+ users: access and authentication troubleshooting across Active Directory, Entra ID, Cisco ISE and SailPoint IdentityNow.
// 02
Clear Scope
I label work projects, personal labs, and fictional practice scenarios so visitors can understand exactly what they’re looking at.
// 03
Learning by Building
I use personal projects to practice Terraform, AWS, Python, and IAM concepts—then share the implementation and tradeoffs.
// 04
Actively Growing
AWS Solutions Architect Associate and CompTIA CySA+ in progress, a 4.0 GPA in a B.S. in Information Technology, and a growing set of independent Terraform and AWS projects. Deliberately building toward security engineering.
Technical Stack

Tools I Use

// Identity & Access
SailPoint IdentityNowMicrosoft Entra ID (Azure AD)Conditional AccessActive DirectoryCisco ISEMFA / SSORBAC / PAMIdentity Governance & Lifecycle
// Security & Compliance
HIPAA Security Rule (45 CFR 164)Access ReviewsAccess AuditingAudit DocumentationAuthentication Troubleshooting
// Cloud & Infrastructure
AWS (IAM, EC2, S3, Route 53)Terraform (personal labs)Microsoft 365CitrixVPN AdministrationEpic EHR
// Dev & Tools
Python (Boto3, automation)PowerShellGitHubServiceNowKali LinuxWiresharkWindows / macOSTier 1/2 Support
Portfolio

Things I've Built

PERSONAL PROJECT // Python // AWS // HIPAA
HIPAA AWS Security Checker
A read only Python command line tool that audits an AWS account across S3, IAM, CloudTrail, KMS, VPC and RDS and maps its findings to HIPAA Security Rule controls. It is a learning project, not a compliance assessment or a production security tool.
PythonBoto3AWSHIPAA
View the code →
PERSONAL LAB // Terraform // AWS RDS
AWS RDS Secure PostgreSQL Tier
A Terraform lab that builds an isolated PostgreSQL tier with a private Multi-AZ subnet group, VPC only ingress and KMS encryption at rest, validated by a custom Python/boto3 compliance audit script. Built in a test environment, not a production database tier.
TerraformAWS RDSPythonIaC
View the code →
PERSONAL LAB // Terraform // AWS EC2
AWS EC2 DevSecOps Lab
A Terraform pipeline that provisions an EC2 web server using user_data, plus a Python/boto3 script that audits security groups and flags public internet exposure. Built in a test environment.
TerraformAWS EC2Python
View the code →
PERSONAL PROJECT // Python // IAM
IAM Access Review Bot
A personal automation project that compares sample access exports against role baselines, flags excess access and stale entitlements, and produces a risk-scored HTML report. It is not connected to employer data or used in any production certification process.
PythonIAM ConceptsAutomation
View the code →
PERSONAL LAB // Terraform // Route 53
AWS Route 53 DNS Failover
A Terraform lab modeling a DNS failover architecture with active and passive endpoints and health checks that redirect traffic to a backup endpoint when the primary fails. It demonstrates a pattern; it is not production traffic management.
TerraformRoute 53High Availability
View the code →
PERSONAL LAB // AWS // IAM // S3
AWS Secure S3 Lab
A personal AWS lab where I practiced least-privilege IAM policies, encryption at rest, restrictive bucket policies, public-access blocking, access logging and CloudTrail. It demonstrates what I built in a test environment.
AWSIAMS3CloudTrail
View the code →
HIPAA // Assessment // Practice Scenario
Keystone Family Dental
A sample engagement walking through a 7-person dental practice with critical HIPAA violations, including no MFA, shared credentials, no access controls and no security policies. A realistic look at how I would assess, remediate and document an environment like this.
HIPAAM365 SecurityIAMPolicy Development
Read Full Case Study →
IN PROGRESS // Windows Server // Hyper-V
Enterprise Identity Lab Rebuild
I am rebuilding my identity lab on Windows Server 2022 and Hyper-V with Active Directory, this time with documentation as I go. Nothing is published yet.
Active DirectoryWindows ServerHyper-V
Follow progress →
HTML // CSS // Netlify
This Website
A static site written in HTML and CSS with a cyberpunk theme, fully responsive and deployed on Netlify.
HTML/CSSDesignNetlify
You're already here →

See every repository on GitHub →

Field Notes

Learning Notes

Notes on IAM and cloud security: concepts I’m studying, patterns I’ve observed, and questions I’m working through. These posts don’t disclose employer information or claim universal answers.

IAM // Access Governance
What I’m Learning About Least Privilege
A plain-language look at why access reviews matter, grounded in IAM concepts and my early-career perspective.
IAMAccess Reviews
Read the note →
Microsoft Entra // Conditional Access
Conditional Access Policies That Actually Stop Breaches
The difference between a Conditional Access policy that looks secure on paper and one that holds up against real authentication risk signals.
Entra IDZero Trust
Read the post →
IAM Governance // Automation
Why Access Reviews Are the Most Boring, Most Important Part of IAM
The pattern behind almost every breach post-mortem, and why I built a tool to automate the check most teams skip.
IAM GovernancePythonAutomation
Read the post →
On The Side

Ways I Can Help

Small, clearly scoped help for individuals. I do not offer HIPAA compliance assessments, legal advice, or enterprise security consulting. Recruiters and hiring managers: see my portfolio or resume.

Career
Resume & LinkedIn Overhaul
Clear positioning for IT and cybersecurity job seekers who want to actually get noticed.
  • Full resume rewrite & formatting
  • ATS-friendly structure
  • LinkedIn profile overhaul
  • One round of revisions
$150
ONE-TIME
Inquire →
Career
IT & Cybersecurity Career Roadmap Session
A 60-minute 1:1 call to map your path into IT or security: which certs, what order, what to build, and how to talk about it in interviews.
  • 60-min live video call
  • Personalized cert & skill roadmap
  • Portfolio/project suggestions
  • Follow-up notes doc
$75
PER SESSION
Inquire →
Personal Security
Personal Account & Access Hygiene Setup
Lock down your own digital life the way I lock down enterprise identities. Not a business audit, just your accounts, done right.
  • Password manager setup
  • MFA on critical accounts
  • Breach/exposure check
  • Written cleanup checklist
$125
ONE-TIME
Inquire →
Automation
Automation & Cloud Tooling Build
For the workflow that outgrew a spreadsheet or a one off script. A Python tool that talks to APIs, files or AWS, runs on a schedule, and is built to be maintained.
  • Scoped 45-min discovery call
  • Python tool with logging & error handling
  • Optional AWS (Boto3) & Terraform setup
  • Tests, docs & delivery on GitHub
  • One round of tweaks
From $350
ONE-TIME
Inquire →
// Initialize Contact Protocol

Let's Secure
Your World

Whether you want your resume and LinkedIn to actually get noticed, help mapping your path into IT/security, your own accounts locked down properly, or an automation built for something you do by hand every week, I'm ready to talk.

Book Free Consultation
// mark@markschwinn.com · // Response within 24hrs

Free consultation · No commitment · Philadelphia, PA