Portfolio Refresh in Progress
// Mark Schwinn · IAM & Healthcare IT

WebsiteRevampIn Progress

I’m refreshing this portfolio with a clearer story, updated work, and new projects. An updated portfolio is coming soon.

Get In Touch View Resume
Mark Schwinn
MARK_SCHWINN.EXE // LOADED
Network
Raleigh/RTP
Status
Active
Identity ManagementActive DirectorySailPointEntra IDCisco ISEHIPAA SecurityMFA & SSORBACAWS CloudZero TrustIncident ResponsePythonTerraformPowerShell Identity ManagementActive DirectorySailPointEntra IDCisco ISEHIPAA SecurityMFA & SSORBACAWS CloudZero TrustIncident ResponsePythonTerraformPowerShell
About

Who I Am

I work in IAM support in a healthcare environment, where I help people regain appropriate access and learn how identity processes operate at scale. That work has made me especially interested in access reviews, least privilege, and the everyday details that keep systems usable and accountable.

Outside work, I build small cloud and automation projects to turn that interest into hands-on practice. I separate professional experience, personal labs, and practice scenarios throughout this site. That distinction matters to me.

This is a portfolio in progress—not a claim to have every answer. It is a record of the skills I’m developing, the projects I can explain, and the direction I’m deliberately growing toward: cloud security engineering.

LAB
PERSONAL CLOUD PROJECTS
WORK
IAM SUPPORT EXPERIENCE
OPEN
TO LEARNING & OPPORTUNITIES
✓ CompTIA Security+
✓ Google Cybersecurity
↗ B.S. IT & Cybersecurity · 4.0 GPA
↗ AWS Solutions Architect Associate · Expected Oct 2026
Get In Touch LinkedIn Profile
IAM SupportAccess ReviewsHIPAA-Aware WorkCloud Security LearningIdentity LifecyclePython AutomationTerraform LabsHealthcare IT
// 01
IAM Support Experience
Professional experience supporting access and identity operations in a HIPAA-regulated healthcare setting.
// 02
Clear Scope
I label work projects, personal labs, and fictional practice scenarios so visitors can understand exactly what they’re looking at.
// 03
Learning by Building
I use personal projects to practice Terraform, AWS, Python, and IAM concepts—then share the implementation and tradeoffs.
// 04
Actively Growing
AWS Solutions Architect Associate expected October 2026, a 4.0 in a B.S. in IT & Cybersecurity, and a growing portfolio of independent Terraform and AWS projects. Deliberately building toward cloud security engineering.
Technical Stack

Tools I Use & Study

// Identity & Access
SailPoint IAMMicrosoft Entra IDActive DirectoryCisco ISEMFA / SSORBAC / PAMZero Trust
// Security & Compliance
HIPAA FrameworksIncident ResponseAccess AuditingThreat DetectionRisk AssessmentSecurity Operations
// Cloud & Infrastructure
AWSAzure ADMicrosoft 365CitrixEpic EHRVPN Administration
// Dev & Tools
PythonServiceNowGitHubKali LinuxWiresharkWindows / macOSTerraformPowerShell
Portfolio

Things I've Built

HIPAA // Assessment // Practice Scenario
Keystone Family Dental
A sample engagement walking through a 7-person dental practice with critical HIPAA violations, including no MFA, shared credentials, no access controls, and no security policies. A realistic look at how I'd assess, remediate, and document an environment like this.
HIPAAM365 SecurityIAMPolicy DevelopmentHealthcare
Read Full Case Study →
PERSONAL LAB // Python // AWS
AWS Security Checks
A personal Python project exploring how automated checks can identify selected AWS configuration issues. It is a learning project, not a HIPAA compliance assessment or a production security tool.
PythonAWSAutomation
View the code →
PERSONAL LAB // AWS // IAM // S3
AWS Secure S3 Lab
A personal AWS lab where I practiced least-privilege IAM policies, KMS encryption, restrictive bucket policies, and public-access blocking. It demonstrates what I built in a test environment.
AWSIAMS3KMS
View the code →
PERSONAL PROJECT // Python // IAM
IAM Access Review Bot
A personal automation project that compares sample access data with role baselines and produces a risk-scored HTML report. It is not connected to employer data or used for a production certification process.
PythonIAM ConceptsAutomation
View the code →
PERSONAL LAB // Terraform // AWS RDS
AWS RDS Secure PostgreSQL Tier
A Terraform lab exploring private subnets, restrictive ingress, encryption at rest, and a Python/boto3 posture check. It was built in a test environment, not a production database tier.
TerraformAWS RDSPythonIaC
View the code →
PERSONAL LAB // Terraform // AWS EC2
AWS EC2 DevSecOps Lab
A test-environment pipeline that provisions an EC2 web server with Terraform and uses Python/boto3 to check its security-group exposure.
TerraformAWS EC2Python
View the code →
PERSONAL LAB // Terraform // Route 53
AWS Route 53 DNS Failover
A Terraform learning exercise modeling active/passive endpoints and Route 53 health-check failover. It demonstrates an architecture pattern; it is not production traffic management.
TerraformRoute 53High Availability
View the code →
HTML // CSS // Netlify
This Website
Designed and built from scratch with no templates and no site builders, just pure code. It has a custom cyberpunk aesthetic, is fully responsive, and is deployed on Netlify. This is the site you're looking at right now.
HTML/CSSDesignNetlify
You're already here →
VMware // Windows Server // Kali
Enterprise IAM Home Lab
A personal cybersecurity lab built to mirror enterprise healthcare IT, using Windows Server AD, Kali Linux for attack simulation, and hybrid Azure AD integration. I use it to break things on purpose so I understand how they actually work.
Active DirectoryKali LinuxAzure ADVMware
Follow progress →
Field Notes

Learning Notes

Notes on IAM and cloud security: concepts I’m studying, patterns I’ve observed, and questions I’m working through. These posts don’t disclose employer information or claim universal answers.

IAM // Access Governance
What I’m Learning About Least Privilege
A plain-language look at why access reviews matter, grounded in IAM concepts and my early-career perspective.
IAMAccess Reviews
Read the note →
Microsoft Entra // Conditional Access
Conditional Access Policies That Actually Stop Breaches
The difference between a Conditional Access policy that looks secure on paper and one that holds up against real authentication risk signals.
Entra IDZero Trust
Read the post →
IAM Governance // Automation
Why Access Reviews Are the Most Boring, Most Important Part of IAM
The pattern behind almost every breach post-mortem, and why I built a tool to automate the check most teams skip.
IAM GovernancePythonAutomation
Read the post →
On The Side

Ways I Can Help

Small, clearly scoped help for individuals. I do not offer HIPAA compliance assessments, legal advice, or enterprise security consulting. Recruiters and hiring managers: see my portfolio or resume.

Most Requested
Resume & LinkedIn Overhaul
Built by someone who just used this exact positioning to land an IAM role. For IT/cybersecurity job seekers who want to actually get noticed.
  • Full resume rewrite & formatting
  • ATS-friendly structure
  • LinkedIn profile overhaul
  • One round of revisions
$150
ONE-TIME
Inquire →
Career
IT & Cybersecurity Career Roadmap Session
A 60-minute 1:1 call to map your path into IT or security: which certs, what order, what to build, and how to talk about it in interviews.
  • 60-min live video call
  • Personalized cert & skill roadmap
  • Portfolio/project suggestions
  • Follow-up notes doc
$75
PER SESSION
Inquire →
Personal Security
Personal Account & Access Hygiene Setup
Lock down your own digital life the way I lock down enterprise identities. Not a business audit, just your accounts, done right.
  • Password manager setup
  • MFA on critical accounts
  • Breach/exposure check
  • Written cleanup checklist
$125
ONE-TIME
Inquire →
Automation
Custom Python Script
A small automation for the repetitive thing you do by hand every week: a report, a file cleanup, a data pull. Built, tested, and handed off.
  • Scoped 30-min discovery call
  • Working script, delivered on GitHub
  • Basic usage documentation
  • One round of tweaks
From $200
ONE-TIME
Inquire →
// Initialize Contact Protocol

Let's Secure
Your World

Whether you want your resume and LinkedIn to actually get noticed, help mapping your path into IT/security, your own accounts locked down properly, or a script built for something you do by hand every week, I'm ready to talk.

Book Free Consultation
// mark@markschwinn.com · // Response within 24hrs

Free consultation · No commitment · Raleigh/RTP, NC