Summary
IT Solution Center Analyst supporting IAM operations for a 10,000+ user HIPAA-regulated hospital system. I resolve access, authentication, and credentialing issues across Active Directory, Microsoft Entra ID, Cisco ISE, and SailPoint IdentityNow. I’m pursuing Microsoft SC-300 certification and building cloud-security skills through personal Terraform and AWS labs.
Core Competencies
Identity & Access
SailPoint IdentityNow, Microsoft Entra ID & Conditional Access, Active Directory, Identity Governance & Lifecycle Management
Security & Support
HIPAA Security Rule (45 CFR 164), Cisco ISE, ServiceNow, audit documentation, Tier 1/2 technical support
Personal Labs
AWS (IAM, EC2, S3, Route 53), Terraform (IaC), Python (boto3, automation)
Experience
IT Solution Center Analyst
Thomas Jefferson University Hospital
Aug 2025 to Present · Raleigh, NC (Hybrid)
- Investigate and resolve identity and access incidents, including MFA failures, account lockouts, and synchronization issues between Active Directory and Microsoft Entra ID; document activity in ServiceNow to support audit readiness.
- Support IAM operations by enabling and disabling accounts, validating group memberships and permissions, and troubleshooting cross-domain access and authentication issues.
- Trace account lockouts and credentialing failures through Cisco ISE alongside Active Directory and Entra ID, isolating root cause across network-authentication layers.
- Provide Tier 1/2 technical support for identity and access issues across enterprise and clinical systems, using remote diagnostics to minimize disruption to clinical workflows.
- Contribute to SailPoint IdentityNow governance operations by analyzing identity profiles and lifecycle states, supporting access requests, and assisting with entitlement validation and access reviews.
Independent Cloud Projects
AWS RDS Secure PostgreSQL Tier
Provisioned an isolated, encrypted PostgreSQL tier with Terraform (private Multi-AZ subnet group, ingress limited to the VPC, KMS encryption at rest, zero public exposure) and validated the deployed posture with a custom Python/boto3 compliance audit script.
AWS EC2 DevSecOps Lab
Built an Infrastructure as Code pipeline that provisions an EC2 web server that bootstraps itself via Terraform user_data, then audits deployed Security Groups with a Python/boto3 script to flag public internet exposure.
AWS Route 53 DNS Failover
Designed a DNS failover architecture in Terraform with an active and passive endpoint pair, using automated health checks to reroute production traffic to the backup endpoint on failure.
IAM Access Review Bot
Automated access certification tool comparing real access exports against defined role baselines, flagging excess access and stale entitlements into a certification-ready, risk-scored HTML report.
Certifications
✓ CompTIA Security+
✓ Google Cybersecurity Certificate
↗ AWS Certified Solutions Architect (Associate), In Progress · Target Nov 2026
↗ Microsoft SC-300: Identity and Access Administrator, In Progress
Education
B.S. Information Technology & Cybersecurity, Strayer University · Expected Jun 2027 · GPA: 4.0
Portfolio
Personal site featuring project write-ups, a security/IAM blog, and a sample HIPAA security assessment case study,
markschwinn.com