Summary
IAM Analyst administering identity infrastructure for a 10,000+ user HIPAA-regulated hospital system, working daily in SailPoint IdentityNow, Microsoft Entra ID, Active Directory, Cisco ISE, and endpoint management via Intune and Jamf. Builds tooling to solve real compliance and security problems, not just documentation. CompTIA Security+ certified, currently completing CompTIA CySA+ and AWS Solutions Architect Associate to move into cloud security engineering.
Core Skills
Identity & Access
SailPoint IdentityNow, Entra ID, Active Directory, RBAC, MFA/SSO, Cisco ISE, entitlement review
Microsoft Security
Sentinel (KQL), Defender for Cloud, Defender for Identity, Conditional Access, M365 Security Center
Endpoint Mgmt
Microsoft Intune, Jamf, device compliance policies, Windows/macOS security baselines
Cloud & Compliance
AWS (IAM, S3, CloudTrail, KMS, VPC, RDS), HIPAA Security Rule (45 CFR Part 164)
Tools
ServiceNow, Zendesk, Epic Hyperspace, Citrix, Python (boto3), GitHub, Wireshark, Kali Linux
Experience
IAM Analyst (Solution Center Analyst)
Thomas Jefferson University Hospital
Aug 2025 – Present · Philadelphia, PA (Remote)
- Support identity lifecycle governance and access controls for 10,000+ users across Active Directory and Entra ID in a HIPAA-regulated environment
- Administer SailPoint IdentityNow entitlement reviews, validating role assignments and access against compliance requirements for continuous audit readiness
- Operate Entra ID Conditional Access policies, analyzing authentication risk signals and enforcing MFA on PHI-bearing systems
- Manage endpoint compliance and configuration through Microsoft Intune and Jamf, enforcing device security baselines across Windows and macOS fleets
- Handle escalated Tier 1 tickets requiring deeper investigation, coordinating resolution across identity, endpoint, and network systems
- Investigate and remediate access failures via Cisco ISE, conducting root cause analysis and documentation to reduce recurring incidents
- Enforce HIPAA minimum-necessary access standards across Epic Hyperspace EHR and Citrix VDI environments
IT Specialist
Techline Solutions
Aug 2023 – Jun 2025 · Batesville, MS (Remote)
- Provided Tier 1 helpdesk support for 30+ inbound calls daily, resolving PC troubleshooting issues, Active Directory password resets, and account unlocks for a distributed remote workforce
- Administered remote access, VPN authentication, and connectivity troubleshooting for 50+ users weekly under SLA targets
- Logged, triaged, and resolved support tickets in Zendesk, maintaining SLA compliance and clear resolution documentation
- Built internal runbooks that standardized access troubleshooting and reduced escalation volume
Built & Shipped
HIPAA AWS Compliance Checker
Python/boto3 tool automating 16 HIPAA compliance checks across S3, IAM, CloudTrail, KMS, VPC, and RDS, mapped to regulatory citations.
IAM Access Review Bot
Automated access certification tool comparing access exports against role baselines, flagging excess access and stale entitlements into a risk-scored HTML report.
AWS Secure S3 Lab
Hardened S3 environment using least-privilege IAM, KMS encryption, and restrictive bucket policies.
Enterprise IAM Home Lab
Personal lab mirroring enterprise healthcare IT: Windows Server AD, hybrid Azure AD, and Kali Linux for attack simulation.
Certifications
✓ CompTIA Security+
✓ Google Cybersecurity Certificate
↗ CompTIA CySA+ (In Progress)
↗ AWS Solutions Architect Associate (In Progress)
Education
B.S. Information Technology & Cybersecurity — Strayer University · Expected Jun 2027 · GPA: 4.0
Portfolio
Personal site featuring project write-ups, a security/IAM blog, and a documented HIPAA security assessment case study —
markschwinn.com