I'm Oreoluwa Fagbamiye — 3+ years securing and operating enterprise government infrastructure across identity & access management, endpoint lifecycle, security operations, and networking.
I'm a cybersecurity and IT operations professional with 3+ years of hands-on enterprise experience, currently serving as a Network & Security Specialist at Fulton County Government, where I support 200+ users across identity, endpoint, and network operations.
My work spans privileged access management (CyberArk PAM), Active Directory and Entra ID identity lifecycle, endpoint deployment with SCCM/MECM and Intune, Splunk-based security monitoring, and vulnerability management with Nessus/Tenable — all under formal change management and NIST 800-53 controls.
I hold a B.S. in Cybersecurity / Computer Forensics & Counterterrorism from the University of North Georgia (an NSA/DHS Center of Academic Excellence), completed Harvard CS50, and carry CompTIA Security+, EC-Council CHFI, and ITIL 4 certifications. I'm passionate about turning manual operations into automated, well-documented workflows.
Three roles across enterprise government, physical security operations, and security analysis.
Built across enterprise identity, endpoint, security operations, networking, and automation.
Privileged access, identity lifecycle, least-privilege enforcement, and physical access control.
SIEM monitoring, EDR/XDR, threat intel, vulnerability management, and IR.
Switching, firewalls, NAC, and monitoring at enterprise scale.
Imaging, provisioning, refresh planning, and lifecycle across 200+ devices.
Automation, REST API integration, and forensic tooling.
Infrastructure as code, CI/CD, and cloud-native AI agent deployment.
Exploitation labs, adversary emulation, and forensic / traffic analysis on owned test equipment.
Ticketing, service management, and knowledge-base authoring.
Hands-on security engineering and research — from offensive labs to cloud and AI automation. Write-ups and source on GitHub.
Compromised vulnerable Windows/Linux targets in an isolated Kali lab using Metasploit — a malicious PDF exploiting Adobe Reader (CVE-2010-1240), Distcc RCE (CVE-2004-2687), and Netcat bind/reverse shells — with documented defensive countermeasures.
Adversarial network forensics with Wireshark, browser dev tools, and Splunk; decrypted TLS/RSA traffic with Ghidra and Python and automated private-key extraction via GDB scripting with 100% documented accuracy.
Three Google Cloud codelabs rebuilt as deployable projects: tool-calling agents on Cloud Run with sandboxed code execution, a Streamlit RAG app backed by Firestore vector search, and a self-hosted Gemma model on GPU wired to BigQuery over MCP — each reproducible from scripts with least-privilege IAM.
Built and deployed a Python/Flask app on AWS with Docker, Terraform for infrastructure as code, and Ansible for configuration management; GitHub Actions CI/CD pipelines with security hardening and scanning integrated throughout the deployment lifecycle.
A local automation framework built on Claude Code that evaluates job postings, tailors CVs, drafts cover letters, and preps interviews — API integration, prompt design, and end-to-end workflow automation.
Hijacked a consumer Wi-Fi drone (Ryze Tello) end to end — a one-click deauthentication attack to seize control, then an offline WPA2 handshake crack with Hashcat — using Kali and a Wi-Fi Pineapple. Every step mapped tactic-by-tactic to MITRE ATT&CK, with manufacturer and operator mitigations.
Conducted APT malware analysis in Ghidra and Wireshark and developed Snort IDS signatures that improved detection by ~30%.
A home SOC for detection engineering: instrumented Windows and Linux endpoints, a 13-stage adversary emulation plan run with Atomic Red Team, and detection-as-code — custom Wazuh rules and Sigma, mapped to an ATT&CK coverage layer, with incident reports and MTTD metrics. Built from code with Vagrant/Ansible.
Maintained a segmented Cisco IOS / pfSense home lab with Python and Bash automated runbooks — a sandbox for testing security controls and detection content.
Industry credentials across security, IT service management, cloud, and data.
Headline metrics from enterprise operations. Full detail in the
resume and RESUME_GUIDE.md.