Open to opportunities

Kurtis Gubrud

@kurtisgubrud

Message

Senior cloud security architect focused on IAM, compliance, and AI agent security.

United States

Message

What I'm looking for

I’m looking to lead multi-cloud security architecture—especially IAM/compliance—and build secure AI governance and agent-ready automation. I want teams that value zero-trust practices, measurable security outcomes, and strong collaboration across engineering and business.

I’m a Senior Lead Cloud Security Architect specializing in identity and access management (Entra ID/Azure AD), multi-cloud IAM architecture, and federal compliance (CMMC, FedRAMP High) for government contractors. At Lumen Technologies, I review, design, and improve security postures across multi-cloud infrastructure and SaaS, including owning company-wide tenant management and controlling Global Administrator and Power Administrator roles.

I build landing zones for least-privilege self-service across approver/reviewer/manager/user models and create Graph API security review processes for Microsoft-related AI agent permission sets. I’ve also delivered applied AI/agent security—custom AI agents for risky API admin grant reporting, Copilot/Copilot Studio governance, and Anthropic SSO/MCP deployments—plus zero-trust geofencing controls built with Terraform and Entra ID Conditional Access, reducing incidents by 60%.

Experience

Work history, roles, and key accomplishments

Current

Senior Lead Security Architect

Current

Lumen Technologies

Jun 2023 - Present (3 years 1 month)

Reviewed, designed, and improved security posture for multi-cloud infrastructure and SaaS, owning tenant management and privileged role assignments. Led IAM landing zone design and federal-compliance work (CMMC, FedRAMP High), and implemented AI/agent and Graph API security guardrails.

Entra ID Azure AD Conditional Access Microsoft Graph Graph API Permission Review Terraform CMMC FedRAMP AI Agents CoPilot Studio Power Automate Kubernetes Zero Trust Crowdstrike SOC PCI Geofencing

Azure Cloud Lead Architect

Hitachi Vantara

Apr 2018 - May 2023 (5 years 1 month)

Designed and supported Microsoft and multi-cloud shared/managed services for ~14K users, providing Tier 3 support across O365 and Azure. Owned core Microsoft infrastructure and led migrations including Skype for Business to Teams and on-premises to online Exchange.

Office 365 Microsoft Teams Exchange Active Directory Skype For Business Azure Landing Zone AKS Kubernetes ArgoCD Flux GitOps PowerShell Bot Development Direct Connect RDS EC2 Azure Migrate

Senior Lead Consultant

Catapult Systems

Jan 2021 - Jul 2021 (6 months)

Served as an Exchange and M365 migration expert and Azure Sentinel security advisor/implementation lead. Provided M365 automation and Azure IaaS architecture and consulting.

Azure Sentinel Azure IaaS Security Advisory Azure Architecture

Lead Automation Engineer

Denovo Ventures LLC

Jun 2017 - May 2018 (11 months)

Deployed and supported automations across Active Directory, SharePoint, Exchange, Skype for Business, and Windows Deployment Server for ~132 customers. Built infrastructure automation using SaltStack (Linux/Windows), Docker, and Python, and developed a Slack bot for service desk operations.

Active Directory SharePoint Skype For Business VMWare Docker Python Slack

System & Network Administrator

GHPhipps Construction

Feb 2017 - Feb 2018 (1 year)

Implemented and operated a multi-site network using Meraki, managing VPLS and daily checks across servers and VMs. Administered Hyper-V, Windows Server/Office 365 hybrid services, SharePoint, SCCM-based deployments, and generated reporting automation using PowerShell, SSRS/SSIS, and SQL Server.

VPLS Hyper V Windows Server Office 365 Active Directory SharePoint PowerShell SSIS SQL Server SCCM DNS Reporting Dynamics CRM SkySync Egnyte DFS

Telecoms Development Manager

Unbridled Solutions

Jul 2015 - Jan 2016 (6 months)

Managed and built Skype for Business implementations including PSTN routing via a Sonus SBC, conferencing components, and federation-enabled edge services. Developed and deployed internal and client-facing applications including WPF/ASP.NET screen-pop tools and an MVC web app hosted on Azure with a SQL backend.