Lisandra Duvernay

I’m a Cloud & Cybersecurity Engineer with hands-on experience across cloud infrastructure, identity and access management, endpoint security, Microsoft 365, virtualization, DevSecOps, and security operations.

My work includes Azure and Microsoft 365 administration and hardening, Microsoft Entra ID, RBAC, MFA, Conditional Access, PIM, Intune, Defender, Sentinel, Purview, endpoint protection, WAF and network security controls, monitoring, vulnerability remediation, backup and recovery, and infrastructure management across Windows Server, VMware, Citrix, and hybrid environments.

I also work with Infrastructure as Code, Terraform, GitHub Actions, security automation, CI/CD security controls, and scripting with PowerShell and Python. I enjoy building repeatable processes, improving security posture, automating operational tasks, and documenting technical environments in a clear and structured way.

My interests sit at the intersection of cloud security, infrastructure, IAM, DevSecOps, Zero Trust, security governance, and automation, with experience applying controls and practices aligned with standards and frameworks such as ISO 27001, NIST, SIM3, and the Microsoft Cloud Security Benchmark.

I’m especially interested in projects where cloud, infrastructure, security, and automation come together to create environments that are easier to manage, monitor, secure, and scale.