Darwin
Marmolejos
Desktop Support Specialist. Cloud & identity infrastructure.
By day, troubleshooting and keeping things running. Off the clock, I'm building real infrastructure.
# who
name: Darwin Marmolejos
role: Desktop Support Specialist
focus: [ cloud, identity, endpoint ]
# stack
cloud: Azure · Entra ID · Intune
iac: Terraform · Azure Policy
certs: Network+ · AZ-900
pending: AWS CCP · Sec+
status: always learning
Projects
Enterprise Cloud Security
Identity, endpoints & email — provisioned as code.
A hands-on Azure lab that ties together identity, endpoint management, email security, and centralized monitoring — all provisioned as code with Terraform and documented decision-by-decision across four repos.
- Provisioned governance, identity groups, RBAC, and monitoring as Infrastructure as Code (azurerm / azuread).
- Conditional Access, PIM for just-in-time admin, and least-privilege RBAC across a 15-user, 5-department tenant.
- Windows 11 endpoints with Intune compliance baselines — BitLocker, Defender, firewall.
- Hardened the email domain against spoofing with SPF, DKIM, and DMARC — validated with alignment testing and header analysis.
github.com/Darewiin/enterprise-cloud-security-portfolio →
Documented across 4 linked repositories
Klazyco
In developmentYour chair. Your clients. Your call.
Klazyco isn't live yet — we're hard at work behind the chair.
We're building something better for barbers.
Skills
identity & access
Entra IDActive DirectorySAML/OIDC SSO
MFAConditional AccessPIMRBAC
cloud & iac
Microsoft AzureTerraformAWS
Azure PolicyLog Analytics
endpoint
IntuneJAMF ProWindows 11
BitLockerMicrosoft 365
networking & security
TCP/IPDNSVLANs
SPF/DKIM/DMARCWireshark
support & scripting
ZendeskPowerShellPythonBash
Certifications
CompTIA Network+
Earned · Dec 2025
Microsoft Azure Fundamentals (AZ-900)
Earned · Jun 2026
AWS Cloud Practitioner
In progress · Nov 2026
CompTIA Security+
In progress · Dec 2026
TestOut Ethical Hacker Pro
Earned · May 2025