Identity Engineering Portfolio

Brenden Diggs
Identity & Cybersecurity Engineer

Building secure identity systems across Microsoft Entra ID, identity governance, SSO and federation, lifecycle automation, Zero Trust, and access security.

Explore Identity Projects View GitHub
Microsoft Entra ID Identity Governance SAML OIDC OAuth 2.0 SCIM Microsoft Graph Conditional Access Node.js Zero Trust
Identity Engineering

Hands-on IAM projects.

A practical identity engineering environment built around a fictional enterprise, Autumn Solutions, covering security, federation, automation, and identity governance.

Complete
Project 01

Zero Trust Identity Security

Designed identity security controls for privileged and workforce identities using Microsoft Entra ID.

Conditional Access MFA PIM Identity Protection Emergency Access
Complete
Project 02

Enterprise SSO & Federation

Implemented modern and federated authentication for a custom SaaS application, including provisioning and identity lifecycle integration.

SAML 2.0 OIDC OAuth 2.0 + PKCE SCIM Microsoft Graph
Complete
Project 03

Identity Lifecycle Automation

Built a certificate-authenticated Joiner, Mover, Leaver workflow driven by an HR source with automated account, group, and license lifecycle management.

JML Node.js Microsoft Graph Certificate Authentication Audit Logging
In Progress
Project 04

Identity Governance

Implementing governed, time-bound finance access through request, business justification, approval, entitlement provisioning, access reviews, and governance-driven revocation.

Entitlement Management Access Packages Approvals Access Reviews IGA
Next
Project 05

Identity Threat & Workload Security

The next phase of the Autumn Solutions identity portfolio will focus on identity threat detection, workload identities, and securing non-human access.

Workload Identity Identity Threats Microsoft Entra Security Engineering
Governance, Risk & Compliance

Security beyond the control plane.

GRC case studies will complement the identity portfolio with security risk, governance, compliance, and business-focused security work.

GRC Portfolio

Selected case studies coming soon

Existing governance, risk, compliance, third-party risk, and AI governance projects are being migrated into this portfolio.

Risk Assessment Compliance Third-Party Risk AI Governance Security Controls
About

Security built around identity.

I focus on the intersection of identity engineering, cybersecurity, governance, and automation.

My portfolio is designed around realistic enterprise scenarios rather than isolated product demonstrations — showing how access is secured, provisioned, governed, reviewed, and removed across the identity lifecycle.

Identity Security Least privilege, MFA, Zero Trust, privileged access
Identity Governance Approvals, access packages, reviews, lifecycle controls
Federation & SSO SAML, OIDC, OAuth 2.0, SCIM
Automation Microsoft Graph, Node.js, lifecycle orchestration
Technical Portfolio

Explore the implementation.

Technical artifacts, documentation, automation, and project evidence are being published alongside these case studies.

Open GitHub