Microsoft Certified: Azure Administrator Associate (AZ-104) with 15+ years in IT Support/Operations. I build portal-only Azure labs with deployment steps, validation evidence, troubleshooting runbooks, and teardown notes—so reviewers can quickly verify hands-on capability.
Target roles: Azure Administrator • Cloud Operations • Azure Support Engineer (Cloud)
Location: Dubai (UAE)
LinkedIn:https://www.linkedin.com/in/rizulhaq
Email:rizwanulhaq80@hotmail.com
Azure RBAC Baseline:Repo • Deployment • Validation • Runbook • Teardown
Secure VNet + NSG Lab:Repo • Deployment • Validation • Runbook • Teardown
Monitoring + Alerts (KQL):Repo • Deployment • Validation • Runbook • Teardown
Private Endpoint + Private DNS (Storage Blob):Repo • Deployment • Validation • Runbook • Teardown
Azure Policy + Defender for Cloud Baseline (Guardrails):Repo • Deployment • Validation • Runbook • Teardown
| Project | Focus | Evidence included | Status | Repo |
|---|---|---|---|---|
| Azure RBAC Baseline | Entra groups + RG-scoped least privilege | Architecture diagram, deployment steps, validation screenshots, runbook, teardown | ✅ Complete | Azure RBAC Baseline |
| Secure VNet + NSG Lab | Subnet NSGs + Network Watcher validation | Architecture diagram, deployment steps, validation screenshots, runbook, teardown | ✅ Complete | Secure VNet + NSG Lab |
| Monitoring + Alerts (KQL) | Azure Monitor + Log Analytics + alerting | Architecture diagram, KQL queries, alert validation, runbook, teardown | ✅ Complete | Monitoring + Alerts (KQL) |
| Private Endpoint + Private DNS (Storage Blob) | Private connectivity + DNS resolution (Private Link) | Deployment steps, DNS proof (A record/VNet link), VM RunCommand validation, runbook, teardown | ✅ Complete | Private Endpoint + Private DNS Lab |
| Azure Policy + Defender for Cloud Baseline | Governance guardrails + security posture | Policy assignments (Deny), denied deployment evidence, compliance view, secure score + recommendations, runbook, teardown | ✅ Complete | Azure Policy + Defender Baseline |
Entra ID • RBAC • Resource Groups • VNets/Subnets • NSGs • Network Watcher • Private Endpoint / Private Link • Private DNS • Storage (Blob) • Azure Monitor • Log Analytics • KQL • Alert rules • Azure Policy (Deny) • Defender for Cloud posture • Troubleshooting • Cost control (teardown)
- Use the Quick links above.
- Start with Deployment → Validation for proof.
- Review Runbook to see troubleshooting approach.
- Confirm cleanup in Teardown for cost control.
- Security series index on LinkedIn: https://www.linkedin.com/feed/update/urn:li:activity:7417434529755230208/
- Key Vault + Managed Identity
- Microsoft Sentinel / Defender foundations
- PIM / Conditional Access basics (identity guardrails)