Support Analyst, ITBLAS
Shared Services Canada
Jul 2025 – Present
Thunder Bay, Ontario
What I do
- Policy-as-Code (OPA/Rego): write security controls as policy for a live multi-tenant compliance platform, then run functional testing, troubleshoot failures and document each control.
- Python: built a script that parses the source security standard and cross-checks the policy engine's controls against it one-to-one.
- Azure, MSSQL: directing the move of a legacy local compliance database to an Azure database to reduce its attack surface, and wrote the documentation for the effort.
- C#, .NET: optimized legacy code as part of the same database modernization.
- CI/CD, Git: built pipelines with SAST and DAST scanning to catch vulnerabilities before deployment.
- Tenant migrations: coordinated and tested the migration tooling, including Microsoft's Orchestrator tool while in preview. Prepared test cases, readied tenants, executed migrations and validated results, with heatmap dashboards for transfer status.
- Power Apps, Power Automate: built a ticketing and change-tracking workflow with management reporting, which another team adopted.
- Jira, Jira API: built custom workflows, and now building a portal that creates and searches issues through the API.