Owned day-to-day security operations across a 100+ endpoint enterprise environment spanning Windows and Linux - SIEM monitoring, intrusion detection, and antivirus/endpoint protection. Administered Active Directory and IAM under least-privilege principles (moves, adds, changes, disconnects), investigated and remediated security incidents, and configured secure remote access (VPN/RDP). Automated operational and security tasks with PowerShell and Bash, and managed infrastructure configuration with Ansible and Terraform.