Ryan Furman

Cloud Security & Identity and Access Management

About Me

Cloud security and identity professional with a B.S. in Cloud Computing from Western Governors University and hands-on experience across Microsoft 365, Microsoft Entra ID, Active Directory, AWS, Terraform, PowerShell, and Python. I build reproducible IAM and PAM labs that solve common business problems: joiner-mover-leaver automation, excessive-access detection, least privilege, privileged-account operations, investigation, remediation, and verification.

Certifications

AWS Certified Solutions Architect – Associate
Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
AWS Cloud Practitioner
CCNA 200-301
ITIL 4 Foundation
CompTIA A+
CompTIA Cloud+
CompTIA Project+
LPI Linux Essentials

Experience

Data Label Specialist/Prompt Engineer

AUTHENTICX · Remote
  • Built DSPy-based prompt engineering workflows to optimize LLM performance on healthcare transcription models, replacing manual iteration with systematic evaluation loops.
  • Evaluated model accuracy using weighted confusion matrices and visualized performance trends in Power BI dashboards to drive targeted prompt improvements.
  • Designed labeling rubrics and QA standards across a cross-functional team, creating gold-standard datasets for client-specific AI model training.

Data Label Specialist

BNSF Railway · Remote
  • Reviewed and classified high-resolution rail infrastructure images in secure environment to support AI/ML model training for automated safety monitoring
  • Enforced strict accuracy and quality standards in deadline-driven setting, safeguarding data integrity for BNSF's AI initiatives
  • Collaborated with engineers and data scientists to refine labeling standards and ensure compliance with evolving guidelines
  • Recommended workflow automation opportunities, including Python-based scripts for repetitive annotation tasks

AI Data Support Specialist

RWS Group · Remote
  • Supported secure data access for major technology client's large-scale NLP and multimodal AI initiative
  • Administered annotation tasks on diverse datasets (audio, image, video, text) ensuring compliant, high-quality inputs for ML model development
  • Utilized Citrix and secure remote tools to ensure consistency and uphold IAM-related project guidelines
  • Provided IAM-aligned technical support for internal tools in VMware and Microsoft 365 environments

IT Systems Support Specialist

Home2 & Tru by Hilton · Euless, TX
  • Provided Tier 1/2 technical support managing hardware, networking, and software across Windows 10/11 and macOS environments
  • Maintained enterprise-grade network infrastructure including Cisco and Meraki devices for 200+ room property
  • Administered Microsoft 365 (Teams, Exchange, SharePoint), enhancing collaboration and reducing downtime
  • Managed VMware environments, performing upgrades, patching, and hardware lifecycle management
  • Led incident response efforts prioritizing business continuity and security compliance

Cloud Security & IAM Projects

Microsoft Entra Identity Lifecycle & Governance Lab FEATURED

Microsoft Entra ID · Microsoft Graph · PowerShell · Python · SQLite · GitHub Actions

Built a reproducible identity lifecycle digital twin and reversible authorized Entra extension for Northstar Health Systems. The lab creates synthetic identities, detects excessive access and segregation-of-duties conflicts during a failed mover workflow, generates investigation evidence, remediates access, and proves the final state is compliant.

View Full IAM Project Details →

CyberArk Privileged Access Operations Lab IN PROGRESS

CyberArk-aligned PAM · PowerShell · Python · SQLite · Privileged Access

Developing a privileged-access operations lab covering account discovery, Safe and RBAC validation, dependency-aware credential rotation, failed-rotation investigation, remediation, and post-remediation verification. Local simulation is functional; authorized CyberArk API validation remains in progress.

View Progress on GitHub →

Cloud Resume Challenge — ryanfurman.net

AWS S3 · CloudFront · Route 53 · HTTPS · AWS CLI

Built and operate this cloud-hosted portfolio using an S3 static website origin, CloudFront content delivery, Route 53 DNS, and a custom domain. Created a reusable PowerShell and AWS CLI deployment workflow that uploads validated HTML, applies cache metadata, and invalidates CloudFront without manual console uploads.

View the Live Cloud Resume →

Multi-Cloud Terraform

Terraform · AWS · Azure · Shell Scripting

Infrastructure automation across multiple cloud providers using reusable Terraform modules and shell scripting for deployment workflows.

View on GitHub →

Cloud Security Analyzer

Python · AWS · Security Analysis

Python-based cloud security inspection tool for analyzing configurations and identifying risk exposure across cloud environments.

View on GitHub →

Scripting and Automation

PowerShell · Windows Administration

PowerShell automation scripts for administrative workflows and system tasks, improving operational efficiency.

View on GitHub →

Python IT Automation

Python · IT Operations

Python automation exercises and IT-focused scripting challenges for streamlining routine operations.

View on GitHub →

Cisco Packet Tracer Labs

Cisco · Networking · VLANs · Routing

Home networking labs simulating VLANs, routing, switching, and enterprise configurations using Cisco Packet Tracer.

View on GitHub →

Technical Skills

Cloud & Security

  • AWS Architecture, IAM, S3, Lambda, and CloudWatch
  • Terraform
  • Azure & Microsoft Entra ID
  • Zero Trust Architecture
  • Cloud Security Assessment

Identity & Access

  • Active Directory
  • Microsoft Entra ID & Microsoft Graph
  • Microsoft 365 (Exchange, Teams, SharePoint)
  • Joiner-Mover-Leaver Automation
  • RBAC, SoD, Access Governance, and PAM

Infrastructure

  • VMware
  • Windows Server
  • Linux (Ubuntu, CentOS)
  • Cisco & Meraki
  • TCP/IP, VLAN, DNS, DHCP

Automation & Dev

  • Python (Boto3, Scripting)
  • PowerShell
  • Git & GitHub
  • Bash
  • SQL

Get In Touch

Interested in working together? Feel free to reach out!