↓ Skip to main content
SirZak

About

Table of Contents

I’m SirZak — a systems administrator who spends the day keeping infrastructure running for a few hundred people, and the evening taking apart the things that run it.

By day that means identity, endpoints, and automation: Microsoft 365 and Entra ID for 350+ users across 10+ operating companies on a single tenant, the full onboarding and offboarding lifecycle, and Tier 2 support across Windows, macOS, iOS, and iPadOS. The part I actually enjoy is making the tedious parts disappear — a Windows deployment pipeline that cut provisioning time by 90%, an Azure-hosted onboarding portal for new hires, imaging systems that saved real money.

By night it’s the offensive side of the same coin. Hack The Box boxes, a homelab I deliberately break and rebuild, and a drawer of hardware I’ve flashed, soldered, or repurposed to see how far a signal or a USB port can be pushed. Learning how things fall apart is the fastest way I know to understand how to hold them together.

This site is where I write it down.

What I’ve worked with
#

Microsoft 365 & Entra ID
Exchange Online
RBAC & Identity
NinjaOne RMM
Addigy
Windows Deployment
Python
CrowdStrike Falcon
DNS / TCP-IP

Experience
#

  1. Systems Administrator

    2026 – Present

    Omaha, NE

    Company redacted for opsec

    Administer Microsoft 365 and Entra ID for 350+ users across a single tenant supporting 10+ operating companies — identity lifecycle, licensing, security groups, and access administration.

    Own onboarding and offboarding end to end: account provisioning, endpoint deployment, and application access across Windows, macOS, iPhones, and iPads. Built an automated Windows deployment process that cut provisioning time by 90%, and an Azure-hosted onboarding portal using Microsoft authentication to streamline new-hire setup. Handle Tier 2 support and respond to phishing and endpoint security incidents.

  2. Data Center Technician (Contract)

    2025 – 2026

    Akkodis @ Google · Council Bluffs, IA

    Hardware diagnostics and component replacement inside Google's hyperscale data center, under strict security, chain-of-custody, and operational compliance.

  3. IT Assistant

    2025

    Metropolitan Community College · Omaha, NE

    Engineered a Ventoy-based automated Windows 11 deployment system that saved the department $3,000 in imaging time. Administered Linux lab servers, built local APT mirrors for bandwidth optimization, and documented SOPs for hardware reuse. Frontline support for faculty and staff.

  4. Lead Computer Repair Technician

    2023 – 2024

    iFixOmaha · Omaha, NE

    Led a team in a high-throughput repair shop — advanced diagnostics, microsoldering, HDMI and chip-level replacement, and data recovery — and trained technicians.

    Also found and responsibly disclosed a privilege-escalation flaw in the company's production web app: an exposed admin toggle allowed any holder of a company email to grant themselves admin, then trigger password resets against arbitrary accounts on the live site. Reported with a working demonstration; patched within four hours.

  5. A.A.S., Information Technology

    2025

    Metropolitan Community College

    Associate of Applied Science, completed August 2025.

Off the clock
#

The homelab is a headless Ubuntu server running a Python Discord bot (PIL and JSON for dynamically generated cards) and game servers, reachable over SSH with dynamic DNS. It’s also the place I try things that shouldn’t run in production.

On the hardware side I’m a tinkerer. I’ve simulated Bluetooth, Wi-Fi, and RFID attacks with a Flipper Zero; hand-soldered an ESP32 with a TFT/SD rig and a battery, flashed it with ESP Marauder, and used it for Wi-Fi security testing; and put a USB Army Knife to work on both sides of the fence — automating onboarding scripts at work, and simulating HID attacks in the lab.

All of it feeds the same loop: build it, break it, understand it, write it down.