Identity & Access Management

Jalen Thomas

IAM Analyst · Houston/Spring, TX

Security-certified IT professional with hands-on experience in Microsoft Entra ID, on-premises Active Directory, PowerShell automation, and identity lifecycle management. Holder of CompTIA Security+ with a documented 10-lab home lab portfolio covering both cloud and on-prem IAM environments.

📄 View GitHub Lab 👤 LinkedIn ✉ Contact
10
Labs Complete
2
Certifications
2
Lab Environments
15+
Scripts Written
Certifications
✅
CompTIA Security+
CompTIA · Active
🛡
Cybersecurity 101
TryHackMe · Completed
Technical Skills
Cloud Identity
Entra IDRBACMFASSOSAMLOAuthOIDCPIM
On-Premises AD
Active DirectoryAD DSGPOADUCDomain ControllerDNS
Automation
PowerShell 7Graph APIAD PowerShellCSV Scripting
Security
Security+Sign-in LogsApp AuditingSecurity Defaults
AI Tools
ClaudeChatGPTPrompt Engineering
Tools & Platforms
VS CodeGitHubVirtualBoxAzure PortalWindows Server 2022
Lab Environments
Cloud Environment
Microsoft Entra ID Free Tier
Tenant: jalenthomas1216gmail.onmicrosoft.com
10+ users · 2 groups · 1 app registration
PowerShell 7 + Microsoft Graph API
On-Premises Environment
VirtualBox · Windows Server 2022
Domain: lab.local · DC: 192.168.1.1
Windows 10 Enterprise client joined
AD DS · GPO · DNS · PowerShell 5.1
Home Lab Projects
☁ Microsoft Entra ID — Cloud IAM (Labs 1–5)
01
Users, Groups & RBAC
Created 5 test users across departments, configured security and M365 groups, assigned RBAC roles directly and via group membership, tested least privilege access.
User LifecycleRBACGroup Management
✓ Complete
02
MFA & Authentication Methods
Enabled Security Defaults, registered Microsoft Authenticator, tested MFA approval and denial flows, analyzed sign-in logs showing Success, Interrupted, and Failure events.
MFASecurity DefaultsSign-in Logs
✓ Complete
03
App Registrations & API Permissions
Registered an enterprise application, configured delegated and application Microsoft Graph permissions, granted admin consent, created and managed client secrets.
App RegistrationAPI PermissionsClient Secrets
✓ Complete
04
PowerShell & Microsoft Graph API
Connected to Entra ID via Graph API, queried all users and groups, created and disabled users programmatically using New-MgUser and Update-MgUser cmdlets.
PowerShell 7Graph APIAutomation
✓ Complete
05
Bulk User Creation via CSV
Built a PowerShell script that reads employee data from a CSV file and automatically provisions all accounts in Entra ID with error handling and status logging.
CSV AutomationBulk ProvisioningError Handling
✓ Complete
🏠 On-Premises Active Directory (Labs 6–10)
06
Active Directory Domain Controller Setup
Installed Windows Server 2022 in VirtualBox, deployed AD DS role, promoted server to Domain Controller, created new forest lab.local.
Windows Server 2022AD DSDomain Controller
✓ Complete
07
Organizational Units & Users in AD
Created IT, HR, and Finance OUs, provisioned 5 domain users in correct OUs, created IT-Staff and HR-Staff security groups with proper membership.
ADUCOU DesignSecurity Groups
✓ Complete
08
Group Policy Objects (GPO)
Created Password-Policy GPO (12 char min, complexity, 5 attempt lockout) and Desktop-Lockout GPO. Verified policies applied using gpupdate and net accounts.
GPOPassword PolicyAccount Lockout
✓ Complete
09
Domain Join Windows 10 Client
Configured static IPs and internal network between VMs, set DNS to Domain Controller, joined Windows 10 Enterprise to lab.local, verified domain login and computer account in ADUC.
Domain JoinDNSWorkstation Provisioning
✓ Complete
10
Active Directory PowerShell Automation
Used Get-ADUser, New-ADUser, Disable-ADAccount, Get-ADGroupMember to manage domain users and groups programmatically — the on-prem equivalent of Microsoft Graph API.
Get-ADUserNew-ADUserDisable-ADAccount
✓ Complete
🔒 Okta — Third Party IAM (Coming Soon)
11
Okta Users, Groups & MFA
User provisioning, group management, and MFA policies in Okta developer tenant.
OktaUser ProvisioningMFA
Coming Soon
12
Okta SSO Configuration
SAML 2.0 SSO setup, app integration, identity provider and service provider configuration.
SAMLSSOApp Integration
Coming Soon
Work Experience
Work Study — Innovation Lab
Lone Star College-University Park · Part-time
Aug 2024 – Jan 2026
  • Troubleshot laboratory equipment and technology issues to minimize downtime
  • Provided technical guidance, training, and support for lab personnel
  • Served as primary technical point of contact; maintained high customer satisfaction
  • Applied conflict resolution skills to resolve disputes in a fast-paced environment
Work Study — Student Success Institute
Lone Star College-University Park · Part-time
Mar 2024 – May 2024
  • Researched and compiled content for student success and LinkedIn development workshops
  • Organized and maintained confidential student records per data handling procedures
  • Supported program operations including events, inventory, and student recruitment
Get In Touch
✉
Email
jalenthomas1216@gmail.com
📞
Phone
337-532-9460
👤
LinkedIn
linkedin.com/in/jalen-t-19817a379
📄
GitHub
github.com/JalenHT/IAM-homelab