Hey guys,

I graduate soon and I am hoping to work in cloud engineering and or cloud security roles in the future. I know that is unrealistic out of school, I am hoping to work in a security role or even IAM role if possible. What would be the best path to go down to land a role that gets me closer to cloud sec? Certs? Projects?

Any advice is appreciated.

Resume: [

NAME REDACTED]

[Location Redacted] | [Email Redacted] | [Phone Redacted] | [LinkedIn] | [GitHub]

PROFESSIONAL EXPERIENCE

International Law Firm
Network Operations / Security Operations Intern
June 2026 – Present

• Monitored and investigated security alerts in IBM QRadar and CrowdStrike Falcon Next-Gen SIEM, using OTX/X-Force threat intelligence, OSINT, and log analysis to investigate large outbound transfers, malicious IPs, and impossible-travel events.
• Analyzed Duo MFA authentication logs to triage identity-related security alerts and investigate suspicious authentication activity.
• Investigated phishing and email threats using Proofpoint, Abnormal AI, and Proofpoint Threat Response; analyzed email headers, decoded suspicious URLs, evaluated links using OSINT, and blocked malicious senders.
• Provisioned Windows servers across four global sites and administered Active Directory, including OU placement, least-privilege security groups, and PowerShell-based user lifecycle management.
• Managed hybrid Exchange and Microsoft 365 mailbox access, remediated vulnerabilities identified through Qualys, and supported a VMware-to-Hyper-V migration.

Government Agency
Help Desk Technician Intern
September 2025 – June 2026

• Resolved 50+ weekly ServiceNow tickets supporting 250 users across Windows endpoints, operating systems, VPN connectivity, and network access; documented troubleshooting and remediation.
• Supported user onboarding and offboarding through Active Directory provisioning, MFA enrollment, access reviews, and standardized asset tracking.

Healthcare Organization
IT Security Intern
February 2025 – August 2025

• Triaged phishing incidents using Mimecast, investigated high-risk accounts using CrowdStrike Falcon and Zscaler, and documented indicators of compromise (IOCs) and incident findings incorporated into team playbooks.

PROJECTS

Hybrid Identity & Security Homelab
Proxmox, Microsoft Entra ID, Wazuh | 2026

• Built a private Proxmox homelab and separate Azure workload; automated Active Directory user management and AGDLP-secured SMB shares using PowerShell and provisioned infrastructure with Terraform.
• Scoped Entra Connect synchronization to lab identities and published an internal Nginx application through Microsoft Entra Application Proxy using group assignments, Conditional Access, and MFA without exposing inbound ports.
• Centralized security telemetry from five Windows and Linux agents in Wazuh; tested custom detections for Active Directory changes, ADSync service interruptions, repeated SMB authentication failures, and sudo activity. Isolated Kali testing on a no-route network bridge.

Infrastructure CI/CD Pipeline
Terraform, GitHub Actions, Azure | 2026

• Built GitHub Actions CI workflows for Azure and Proxmox Terraform configurations, automatically running formatting, backend-free initialization, and validation checks on pull requests and main-branch changes.
• Provisioned Azure infrastructure using Terraform, including a virtual network, network security group, public IP, Linux virtual machine, Key Vault, and Storage Account; configured managed identity and least-privilege Key Vault RBAC.

CERTIFICATIONS

• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Fundamentals (AZ-900)
• CompTIA Security+
• CompTIA Network+

EDUCATION

[College Name Redacted]
Bachelor of Science in Information Technology
Expected Graduation: May 2027
GPA: 3.97 | Dean's List: 2024–2026

TECHNICAL SKILLS

Infrastructure & Automation: Terraform, Bicep, GitHub Actions, PowerShell, Bash, Python, Proxmox, VMware, Hyper-V

Identity & Cloud: Active Directory, Microsoft Entra ID, Entra Connect, Microsoft 365, Exchange, Azure RBAC, Azure Policy, Key Vault

Security & Operations: IBM QRadar, CrowdStrike Falcon Next-Gen SIEM, CrowdStrike Falcon, Microsoft Sentinel, Wazuh, Proofpoint, Proofpoint Threat Response, Abnormal AI, Mimecast, Qualys, Zscaler, Duo MFA, KQL, ServiceNow

Networking: DNS, DHCP, VPN, Azure VNets, VNet Peering, NSGs, UDRs, Network Virtual Appliances, Wireshark, Samba