O'Reilly
Zero Trust Networks, 2nd Edition
The definitive guide to Zero Trust network architecture. Principles, design patterns, and implementation across modern infrastructure.
View on Amazon
Security at the intersection of architecture and practice.
Two decades building and shipping security products. Writing about what actually works in cloud, Zero Trust, and AI from someone who does the work.
Background and credentials
- Product Lead, Microsoft Security Engineering
- Lead author of multiple books with O'Reilly, Microsoft Press, and Wiley
- CISSP
- GIAC Advisory Board
- Microsoft and CSA Certified Trainer
- RSA Conference Speaker
Books
Lessons from building real systems, written down.
O'Reilly
Azure Confidential Computing and Zero Trust
Confidential computing on Azure applied through a Zero Trust lens. For architects and engineers building on Azure.
View on Amazon
Wiley
Programming Microsoft's Cloud
Building applications across Windows Azure and Office 365. Cloud development patterns for the Microsoft ecosystem.
View on Amazon
Microsoft Press
Exam Ref SC-300 Microsoft Identity and Access Administrator
The official Microsoft Press exam reference for SC-300. Identity and access management across Azure AD, hybrid environments, and Microsoft 365.
View on AmazonRecent writing
Posts from practice, not theory.
- March 21, 2026 7 min read Security
I Passed the CISSP in a Long Weekend. Here's the Honest Story
I've been taking certifications for over twenty years. Most of them blurred together. Study for weeks, memorize a bunch of stuff, dump it into an exam, forget half of it by dinner. You know the drill.
- August 9, 2020 1 min read Security
Podcast: Security Patterns For Client-Side Apps Running In The Browser
Great to have Dr. Philippe De Ryck on the podcast. He talked about various security challenges faced by developers while working with client-side applications.
- May 11, 2019 1 min read Podcast
Podcast | R3's Corda platform
In this podcast, I talk to Austin from R3 talks about technical aspects of R3 Corda including its architecture, consensus, programming model, etc.
Stay in the loop
New writing, when it lands.