O'Reilly
Zero Trust Networks, 2nd Edition
The definitive guide to Zero Trust network architecture. Principles, design patterns, and implementation across modern infrastructure.
View on Amazon
Security at the intersection of architecture and practice.
Two decades building and shipping security products. Writing about what actually works in cloud, Zero Trust, and AI from someone who does the work.
Published & featured
O'Reilly Media Microsoft Press Wiley RSA Conference ATARC IEEE (ISC)² CISSP GIAC Advisory Board
Live & upcoming
All sessions & training Train live with me on AI security and Zero Trust.
- Upcoming Zero Trust
Zero Trust for AI Systems
O'Reilly Live Online Training Online
Reserve a seat - Upcoming AI
Hands-On Microsoft Foundry
O'Reilly Live Online Training Online
Reserve a seat - Upcoming Attack
Anatomy of a Cyberattack
O'Reilly Live Online Training Online
Reserve a seat - Recently delivered Digital Identity
Entra Agent ID: EMEA AI Bootcamp
Microsoft EMEA Bootcamp, Entra Suite and Entra Agent ID Online, Gulf, Europe, Africa
View recap
Hands-on courses on Microsoft Foundry agents, Zero Trust for AI systems, attack anatomy, and identity. Recorded sessions and full archive on the speaking & training page .
Books
Lessons from building real systems, written down.
O'Reilly
Azure Confidential Computing and Zero Trust
Confidential computing on Azure applied through a Zero Trust lens. For architects and engineers building on Azure.
View on Amazon
Wiley
Programming Microsoft's Cloud
Building applications across Windows Azure and Office 365. Cloud development patterns for the Microsoft ecosystem.
View on Amazon
Microsoft Press
Exam Ref SC-300 Microsoft Identity and Access Administrator
The official Microsoft Press exam reference for SC-300. Identity and access management across Azure AD, hybrid environments, and Microsoft 365.
View on AmazonRecent writing
Posts from practice, not theory.
- October 19, 2026 5 min read AI
Who Gets a Say? An AI Movie and TV Watchlist
From learning about AI in college to asking who gets a say today, a personal watchlist of stories about choice, consent and responsibility.
- October 10, 2026 19 min read AI Zero Trust
Zero Trust for AI: Part 1, What the OpenAI and Hugging Face Incident Reveals
Trace the OpenAI and Hugging Face incident through agent authority, shared state, dataset processing flaws, and privilege expansion to understand what Zero Trust must enforce.
- October 6, 2026 5 min read Digital Identity
Entra ID Tip: Who's Behind That Tenant GUID?
Identify an unfamiliar Entra tenant with Microsoft Graph and PowerShell, and understand why discovering a directory does not grant access to it.
Stay in the loop
New writing, when it lands.