Cybersecurity Engineer · Open to full-time roles

Koffi Jean-Marie Amedjonekou

Security engineer — identity, cloud, and vulnerability management

I design identity and cloud controls that hold up under audit, then back them with detection engineering and vulnerability management.

View work

Resume

KJA

13
Certifications earned
4
Case studies published
M.S.
Cybersecurity
Open
Full-time · Boston area · open to remote

Selected work

Case studies

Applied security engineering across identity, cloud, network, and governance. Method and outcome, not exploit detail.

Featured

Zero Trust IAM for 40,000 Identities

Capstone

Context: A university with 40,000+ students needed centralized identity and access management aligned to Zero Trust, without a big-bang cutover.
Approach: Designed the control plane on Microsoft Entra ID: 25 simulated identities, four Conditional Access policies enforcing MFA, and a PowerShell bulk-provisioning template for full-scale rollout. Mapped the design to NIST CSF 2.0, ISO/IEC 27001:2022, and NIST SP 800-207.
Outcome: 100% Conditional Access policy enforcement across the validation set, with zero failed policy evaluations.

Zero Trust
Microsoft Entra ID
MFA
Conditional Access
NIST CSF 2.0
ISO 27001
PowerShell

Case study Repository

Secure Network Design

Network Security

Context: A financial-medical acquisition needed a merged network that could satisfy PCI-DSS, HIPAA, and GLBA inside a $50K budget.
Outcome: A documented target architecture for the merged environment: hardened paths, cloud placement, and compliance-mapped controls within budget.

Zero Trust
Azure
Fortinet
PCI-DSS
HIPAA
Defense-in-Depth

Case study Repository

Cloud Security Implementation

Cloud Security

Context: A shipping company needed to leave on-premises infrastructure for Azure IaaS without weakening identity, key, or backup controls.
Outcome: A hardened Azure IaaS landing pattern: scoped roles, protected keys, and backup posture that can be audited against the mapped frameworks.

Azure IaaS
RBAC
Key Vault
FISMA
PCI-DSS
NIST 800-53

Case study Repository

Security Audit and Compliance

GRC

Context: A healthcare IT company needed its security posture measured against NIST SP 800-53, not a generic checklist.
Outcome: A gap analysis and remediation roadmap the organization can sequence — control families, owners, and a path to PCI-DSS for cardholder data.

NIST 800-53
PCI-DSS
FISMA
Risk Assessment
SIEM
RBAC

Case study Repository

Also building

Home lab

Self-hosted security architecture lab running Proxmox, pfSense, Wazuh, Docker, and Home Assistant OS — where I test what I design.

Proxmox
pfSense
Wazuh
Docker
Home Assistant OS

OuraGrove

Independent EdTech platform built on secure, offline-first digital infrastructure.

EdTech
Offline-first
Security-first

TogoAho

TypeScript progressive web app covering Togolese culture, regional history, tourism, and gastronomy.

TypeScript
PWA

Capabilities

Skills

Self-assessed depth of hands-on experience, stated on a named scale rather than a percentage.

Advanced: applied across multiple projects
Proficient: hands-on in project or lab work
Working: coursework and guided labs

Offensive Security

Penetration testing and exploitation

Vulnerability AssessmentAdvanced
Penetration TestingProficient
Metasploit and Burp SuiteProficient
Exploit DevelopmentWorking
Social EngineeringWorking

Defensive Security

Detection, response, and hardening

Threat Detection and AnalysisAdvanced
Incident ResponseProficient
SIEM ConfigurationProficient
Endpoint ProtectionProficient
Network MonitoringProficient

GRC and Compliance

Governance, risk, and regulatory

Risk ManagementAdvanced
Compliance FrameworksAdvanced
Regulatory RequirementsAdvanced
Security AuditingProficient

Tools and Platforms

Rapid7 ecosystem and infrastructure

Rapid7 InsightVMAdvanced
Rapid7 InsightIDRAdvanced
Rapid7 InsightAppSecAdvanced
Cloud (AWS, Azure, GCP)Proficient
Linux and Windows AdminProficient
Scripting and AutomationProficient

Development and Engineering

Shipped web software, security-first

TypeScriptAdvanced
Progressive Web AppsAdvanced
Offline-first architectureAdvanced
Secure API integrationProficient
Claude API and agentic workflowsProficient

Systems and Home Lab

Self-hosted security architecture

ProxmoxProficient
DockerProficient
pfSenseProficient
WazuhProficient
Home Assistant OSProficient

Credentials

Certifications

13 earned across CompTIA, Rapid7, Microsoft, and the cloud foundations, plus the two in progress.

CompTIA

Security+
Network+
CySA+
PenTest+

Rapid7

InsightVM
InsightIDR
InsightAppSec

Microsoft

AZ-900
SC-900
AI-900

Cloud and foundations

AWS Cloud Practitioner
Google IT Support
ISC2 Certified in Cybersecurity

In progress and next

RHCSA

In progress · 2026

Linux system administration — users, storage, networking, and security on RHEL.

OSCP (PEN-200)

Planned · Next

Hands-on penetration testing exam. Building Active Directory attack-path fundamentals first.

Background

Education

I hold an M.S. in Cybersecurity and Information Assurance and work across identity, cloud, and vulnerability management — Rapid7 InsightVM and InsightIDR as the enterprise tooling, and a home lab of Proxmox, pfSense, and Wazuh where I test what I design. I also ship software: OuraGrove, an offline-first EdTech platform, and TogoAho, a TypeScript progressive web app. My degrees in education came first, and they are why I noticed that EdTech is where security is weakest and the stakes highest — the users are minors and the data is academic records.

Master of Science, Cybersecurity and Information Assurance

Graduated April 2026

Western Governors University

Capstone: Zero Trust IAM for 40,000 identities, validated on Microsoft Entra ID.
Coursework across network security, cloud security, and NIST SP 800-53 governance, each with a published project.

Read the capstone case study

Bachelor of Arts, Education

Graduated 2019

Université de Lomé · Lomé, Togo

Direct-care and special-education background — translating complex technical concepts into accessible learning methodologies.

Bachelor of Arts, English

Graduated 2017

Université de Lomé · Lomé, Togo

Memberships

IEEE
PMI
ISACA

Community

Founder: Togo Cybersecurity Research Collective (TCRC)
Co-organiser: High-school youth hackathons promoting early tech literacy
Participant: MIT Africa Innovate Hackathon, Harvard Africa Development Conference, ISACA GranIT

Currently

What I'm working on

Focus: Active Directory attack paths — Kerberoasting, AS-REP roasting, and Pass-the-Hash — in a self-hosted lab, documenting enumeration with BloodHound and PowerView ahead of PEN-200.
Studying: RHCSA, targeting 2026. Linux administration is the gap between reading a finding and fixing the host it came from.
Research: Preparing applied research for upcoming international cybersecurity conferences — an argument I'm developing that offline-first EdTech design is also a privacy and security architecture.
Looking for: Open to full-time security engineering and SOC analyst roles. Boston area · open to remote.

Updated October 2026

Contact

Get in touch

Whether you have a role, a question, or just want to talk security, I'd like to hear from you.

Email: jm18306@gmail.com
Location: Boston area · open to remote
Availability: Open to full-time security engineering and SOC analyst roles