ROBLUIS
DENVER, CO // SYSTEM STATUS: OPERATIONAL
Tactical Discipline. Operational Security. Defensible Systems.
Rob Luis — Cybersecurity Practitioner & 13-Yr USASOC Logistics Veteran. Specializing in identity architecture, threat surface reduction, and high-discipline infrastructure.
// TELEMETRY RAIL
STAGE 00 // 2011
USASOC Logistics Base
STAGE 01 // 2024
Enterprise IT & IAM
STAGE 02 // 2025
Home SOC & Firewall Fabric
STAGE 03 // 2026
Active Operations Console
STAGE 01 // DEPLOYMENT
Multi-VLAN Enterprise SOC & Firewall Fabric
Physical perimeter defense featuring dual OPNsense firewalls, 5 segmented VLANs, and hardware-accelerated WireGuard tunnels.
OPNsense 24.7 · 5 Isolated VLANs · Suricata IDS/IPS · 10Gbps Uplink
Inspect Architecture ->STAGE 02 // LAB CLUSTER
Virtualized SOC & Threat Emulation Lab
3-Node Proxmox VE high-availability cluster running virtualized SOC sensors, isolated attack/defense sandboxes, and enterprise storage.
Proxmox VE 8.2 · Ceph Storage · Wazuh SIEM · Suricata Nodes
Inspect Homelab ->STAGE 03 // OPERATIONS
Hybrid Active Directory & Entra ID Security Hub
Two-tier PKI, Windows Server 2022 domain controller with Entra Connect sync to Microsoft 365 E5 developer tenant. Managed via Intune.
Entra ID P2 · Intune MDM · Windows Server 2022 · Graph API Automation
Inspect IAM Lab ->FIREWALL FABRIC
24.7 HA Pair · Suricata IDS/IPS
SEGMENTATION
VLAN 10-50 · 10Gbps Uplink
VIRTUALIZATION
VE 8.2 Cluster · 3 Nodes
IDENTITY HUB
Hybrid Sync · Intune MDM
Featured Security & Infrastructure
Production-grade lab environments, identity fabrics, and operational security frameworks designed and built under enterprise standards.
SOC & NETWORKING
Multi-VLAN Enterprise SOC & Firewall Fabric
OPNsense 24.7 HA pair, 5 isolated VLANs (Mgmt, Svr, Lab, IoT, Guest), Suricata IDS/IPS, automated daily config backups to encrypted TrueNAS Core.
[OPNsense · Suricata · VLANs · WireGuard · TrueNAS]
IDENTITY & ENDPOINT
Hybrid Active Directory, Entra ID & Intune Architecture
Two-tier PKI, Windows Server 2022 DC with Entra Connect sync to Microsoft 365 E5 dev tenant. Automated onboarding via Intune & Autopilot.
[Entra ID · Intune · PKI · Active Directory · Conditional Access]
GOVERNANCE & RISK
Data Classification & Regulatory Gap Analysis (NIST / CIS)
Comprehensive assessment aligning university service desk operations with NIST CSF 2.0 & CIS Controls v8. Data classification policy for student PII/FERPA.
[NIST CSF 2.0 · CIS Controls · FERPA · Risk Assessment]
AUTOMATION & SCRIPTING
Systems Automation, Identity Orchestration & Graph API Hub
Custom PowerShell module for bulk Entra ID user provisioning, automated license cleanup, and ticketing integration via Microsoft Graph API.
[PowerShell 7 · Graph API · Bash · Proxmox API · Python]
Operational Trajectory & Leadership Evolution
PHASE 01 // 2011 - 2024
Global Special Operations Logistics Leadership
U.S. Army Special Operations Command (USASOC)
Led mission-critical logistics across 4 continents and 26 nations. Zero-fail accountability for equipment, personnel security, and communications gear under extreme conditions.
PHASE 02 // 2024 - PRESENT
Enterprise Systems Administration & Identity Support
MSU Denver IT Service Desk
Administered enterprise identity, endpoint management, and support infrastructure for 20,000+ university students and faculty across multi-platform environments.
PHASE 03 // ACTIVE DEPLOYMENT
Cybersecurity Engineering & SOC Architecture
Active Lab Operations & Academic Capstone
Architecting and operating multi-VLAN home SOC lab with OPNsense, Proxmox virtualization, Suricata IDS/IPS, and automated SIEM threat detection. B.S. Cybersecurity candidate.
Initiate Secure Transmission
Available for security engineering, IAM architecture, and systems infrastructure discussions. Direct communications monitored daily.
Send Message