Infrastructure · Identity · Security

I make complex systems understandable—then make them work.

I’m Damon Garrison, a senior infrastructure and identity consultant. I help organizations navigate migrations, modernization, security boundaries, and the hard failures that live between teams and technologies.

See the evidence Start a conversation

58,000endpoint upgrade program

30 → 1tenant consolidation

25 → 1AD domain consolidation

15,000user cloud-only strategy

Selected work / 01–06

The work is the argument.

Not a wall of product names. Six examples of the environments, decisions, and boundaries behind the résumé.

Identity modernization · Professional work

Moving identity and endpoints from hybrid dependence to cloud-first operation

Designed and implemented a strategy to move 15,000 users from AD-primary to cloud-only identity, alongside an in-place conversion plan for 12,500 endpoints moving from Intune hybrid to Intune-only. The surrounding work included Autopilot strategy, tenant-to-tenant migrations, consolidation of 30 operating-company tenants, and an integration SOP for acquired-company directories.

Why it was hardIdentity, device state, organizational boundaries, and user continuity had to move together.

Damon’s roleStrategy, design, implementation, migration planning, and durable operating guidance.

15K

Enterprise migration · Professional work

Consolidating 25 Active Directory domains into one corporate domain

For a large enterprise environment, redesigned Active Directory topology, migrated 25 individual domains into a new corporate domain, moved an Office 365 tenant and email domain for 12,000 users, modernized AD Certificate Services from 2003 to 2019, and performed directory remediation and cleanup.

Decision surfaceTopology, trust, identity continuity, certificates, messaging, and staged remediation.

Evidence boundaryThe résumé supports design and implementation; internal architecture details remain private.

25→1

Endpoint engineering · Professional work

Engineering repeatable change at 58,000-endpoint scale

Created and deployed a Windows 10 in-place upgrade program across 58,000 endpoints using SCCM. Designed automated BIOS-update logic, applied NIST security baselines, upgraded core management infrastructure, deployed Azure Cloud Management Gateway and Upgrade Analytics, and led planning, execution, and training.

ApproachAutomate the decision logic, measure readiness, secure the baseline, and make the rollout operable by others.

PatternThe same method was applied in other environments of 38,000 and 18,000 endpoints.

58K

AI-augmented systems engineering · Personal R&D

DevNet: building evidence boundaries into agentic technical work

DevNet is a Rust research workspace for append-oriented incident knowledge: observations persist, corrections remain visible, evidence is anchored, and unknowns stay unknown. Damon directs differentiated AI workstreams through explicit scope, checkpoints, adversarial review, durable state, and Human decision authority.

Supported nowA five-crate workspace and a recorded clean run of 52 tests plus one doctest against the encoded corpus.

Not yet claimedProduction readiness, semantic adequacy, architectural superiority, or demonstrated real-world utility.

R&D

Identity security engineering · Public work

AD + Entra Identity Audit: turning directory state into reviewable evidence

A public, read-only PowerShell audit tool that inventories security-relevant configuration across Active Directory and Microsoft Entra ID, normalizes the results, and produces a native RTF audit book without Microsoft Word or COM automation.

What is inspectableCollectors cover topology, privileged identity, authentication policy, service accounts, delegation, Conditional Access, MFA registration, applications, risky users, access reviews, and related evidence.

Engineering boundaryThe tool does not modify directory objects, export credentials, claim compliance, prove exploitability, or replace expert review. Missing permissions, modules, licenses, APIs, and datasets remain visible as collection notes.

Inspect the code Read the sanitized writing sample

OPEN

Cyber recovery · Professional work

Restoring infrastructure when the operating environment is the incident

Across four completed cyber-recovery engagements—including healthcare and large-enterprise environments—Damon worked assigned technical shifts supporting infrastructure restoration, system validation, troubleshooting, cross-team coordination, and time-sensitive operational reporting.

Why it was hardThe work combined damaged or untrusted infrastructure, incomplete context, multiple engineering teams, extended shifts, and service-restoration deadlines.

Evidence boundaryThe archive supports participation and completed delivery across four engagements. It does not support claiming sole incident command, independent ownership of the recovery, or undisclosed technical details.

4×

Working method

Evidence before certainty.

The job is rarely “configure the product.” The job is to establish what is true, decide what matters, and make consequential change without losing control of the system.

01
Observe the system
Separate symptoms, reports, and assumptions from measured state.
02
Build competing explanations
Look for evidence that can discriminate—not merely confirm.
03
Bound the change
Define authority, risk, validation, and backout before execution.
04
Leave durable knowledge
Turn the reasoning into architecture, decisions, SOPs, and checkpoints.

Current edge

“Use AI aggressively. Keep Human authority where consequences live.”

Damon’s AI practice is systems engineering, not prompt theater: assign bounded roles, preserve provenance, challenge confident answers, detect context failure, maintain recoverable state, and require evidence before promotion.

That makes the practice relevant to AI research infrastructure, secure agent pipelines, and technical organizations that need velocity without surrendering governance.

About Damon

Broad enough to see the system. Precise enough to change it.

For more than two decades—and across more than 30 completed customer projects documented in the available delivery archive—Damon has worked across the seams of enterprise technology: Active Directory and Entra ID, cloud and on-premises infrastructure, endpoint platforms, messaging, security controls, virtualization, and the organizational machinery required to move them safely.

His roles have ranged from hands-on consultant to architect, managing partner, and security team lead. The throughline is technical leadership without distance from the evidence: investigate the environment, make the design legible, coordinate the change, and leave behind a system people can operate.

Best fit

Principal / Staff Infrastructure Engineering
Identity or Security Architecture
Cloud / Platform Architecture
AI Research Infrastructure
Technical Leadership & Advisory

Have a difficult system?

Let’s make it understandable.

damonjgarrison@gmail.com