./bɑːt Bat Otgonbayar
About me

I like security work that is practical, explainable, and useful.

I'm Bat Otgonbayar, a GIAC-certified IT and cybersecurity professional focused on identity management, endpoint security, infrastructure support, Microsoft 365, Sentinel, and PowerShell automation.

Professional journey

Experience across SaaS IT, service desk operations, identity support, endpoint security, infrastructure support, and election technology environments.

Dec 2025 – Jun 2026
Denver, CO

IT Support Technician

AbsenceSoft

Administered SaaS enterprise IAM, Zscaler ZIA, and SentinelOne EDR security workflows for a 300-endpoint hybrid fleet, triaging weekly alerts and executing technical remediations.

Automated SharePoint provisioning using PnP PowerShell and Entra ID while supporting Jenkins deployment pipelines and a Bitbucket to GitHub infrastructure migration.

May 2025 – Aug 2025
Denver, CO

Service Desk Analyst Intern

CannonDesign

Provided Tier 1 and Tier 2 support for a global architecture and engineering firm, including incident resolution, account provisioning, and endpoint management across Windows and Mac environments.

Supported specialized software deployment, IT asset inventory, collaboration tools, process improvements, and documentation.

Nov 2024 – May 2025
Denver, CO

IT Systems Technician I

Onward Energy

Supported hardware, software, and access issues across desktops, laptops, and mobile devices in hybrid environments.

Managed identity lifecycle tasks through Microsoft Entra ID, Active Directory, and Delinea Secret Server while supporting least privilege, RBAC, endpoint security tools, VPN, and PowerShell automation.

Oct 2024 – Nov 2024
Boulder, CO

Technical Support Specialist

Insight Global

Deployed and maintained IT infrastructure across 18 polling sites, supporting secure operations during Election Days.

Managed accounts with ADManager, secured remote access with Duo MFA and GlobalProtect VPN, and supported laptops, routers, printers, barcode scanners, and election infrastructure under cybersecurity policy requirements.

Technical skills

Identity & access management

Microsoft Entra ID Active Directory Delinea Secret Server ADManager RBAC

Security & endpoint management

SentinelOne Zscaler ZIA Morphisec BeyondTrust CheckPoint VPN Duo MFA GlobalProtect

Automation & scripting

PowerShell PnP PowerShell Windows Deployment GPO Management Automation Scripts

Cloud & infrastructure

Microsoft 365 Azure Microsoft Sentinel Windows Server VMware Citrix

Let's connect

I use this site to document labs, writeups, investigations, and the lessons I pick up while building practical security projects.

The best place to connect professionally is LinkedIn, and my public projects live on GitHub.