Skip to content
View nurazhardotcom's full-sized avatar
34 followers · 34 following

Achievements

Achievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: Pull SharkAchievement: YOLO

Achievements

Achievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: Pull SharkAchievement: YOLO

Block or report nurazhardotcom

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
nurazhardotcom/README.md

Nur Azhar

Identity & Security Systems Practitioner · IAM/PAM · Security Automation

Website LinkedIn GitLab Email

About

I am an identity and security systems practitioner with 7+ years of enterprise infrastructure, IAM/PAM, and security operations experience across regulated, high-availability environments in Singapore. My operational foundation includes CyberArk PAM, Active Directory, Entra ID, regulated infrastructure, and CyberTrust Mark / ISO 27001 ISMS delivery.

My current work turns the durable identity problems—authentication, authorization, privilege, delegation, and auditability—into deterministic, inspectable automation using Clojure, Babashka, EDN, OPA/Rego, and CI/CD controls.

Current technical direction

I am extending this foundation into workload identity and controlled automation: making access explicit, time-bounded, revocable, and auditable as systems become more distributed.

Selected open-source repositories

Repository What it demonstrates
🚦 identity-policy-as-code OPA/Rego IAM gates over Terraform plans, denying wildcard permissions and unsafe inline policies.
🛡️ security-tools Babashka/Clojure security automation for findings, access reviews, PAM requests, and IAM workflows.
🔒 pdpa-sg-clj Singapore PDPA and secret-exposure scanning for repositories and pipelines.
🧪 aur-audit Linux supply-chain inspection for obfuscated payloads and suspicious build behavior.
🇸🇬 mcpf-adapter Babashka CLI for structured Singapore MyCareersFuture job data.

Capability foundation

  • IAM/PAM: CyberArk vaulting and session recording; Active Directory and Entra ID; least-privilege access control.
  • Security operations: IBM Guardium DAM, Carbon Black EDR, Tenable Nessus, high-availability infrastructure support.
  • Compliance: CSA CyberTrust Mark Promoter Tier delivery; ISO 27001 Annex A ISMS execution.
  • Automation: Clojure/Babashka, EDN, OPA/Rego, Python/Bash, GitHub Actions, GitLab CI, Linux, containers.

Research

Technical writing and architecture notes are published at nurazhar.com, including secure automation and agentic systems, Replacing Imperative Scan Code with Rego, and the full archive.

Contact

I am available for IAM/PAM, identity operations, security automation, and infrastructure-security roles.

Pinned Loading

  1. pdpa-sg-clj pdpa-sg-clj Public

    Singapore PDPA compliance-as-code toolkit with static analysis, PII redaction, and validation data for AI agents and applications.

    Clojure

  2. identity-policy-as-code identity-policy-as-code Public

    Deterministic IAM security gate — OPA/Rego deny-sets over normalized Terraform plans, enforced in CI

    Open Policy Agent