Aaron Taylor

Building websites and web experiences across Squarespace, WordPress, and custom HTML/CSS/JS — for both paying clients and personal projects. From simple portfolio sites to enterprise-level SSO integrations and custom-coded solutions.

• Custom Squarespace sites with advanced CSS/JS injection and enterprise SSO integration
• WordPress builds with full security hardening, custom themes, and plugin configuration
• Hand-coded HTML/CSS/JS pages and components for precise control and performance
• Client sites across multiple industries — from business landing pages to portfolio showcases
• Personal projects including this very site you're looking at right now

A suite of purpose-built tools for managing Microsoft Active Directory and Azure AD across two organizations — GUI desktop apps, a web dashboard, and PowerShell automation that eliminate repetitive admin work and reduce human error across the entire identity lifecycle.

• GUI desktop app for daily user management — faster than the standard AD console
• Web-based identity dashboard with live counts, MFA gaps, and stale account alerts
• PowerShell module for bulk provisioning, offboarding sweeps, and license audits
• Self-service password reset portal that deflects 34+ helpdesk tickets per month
• Automated monthly identity health reports delivered by email

Deployed and hardened a full enterprise email security stack across two organizational entities using Barracuda Email Security Service and Microsoft 365 Defender — including real-world incident response against an active Business Email Compromise campaign.

• Configured Barracuda ESS policies for inbound/outbound filtering, spoofing protection, and quarantine workflows
• Led incident response on a live multi-platform BEC phishing campaign routing through spoofed domains
• Used Microsoft Purview eDiscovery and Defender Threat Explorer to trace and contain the attack
• Blocked malicious domains and drafted org-wide phishing awareness alert
• Hardened DKIM, DMARC, and SPF records across all managed domains

OIDC-based single sign-on between Squarespace Enterprise and Azure Active Directory — giving a multi-entity organization seamless, centrally-managed authentication across all Squarespace properties without separate credentials.

• Registered Squarespace as an OIDC app in Azure AD with client ID, secret, and redirect URIs
• Configured full OIDC authorization code flow between Squarespace and Azure AD
• Scoped access to specific security groups per organizational entity
• Applied conditional access policies enforcing MFA on every SSO login
• Set up Azure AD sign-in log monitoring and documented secret rotation schedule

Wordfence Premium deployed and managed across client and organizational WordPress sites — with real threats caught and handled including malware injection, a compromised plugin, and active brute force campaigns. Also engaged directly to clean already-infected sites.

• Malware injection — obfuscated PHP, backdoor shells, and SEO spam found and removed
• Compromised plugin — file integrity check flagged unauthorized code, plugin quarantined
• Brute force attacks — thousands of daily login attempts blocked via Wordfence firewall
• Hired for active malware removal on already-compromised sites — full clean + hardening
• Root cause identified and closed on every incident — not just symptoms treated

Ground-up network infrastructure design and deployment for businesses and organizations — structured cabling, managed switching, routing, enterprise WiFi, and firewall configuration built to scale from day one.

• Structured cabling — runs, patch panels, rack organization
• Managed switching — VLANs, trunking, QoS configuration
• Routing — inter-VLAN, WAN failover, traffic shaping
• Enterprise WiFi — coverage planning, access point placement, SSIDs
• Firewall & security — rules, segmentation, remote access

End-to-end corporate live stream production — one operator handling the entire signal chain from network infrastructure and camera setup through encoding, multi-camera switching, and live broadcast management. Zero broadcast failures across all events.

• Network — dedicated uplink, wired ethernet, QoS, backup 4G/5G failover
• Camera & AV — multi-angle placement, audio capture, HDMI/SDI routing
• Encoding — OBS scene configuration, bitrate tuning, local recording backup
• Live switching — camera cuts, graphics, lower thirds, presenter cues
• Day-of management — full rehearsal, stream health monitoring, post-event delivery

End-to-end custom PC builds for clients and personal projects — component selection, cable management, cooling optimization, and full configuration. Three featured builds ranging from a mid-range gaming rig to a flagship i9-13900K / RTX 4090 workstation.

• The 5080 Beast — Ryzen 7 9800X3D / RTX 5080 16GB / DDR5-6400 64GB, latest flagship client build
• Snow Trooper — i9-13900K / RTX 4090 FE in Fractal Meshify 2 RGB with white theme
• H5 Flow Build — i5-13600KF / RTX 3060 Ti client build in NZXT H5 Flow
• FortCon Raffle Build — i7-9700KF / RTX 2070 Super, 80% parts won at FortCon 2022 LAN party, sold as a kid's Christmas present

High-end physically printed proxy Pokémon cards — holographic reproductions of rare and vintage cards spanning 1st Edition Base Set, Jungle, Team Rocket, Neo Revelation/Destiny, and modern Sword & Shield secret rares. 18 cards in the collection, all holographic.

• Charizard Holo 1st Edition — 1999 Base Set, the most iconic card in the hobby
• Shining Charizard & Shining Mewtwo — 2002 Neo Destiny 1st Edition
• Charizard VMAX FA — 2020 Champions Path Secret Rare
• Dark Charizard, Dark Dragonite, Dark Blastoise, Dark Gyarados — Team Rocket 1st Edition
• Full Eeveelution set — Vaporeon, Flareon, Jolteon from Jungle 1st Edition