Identity & Access
IAM, least privilege, RBAC, MFA, Conditional Access, privileged access, access reviews and Zero Trust identity.
CLOUD SECURITY ENGINEER • FOUNDER • EDUCATOR
Securing cloud systems.
Building practical security products.
I’m Kafayat “Kaffy” Faniran, a cloud security professional working across IAM, security monitoring, threat detection, incident response, Zero Trust and cloud governance across AWS, Microsoft Azure and Google Cloud.
Open to cloud security opportunities, technical collaborations and speaking.
10,500+LinkedIn followers
2,500+Newsletter subscribers
3Cloud ecosystems
FounderThe Cloud Forge
SELECTED SECURITY WORK
Evidence before claims.
Deep technical case studies showing the problem, risk, architecture, implementation, validation and lessons behind the work.
SecurityAlert
| where Severity in ("High", "Medium")
| summarize count() by AlertNameSENTINEL • KQL
Microsoft Sentinel SOC & Threat Detection
Log ingestion, custom KQL detection, incident simulation and investigation using Microsoft Sentinel.
Microsoft SentinelEntra IDKQLIncident Response
Read technical case study ↗IDENTITY
RBAC
MFA
PIM
REVIEWS
Enterprise Azure IAM Transformation
Current-state assessment and target IAM design addressing excessive privilege, stale access, weak authentication and governance gaps.
Entra IDRBACConditional AccessPIM
Explore the IAM case study ↗AI COACHASSESSMENTEVIDENCERLS + SECURITY
CF
Building & Securing The Cloud Forge
Security architecture for an AI-powered cloud security learning platform, from Row Level Security and secrets to evidence handling and secure product workflows.
Next.jsSupabasePostgreSQLAI Security
View founder case study ↗TECHNICAL CAPABILITY
Security organised around the problems that matter.
Detection & Response
Microsoft Sentinel, Wazuh, KQL, centralised logging, threat detection, incident triage and investigation.
Cloud Security Engineering
AWS, Microsoft Azure and Google Cloud hardening, segmentation, encryption, secure architecture and attack surface reduction.
Governance & Assurance
NIST CSF, CIS Benchmarks, ISO 27001, SOC 2, PCI DSS, risk assessment, audit readiness and evidence collection.
FOUNDER CASE STUDY
Closing the gap between learning security and proving you can do the work.
The Cloud Forge is an AI-powered, project-first learning platform designed to help aspiring cloud security professionals practise realistic work, receive contextual guidance, validate their skills and produce evidence employers can assess.
LEARN→BUILD→DOCUMENT→DEMONSTRATE
Explore the product & security architecture ↗THE CLOUD FORGE / SECURITY LAYERS
01Identity & AccessAuthentication, authorisation, RLS
02Evidence SecurityUploads, ownership, storage boundaries
03Application SecuritySecrets, validation, server-side controls
04Operational SecurityLogging, monitoring, backup, CI/CD
CREDENTIALS
Structured learning. Applied through projects.
Credentials support the technical story, but the portfolio prioritises demonstrable security work and evidence.
Diploma in Cybersecurity
AltSchool Africa
12-month programmeCybersecurity Programme
ALX
CompletedGoogle Cloud Cybersecurity Professional Certificate
Google Skills Boost
Professional certificateGoogle Cybersecurity Professional Certificate
AWS Certified Cloud Practitioner
Amazon Web Services
Cloud certificationMicrosoft Certified: Azure Fundamentals
Microsoft
AZ-900WRITING & PUBLIC EDUCATION
Technical enough for engineers. Clear enough for decision-makers.
NEWSLETTER
CEO Cloud Security Memo
Cloud security, resilience, IAM and cyber risk translated into practical guidance for business leaders.
2,500+ subscribersTECHNICAL EDUCATION
Cloud Beginners
Practical cloud and cybersecurity education focused on clarity, employability and real-world application.
IN PRODUCTION
The A–Z of Identity and Access Management
Cloud-specific practical editions for Microsoft Azure, AWS and Google Cloud.
WORK WITH ME
Looking for someone who can connect cloud security, product thinking and clear communication?
I’m open to cloud security engineering opportunities, technical collaborations, cybersecurity education, speaking and product partnerships.
Start a conversation ↗