Samuel Msafari

At Geothermal Development Company (GDC), I owned the security, compliance, and identity workstream for a 1,000+ user tenant. I raised Microsoft Secure Score from 38% to 91% and Kenya Data Protection Act compliance from 40% to 76% using Microsoft Sentinel, Defender XDR, and Purview. I hardened tenant, device, and identity configurations against CIS Benchmark v3.0.0, deployed sensitivity labels and retention policies, and configured Entra ID Conditional Access and MFA. I also triaged and contained malware and credential-compromise events in Sentinel and Defender XDR. At Trackside Technologies Ltd, I led privacy-by-design work for a greenfield investor portal, including DPIA inputs and a control checklist used at the design stage. I also designed its KYC/AML verification flow, five-role access model, and append-only audit logging for the pre-production build.