Portfolio

Case study

End-to-end identity lifecycle — PKS Szczecin

PKS Szczecin · Transport & Public Services · Poland · 2002–2023

Situation

PKS Szczecin is the largest bus transport operator in the region, running operations across hundreds of employees and thousands of customers. It had accumulated a landscape of independent systems — HR, scheduling, ticketing, helpdesk, physical access control — with no information flows between them.

Every joiner, mover, or leaver triggered a chain of manual steps across multiple systems. Access was granted inconsistently, rarely reviewed, and almost never revoked on time.

The real problem

The technical challenge was straightforward. The harder problem was organisational: years of manual processes had become embedded in how people worked. This was a digital transformation project as much as an IAM project.

What I built

I designed and implemented an end-to-end JML lifecycle with HR systems (Comarch XL and Veritum) as the authoritative source of identity truth. Changes in HR propagated automatically to Active Directory and downstream to all connected systems: scheduling, ticketing, helpdesk, and physical access control.

~30% reduction in operational IT costs through automation and elimination of manual provisioning overhead.

What this required

Beyond the technical integration work, the project required sustained stakeholder engagement across HR, operations, and IT. Getting that right was the difference between a system that works on paper and one that actually gets used.

Certifications & Competitions

Continuously certified since 2013. Core Microsoft credentials renewed annually. Verify on Microsoft Learn →

Core — active & annually renewed

Competitions

Ongoing

Wiz Ultimate Cloud Security Championship

Wiz · 12 months · 12 challenges · 2025–2026

Hands-on cloud security challenges covering misconfiguration, privilege escalation, lateral movement, and identity attack paths across cloud environments.

11 / 12 challenges completed

Active

hackArcana — Kubernetes Security Track

hackArcana · Top 100 globally · 455 pts

Kubernetes attack chain: Recon → Foothold → Elevation → Escalation. Practising offensive techniques to sharpen defensive architecture thinking.