>get new alert that local security group config on C1 server has been changed
>immediately review as priority
>notice Pajeet engineer has added his main (not even admin) account to config log aggregation folders, massive exposure risk
>immediately call Pajeet to ask what the fuck, the regulatory risk alone is enough to sink him
>he answers with a mouthful of apple
>tells me it was actually his buddy adding his account to a C1 Prod server for "testing" because his buddy's account lacked some privileges
>doesn't understand concepts like "privilege escalation" or "access management" when I explain them

I have always thought the whole "Pajeet offshoring will fail spectacularly" thing was a little overcooked but this dude's committed like 5 different sackable offences and cannot understand even one of them.