INFRASTRUCTURE & SECURITY ENGINEER · GREATER SEATTLE, WA

Secure systems.
Sound decisions.

Ten-plus years running classified networks and secure datacenters for DoD programs: dozens of ATOs, a 12-administrator site, and the security tooling I now build myself. Available now, Greater Seattle or remote for infrastructure security, DevSecOps, platform and systems engineering roles.

View resume Explore projects

10+years on classified networks and secure datacenters

Dozensof ATO efforts contributed to; two led end to end

12administrators led as datacenter Site Lead

$100K+saved per year through microsegmentation

Selected work

All projects

netstig

Network STIG evidence, automated

Pulls running configs from batches of devices, diffs them against baselines and emits STIG Viewer .ckl checklists in four commands.

Python · Netmiko · NAPALM · Nornir · Typer CLI · v1.3.0

Spotter

A macOS terminal with an AI you set the level on

Four assistance levels from Off to Tandem; secrets stay in the Keychain by reference and every risky command stops at an approval sheet. 1,700+ tests.

Swift 6 · SwiftUI · AppKit · SwiftTerm · iOS companion

Self-hosted platform

The VPS that runs this site, operated like production

GitLab CE with CI, OpenBao secrets delivered by AppRole, an nginx edge proxy with automated TLS, and containers that run read-only, non-root, with every capability dropped.

Rocky Linux 10 · Docker Compose · OpenBao · GitLab CE · nginx · Tailscale

STIG Checklist Editor

Desktop checklist review and export

Imports Cyber Exchange packages, tracks review state and evidence per rule, and exports CKL and STIG Viewer 3 CKLB files offline.

Go + Wails · React/TypeScript UI · Windows · macOS · Linux

How I work with AI

I define the problem, make the architecture and security decisions, and say where AI helped.Read my approach

Secure systems.Sound decisions.