Summary #
I’m a security enthusiast and aspiring DevSecOps engineer with a focus on building resilient, hardened infrastructure. My philosophy is simple: security shouldn’t be an afterthought, it should be baked into the design from day one.
My playground is my home lab, where I spend my time tinkering. I’m a staunch advocate for Open Source Software and prefer the “hard way” of doing things-not because it’s easy, but because it’s usually the more secure way to operate.
When I’m not automating clusters or hardening systems, you’ll likely find me:
- Building: Developing “Daisy,” an animal intake platform using Go and Svelte.
- Mentoring: Teaching cybersecurity fundamentals through hands-on demonstrations of ciphers and ethical hacking tools.
- Tweaking: Refining my setup or experimenting with 3D printing.
- Decompressing: Diving into high-fidelity audio or heading outdoors for a camping trip.
I value transparency, deterministic code, and the constant pursuit of a more secure digital footprint.
Technical Toolkit #
Infrastructure & Orchestration #
- Kubernetes: Building and managing clusters with a focus on immutable infrastructure and Talos Linux.
- Virtualization: Experience with Proxmox, Docker, and LXC.
- Networking: Implementing BGP routing for services using MetalLB and pfSense.
Security & Identity #
- IAM / IdP: Expertise in Keycloak, FreeIPA, Active Directory federation, Imprivata Identity Governance, and Microsoft Entra ID.
- Secret Management: Utilizing HashiCorp Vault for secure, centralized credential handling.
- Hardening: Applying “Security-as-Code” principles to CI/CD pipelines and container deployments.
Development #
- Languages: Go (Golang), Java (Beanshell and vanilla), C# (.net), and SQL
- OSS Advocacy: Prioritizing open-source, self-hosted solutions to maintain data sovereignty and transparency.
Hardware & Lab #
- Homelabbing: Maintaining a 24/7 environment for testing enterprise-grade security architectures, and also for friends.
Fun fact: the source code of this website is fully open, viewable on Codeberg