SYSTEMS / SECURITY / INFRASTRUCTURE / AI / SOFTWARE

I build complicated things, then remove everything they don’t need.

Architecture, infrastructure, security, automation, and software built around explicit constraints and observable failure.

Explore my work Resume

Press / or ` for the command interface.

CURRENTLY BUILDING

Selected systems

All projects →

activeAppliance compiler

APPLIER

A stateful configuration compiler that turns minimal UBI-family bases into purpose-built appliances with security, efficiency, and modularity as first-order constraints.

containersautomationsystemssecurity

Case study

activeElastic Kubernetes control plane

CERBERUS 2.0

Lean upstream Kubernetes on Debian that begins as one useful hybrid node, adds workers quickly, and expands the control plane only when the cluster crosses explicit topology tiers.

kubernetesdebianansibledistributed-systems

Case study Source

activeOffline infrastructure appliance compiler

STOKER

A declarative Debian ISO builder that compiles unattended installation, offline packages, networking, Ansible projects, manifests, and recovery-friendly controller tooling into a portable infrastructure appliance.

debianisoansibleofflinenetworking

Case study Source

prototypeLightweight incident-response sensor

SENTINEL

A small C-based Linux telemetry daemon for rapid incident response and threat hunting, emitting portable JSON events without requiring a heavyweight endpoint platform.

clinuxincident-responsetelemetry

Case study Source

activeDeployable infrastructure platform

DIP

A rebuildable cyber-response infrastructure platform that uses Proxmox or VMware-oriented deployment tracks to stand up networking, collaboration, case management, storage, and security tooling under time pressure.

proxmoxansibleincident-responseinfrastructure

Case study Source

activeHardened cross-platform telemetry agent

GARGOYLE

A Rust-based Linux and Windows security observer that correlates host activity into a normalized event contract while deliberately refusing to become a remote command framework.

rustlinuxwindowssecuritytelemetry

Case study Source

activePortable multi-distro repository mirror

OFFLINEREPO

A config-driven repository mirroring system for carrying APT, RPM, and APK ecosystems across disconnected boundaries and serving them locally with preserved package-management workflows.

linuxair-gaprepositoriessupply-chain

Case study Source

activeStatic-first engineering portfolio

MAY'D IT

The portfolio itself: a two-origin static architecture with reproducible builds, supply-chain controls, a command interface, and an intentionally isolated browser arcade.

astrocloudflaresupply-chainstatic-site

Case study Source

activeLinux-native DAW framework

AL3X

A Rust-first digital audio workstation framework built around Linux-native audio, modern graphics, headless operation, and explicit real-time diagnostics.

rustlinuxaudiovulkan

Case study

stableMinimal media acquisition stack

PLEXXX

A deliberately small container stack that prioritizes VPN isolation, operational visibility, and manual control instead of accumulating an entire automation ecosystem.

containersnetworkingautomation

Case study

EXPERIENCE

Systems-focused engineer with 10+ years across infrastructure, cyber operations, architecture, resilience, automation, research, and technical leadership.

View experience →

ENGINEERING PRINCIPLES

01Minimize moving parts.
02Automate repeatable work.
03Expose failure clearly.
04Secure boundaries rather than assumptions.
05Treat documentation as part of the system.

UNNECESSARY, THEREFORE ESSENTIAL

There is also an arcade.

Small HTML5 games live on an isolated origin. No accounts. No backend. No trusted route home.

ENTER ARCADE →