I build software at the intersection of cybersecurity, cloud infrastructure, and AI. My background spans security engineering, software development, machine learning, platform engineering, and architecture, with a consistent focus on turning complex security and operational problems into reliable automation.

I work across system design and implementation, from defining domain boundaries and application state to writing Python and Go services, integrating APIs and cloud platforms, and thinking through deployment, observability, and security.

My recent work focuses on AI-enabled cybersecurity and governance systems, including conversational elicitation services, deterministic orchestration, policy-as-code, structured model outputs, and enterprise knowledge agents. I prefer architectures where foundation models have a clear responsibility while application state, policy, validation, and failure handling remain explicit in the software.

I value clear boundaries, readable code, strong tests, useful observability, and security that is designed into the system from the beginning.

• Design the system — make responsibilities, state, and boundaries explicit.
• Build the software — favor clear, maintainable implementations over unnecessary complexity.
• Secure by design — treat security as part of architecture, code, identity, infrastructure, and operations.
• Operate at scale — consider deployment, observability, reliability, and the people who ultimately run the system.

• Software Engineering: Go, Python, REST APIs, PostgreSQL, service design, concurrency
• AI Engineering: OpenAI, Claude, foundation models (LLMs), structured outputs, state-machine orchestration, AI-augmented development
• Security Engineering: security architecture, policy-as-code, Open Policy Agent, secrets management, runtime security, threat modeling
• Cloud & Platform: Kubernetes, Helm, ArgoCD, GitOps, AWS, Azure, Docker, Linux
• Observability & Reliability: Prometheus, Grafana, Loki, structured logging, troubleshooting

These repositories reflect earlier hands-on work and experiments that helped shape how I approach software architecture, security, concurrency, APIs, and distributed systems today.

• pwmanager
  Full-stack password manager with a Go backend, SPA frontend, PostgreSQL persistence, and a focus on secure software design and maintainability.

• vault-plugin-secrets-pwmanager
  HashiCorp Vault plugin exploring how Vault's secrets-management capabilities can support a custom password-management system.

I’m currently spending most of my learning time around:

• architecture for AI-enabled software systems
• agentic workflows and explicit state-machine orchestration
• model evaluation and multi-model enterprise AI
• deterministic policy evaluation and policy as code
• secure software architecture
• developer experience and platform engineering
• observability and production reliability

I also continue to explore technologies simply because I enjoy understanding how systems work.

• I enjoy hiking, biking, recreational sports, and reading.
• I play acoustic guitar. 🎸
• I experiment with bread baking, microcontrollers, 3D printing, Linux, and mobile security.
• My motto is Be typing cat!