Identity, access and security engineering.

I'm a systems administrator at a regional bank, where I build the tools that keep identity, access and compliance honest. I'm relocating to Florida in November 2026 and open to remote work.

I name my tools like arcade machines and document them like someone else has to run them tomorrow.

At work I built an automated FFIEC and CIS Controls audit engine, a deployment framework behind 162 packages, and an Active Directory health diagnostic. At home I run a self-hosted lab with single sign-on, my own certificate authority, an audit dashboard that checks the lab against its own documentation, plus whatever else I find interesting.

My favorite side project is an AI thunderdome. One model plays attacker, another plays defender, and a referee I built judges every move over a randomly generated network. Red team gets six turns to reach the core systems. Nothing either model writes ever runs; the referee just reads it and rules. It's the proof of concept for other tools I'm building. Thankfully, unlike Jurassic Park, when the power goes out I don't have to worry about WhiteRabbit or Qwen escaping and eating people.

The experience page has the details. The notes are the stories behind them, mostly the things that went wrong first.