Resume / Skills
Each category summary points at the shipped work behind it. Most of it was built on a carrier authentication platform where correctness had consequences.
Versioned Ansible collections, deployment-time configuration and encrypted secrets, explicit environment validation, dry-run reports, and tested rollback safeguards.
Cassandra backup and restore, topology and upgrade planning, operator certification fixes, and measured development UDF optimization with compatibility testing.
Carrier-grade subscriber authentication, with correctness validated across authentication, roaming, and accounting workflows.
Versioned releases, shared packaging rules, artifact provenance, and deployment-time configuration tooling with explicit compatibility and rollout gates.
Containerized test harnesses, plus hands-on Kubernetes and operator-based orchestration work.
Critical vulnerability research through coordinated disclosure, plus endpoint-control automation, hardening, CVE remediation, secrets hygiene, and PKI troubleshooting.
SIEM log-forwarding automation and enriched Linux audit-event delivery, including queued TCP transport and fixes for SELinux and audit-daemon integration.
Golden-template preparation and disposable-clone validation, cloud-init addressing, eight-node VM provisioning with unique guest identities, and infrastructure inventory reconciliation.
Four distributions in daily production-adjacent use, including an end-of-life migration carried through formal certification.
Automation in Python and Bash, a Spring test platform in Java, device tooling in PowerShell, and product work in TypeScript and PHP.
This site (Astro 6, strict TypeScript, static output) and an independent product exploration in the telecom workflow space.
A deployed engineering chat assistant with tested read-only gateways, evidence-retrieval and sanitization tools, and maintained agent workflows grounded in documented work.
The habits the record demonstrates: reverse engineering, parity testing, root-cause analysis, and documentation that survives certification.
Native SAML, OIDC, and OAuth integrations, directory-backed account provisioning, role mapping and allow/deny tests, plus independent identity and MCP gateway engineering.
Wireless and enterprise networking, dual-stack inventory reconciliation, IPAM drift audits, RADIUS health-check diagnosis, and infrastructure from routing to physical installation.
Event and protocol plumbing across game services, test fleets, and home automation: AMQP, Kafka result signals, Netty protocol handling, gRPC contracts, and custom integrations.
Certified runbooks and onboarding, evidence and document-consistency tooling, and a status-ledger prototype that reconciles engineering work with reported progress.
Spring Boot services and test platforms, Netty protocol work, multi-module Maven builds, and WAR deployments dating back a decade.
Laravel 5 through 11 in production: identity providers, lead-generation apps, VoIP integrations, and an Astro replatform when a dynamic surface was no longer justified.
The part of the network you can touch: fiber and copper installation and splicing, structured cabling, racks, hardware upgrades, and colocation, done as the ISP's own field engineer.
Relational, document, and cache stores behind production applications, plus directory services; Cassandra has its own category.
Property-based and mutation tests, failure injection that checks previous-release startability, protocol parity, and performance benchmarks scoped to their test environment.
Cloudflare Workers, Access, Tunnel, Origin CA and authenticated origin pulls, Pages builds, Tailscale userspace networking, and rented GPU compute behind a broker.
Cross-system incident diagnosis, verified restores, deployment failure testing, and recovery checks that distinguish a restored service from pending prevention work.
The systems a founder and consultant actually runs: CRM, ticketing, source hosting and CI, artifact repositories, help desk, quoting and invoicing, advertising and analytics.
Platform and product architecture: multi-module monoliths that stay honest, API-first and event-driven designs, explicit service contracts, and products built from customer discovery onward.
Nine networked microcontroller devices in C++, each built to measure something real — current, weight, distance, flow, temperature — and report it into an existing monitoring stack.
Android sensor and telephony applications with real-user monitoring and CI, plus digital signal-processing tooling and reverse-engineered serial protocols.
Go deeper
A concise introduction, selected evidence, and résumés organized by role focus.
The public record: scope owned and selected accomplishments grouped by discipline, with internal operational details deliberately generalized.
A machine-readable mirror of the sanitized public resume for ATS parsers, AI agents, and anyone who prefers grep to scrolling.
Contact
I'm looking for a senior individual-contributor role with architectural ownership, and I take on independent project work. Tell me what you're building.