2026
University of Nevada, Reno
M.S. Cybersecurity
3.9+ GPA
My graduate studies were in incident response, secure architecture, and adversarial thinking. These concepts support me in my career today.
Thoughtful. Secure Architecture.
Hello and Welcome to my corner of the web. I'm a passionate DevOps Engineer building a more secure world. This website is designed to show you what is possible when you combine security and DevOps, and how it can benefit you. I hope you enjoy exploring my work and learning more about my journey.
Currently
open to engagements
01 · Education
Where the foundation
was laid.
Eight years of formal education in systems, information and adversarial thinking, is the theory that everything I ship to production is built on.
-
-
2024
University of Nevada, Reno
B.A. Information Systems
Dean’s List · 3.8+ GPA
For my undergraduate studies focused on the principles of designing, integrating, and documenting systems that all organizations need and depend on.
-
2020
Truckee Meadows Community College
A.S. Information Technology
Dean’s List · 3.7+ GPA
When I started my studies, I focused on systems administration, Linux fundamentals, and found a passion for automation.
02 · Experience
From the drawings
to the field.
Three years of hands‑on experience has provided me with a wonderful first step, through frontline security operations that are the heart of a multi‑tenant SOC, to engineering the pipelines and tooling that make it all possible.
-
2024 — Present
SNC
Full‑time
Cybersecurity DevOps Engineer
Contribute to the data and detection infrastructure behind a multi‑tenant Security Operations Center: ingestion pipelines, SIEM platform engineering, automated reporting and the analyst‑facing tooling.
- Design, deploy and maintain log‑ingestion pipelines feeding a multi‑tenant SIEM, covering collection, parsing, normalization, enrichment and schema consistency across all customer data sources.
- Engineer and operate SIEM platform infrastructure: cluster health and capacity, index lifecycle and retention policy, role‑based access control, and the isolation boundaries that keep tenant data segregated.
- Automate, build, deploy and manage configurations for customer platforms, keeping every environment reproducible, version‑controlled and auditable.
- Develop easy to use tooling that surfaces new capabilities to my team for detection coverage, tenant‑scoped investigations, and report generation
- Partner with analysts to convert operational gaps into engineered capability: new data sources onboarded and noisy detection tuning.
-
2023 — 2024
SNC
Full‑time
Cybersecurity Analyst
Frontline detection and escalation inside a Security Operations Center, triaging alerts across thousands of endpoints, network resources and identity telemetry all while escalating confirmed incidents with professional reports that help customers understand the impact and next steps.
- Monitored and triaged SIEM alert queues against established playbooks, performing initial scoping, enrichment and false‑positive reduction under defined response SLAs.
- Conducted host and network‑level investigations, correlating EDR, firewall, proxy, DNS and authentication telemetry to reconstruct activity timelines and determine true impact.
- Authored incident reports and after‑action documentation, and fed recurring false positives back to engineering as concrete detection‑tuning requests.
- Maintained indicator and threat‑intelligence databases to assist with detecting and denying network activity to compromised networks.
-
2018 — 2023
Magnolia AV
Full‑time
A/V Integration & Automation Specialist
Delivered in‑home technical consultations, end‑to‑end integration for residential audio/video, and networking/control systems.
- Consultations that translated client requirements into documented system designs, signal‑flow diagrams, and itemized billing.
- Integrated distributed audio/video systems, lighting and network subsystems, including cabling, rack build‑out and segmented networks provisioned for latency‑sensitive AV traffic.
- Programmed home‑automation controllers: device driver configuration, scene and event logic, scheduling, and custom touch‑panel interface layouts.
- Performed post‑installation validation and calibration, led client training, and owned warranty support and remote troubleshooting.
03 · Stack
What I reach for,
and how far.
I may not have the deepest expertise in every tool I use, but I wouldn't include it in this list if I wasn't confident in my ability to use it to solve problems, and more so if I wasn't passionate about learning more about how to use it better every day.
18
Tracked competencies
3yrs
In the field
3
Degrees earned
24/7
SOC supported
Detection & Response
-
SOC Operations
80%
A year on the floor triaging alerts under response SLAs, then two more building the platform that feeds it. I’ve worked both sides of every ticket.
-
Detection Engineering
55%
I can turn observed tradecraft into detection logic and tune it against live telemetry, but authoring content is a smaller slice of my week than the pipelines feeding it.
-
MISP
50%
Working familiarity: feed curation, taxonomy hygiene, and pushing indicator context downstream. I know what it’s for and can operate it; I’m not deep in its internals.
Data & Observability
-
Elastic Stack
85%
The deep end of my expertise. Ingest pipelines, index lifecycle and retention, query performance, cluster health and the tenant isolation boundaries underneath all of it.
-
PySpark
70%
Batch and streaming transforms over large security datasets: normalization, enrichment joins and schema enforcement before anything reaches the SIEM.
-
PostgreSQL
60%
Working proficiency. I can model a schema, write the queries and run migrations for internal tooling, but deep relational tuning isn’t where my hours have gone.
-
Grafana
45%
I build the dashboards I need (pipeline throughput, ingestion lag, tenant health), but I’d not call myself a Grafana specialist. Most of my visibility work lives in Kibana.
Platform & Infrastructure
-
Proxmox
85%
Cluster setup, storage and networking, LXC and VM templating. I run my own multi‑node cluster, and CI for this site executes on a runner inside it.
-
Automation
75%
The through‑line of everything else here. If I do it twice by hand it becomes a pipeline, a role, or a script the next person can read.
-
Kubernetes
70%
Deploy and operate containerized platform services: manifests, resource limits, rollout strategy, and the debugging that inevitably follows.
-
Azure Architecture
70%
I can reason about cloud topology (identity boundaries, network segmentation, tenant isolation), but most of my infrastructure hours are on hardware I own rather than rented.
-
Ansible
60%
Idempotent roles for configuration management and fleet‑wide change, so environments converge on a known‑good state instead of quietly drifting apart.
-
Terraform
60%
Infrastructure declared in code and reviewed like code, so environments are reproducible rather than hand‑built artifacts nobody dares rebuild.
Application
-
Backend Architecture
65%
I design services that hold up, with attention to data contracts and tenant boundaries, but I come at it from the data and infrastructure side, not from microservice patterns.
-
React
55%
Functional, not fluent. I ship analyst‑facing views for the SOC tooling I build, but I’d defer to a dedicated front‑end engineer on anything more ambitious.
-
Web Design
50%
An interest rather than a discipline. I care that tooling looks considered and I’ll put the hours in (this site is the evidence), but it’s the furthest thing here from my day job.
Service Delivery
-
Customer Relations
85%
Five years of in‑home consultations taught me to translate technical constraints into plain language and to set expectations I can actually meet.
-
osTicket
75%
Queue and workflow management: intake, triage, SLA tracking, and the reporting that shows where a backlog is really accumulating.