Projects
Hands-on builds across security operations, identity, and infrastructure. Each one is documented and on GitHub.
A segmented Proxmox network with pfSense VLAN isolation, an HTTPS reverse proxy, and network-wide DNS filtering. Active Directory federated to Keycloak over LDAP/OIDC for centralized auth, RBAC, and MFA. Wazuh and Sysmon handle detection; critical alerts auto-generate tickets.
A 50-user ServiceNow build following ITIL principles: CMDB dependency mapping, RBAC, and a CAB-driven change workflow. Custom Service Portal with Virtual Agent triage, a Slack webhook for P1 escalation, and SLA breach alerting wired into an executive dashboard.
A standalone Mosyle console managing a macOS fleet with signed configuration profiles: serial-based asset tracking across sites, disabled MAC randomization for network visibility, and enforced browsing restrictions.