About

Infrastructure & Security Architect · Washington, D.C.

I design, build, and secure enterprise platforms, networks, and cloud infrastructure.

I have more than 20 years of experience building and operating enterprise technology. My career spans hands-on engineering, cloud architecture, and CTO responsibility.

As a CTO, I built data-center infrastructure for a hosting business serving 30,000 customers and roughly halved its infrastructure costs. I later spent nine years working on email security products across 32 data centers.

Today, I bring that foundation to enterprise and AI platforms, connecting infrastructure design with identity, isolation, operational resilience, and audit evidence.

What I work on

My work spans firewalls and Zero Trust, cryptography and PKI, the Linux kernel and eBPF, Kubernetes and service meshes, DNS, email and SMTP infrastructure, BGP and anycast, IPv6, and multi-region networks across AWS, Google Cloud, and Azure.

I focus on making these systems secure, dependable, and understandable to the teams responsible for them.

Connecting engineering and risk

I connect security requirements with practical engineering controls, operational trade-offs, and evidence teams can maintain. My experience includes engineering controls supporting SOC 2 examinations and ISO 27001 certification, alongside work with PCI DSS, FIPS, and GDPR requirements.

I hold master's degrees in computer science and law (LL.M.). This background helps me connect systems engineering with contractual and regulatory requirements, and the technical controls behind them.

What I care about

• Architectures that survive production, with failure modes the team understands.
• Networks and platforms that are fast, secure, and global by design.
• Clear explanations of complex infrastructure, including the trade-offs.

Writing and technical conversations

This site is my professional portfolio and a place to share technical writing and public reference implementations. I write about architecture choices, working configurations, and failure modes, with the trade-offs left in. Start with the writing or explore the topics.

Certifications

• Kubernetes: Certified Kubernetes Administrator (CKA), Certified Kubernetes Application Developer (CKAD), and Certified Kubernetes Security Specialist (CKS).
• Cloud: AWS Certified Solutions Architect (Professional) and Google Professional Cloud Architect.
• Networking and systems: Cisco Certified Network Professional (CCNP) and Red Hat Certified Engineer (RHCE).
• In progress: studying for CISSP.

Outside work

Away from the keyboard, I am a licensed amateur radio operator, callsign KN4OCB. Radio is where much of my interest in networks and RF started.

Connect

LinkedInGitHubContact