Network engineering through blue team, red team, cloud, application security, and governance. I get called in for two things: moving something large without breaking it, and building a security program where none exists yet. Neither is really a technology problem — both are problems of timing and approach.
2004–2026.75
2006–2026
21 years · 9 roles
Raya App, Inc. · Uber Technologies Inc · Protiviti Consulting · Alaska Airlines · REI · Amazon Inc. · Trustwave, Inc. · L3 Stratis · Awardspace Web Hosting
2007–2023
16 years · 9 roles
Texas Air National Guard · Washington Air National Guard · USAF Reserves, INOSC–West · U.S. Air Force, Active Duty
Selected as the top cyber security operator across the entire US Air Force.
6 senior · 3 manager
Defense & government
USAF · L3 Stratis
Big Tech / FAANG
Amazon · Uber
Banking
Protiviti clients
Fintech
Protiviti clients
Healthcare
Protiviti clients
Aviation
Alaska Airlines
Retail
REI
Security vendor
Trustwave
Consumer apps
Raya App
Something large has to move without breaking, or something has to exist that does not yet. Most of my career has been one or the other, often both at once.
Moving something large, live, and load-bearing — without stopping the business that depends on it.
Amazon Corporate to AWS
Amazon2014–2015
Hardware estate to cloud
Uber2020–2025
AI adoption, controls, and governance
Raya App2025–2026
Enterprise cloud migrations for client environments
Protiviti2018–2020
No program, no coverage, no precedent. Sometimes a whole company, sometimes a single domain, sometimes a mission — and more than once, a capability the service did not have yet.
A whole company — security program from zero
Raya App2025–2026
A space — infrastructure security
Uber2020–2025
Founding member, USAF Cyber Protection Teams
USAF / Washington Air National Guard2015–2017
Founding member of a Red Team on active duty
US Air Force2010–2012
The unit's inaugural Red Team
Washington Air National Guard2017–2020
Both reward the same instinct: judging how much change an organization can take, in what order, and at what pace. Move too fast and something important breaks. Move too slow and the window closes. Most of the work is finding that line and then holding to it under pressure.
Everything here is public. Stars and languages come straight from GitHub.
penguintechinc
Zero Trust connectivity for clusters — intra, inter, and external — built on Wireguard and Ziti with policy enforcement from day one. Absorbed Squawk (secure DNS) and WaddlePerf (network path measurement) in 2026.
penguintechinc
An async Quart AI management platform: multi-provider routing across Gemini, OpenAI, Anthropic, Bedrock and Vertex, with Granite/Gemma request security, token and quota accounting, caching, and node fleet management for Ollama and llama.cpp.
penguintechinc
Workstream, issue, relationship, entity, and document management in one place, with native MCP integration so agents can read and write the same knowledge base people do.
PenguinzTech
A Linux kernel module fixing USB-C Power Delivery negotiation on Snapdragon X Elite laptops — machines that shipped charging at ~12W instead of 60W. Covers ASUS Vivobook S, Dell Latitude 7455, and ThinkPad T14s Gen 6.
penguintechinc
Cloud security platform combining S3 malware scanning (ClamAV/YARA) with threat intel enrichment, vulnerability detection, EDR endpoint monitoring, JIT secrets management, and AI-assisted code review.
penguintechinc
One management plane for the whole Penguin stack — the deployable hybrid cloud for MSPs and enterprises that want their own, not someone else's.
Languages by years of use, then the platforms and products I reach for most.
Also worked with: Ruby · Crystal
5 GIAC credentials are verifiable on the public GIAC record.
I started as a network engineer and never really left. The habit of reading a packet capture before reading a dashboard is the thing that has made every security role since make sense — detection, response, architecture, and eventually policy all rest on knowing what the wire is actually doing.
That path ran through the Air Force and then the Washington and Texas Air National Guard for sixteen years, most of it concurrent with civilian work. I stood up a unit's first Red Team, rebuilt its Weapons and Tactics program, and rebuilt its cyber training program from close to zero. Those two tracks fed each other constantly.
Today I write and publish open source through Penguin Technologies — Zero Trust connectivity, AI proxying and governance, hybrid cloud infrastructure — and contribute to Cloud Security Alliance guidance on AI and Zero Trust security.
Bachelor of Science, Network Engineering and Security
Western Governors University
Bachelor of Science, Computer Science
Regis University
Minor in Psychology
Associate of Science, Cyber Defense Operations
United States Air Force
Open to Senior Individual Contributor and Senior Management roles in security engineering, infrastructure, and AI security.