Infrastructure and security engineer building tools around cloud networking, government data pipelines, certificate monitoring, and CI/CD automation.
Infrastructure and security engineer. I build tools at the intersection of cloud networking, certificate monitoring, and public-sector data — things like CIDR aggregators, SSL transparency scrapers, bastion hosts, and government domain trackers.
My work leans toward automation: scraping public health feeds, normalizing federal job listings, archiving government websites, and keeping CI pipelines honest with actionlint and zizmor. I write a lot of Python and Shell, reach for Go when performance matters, and wire it all together with GitHub Actions.
When I'm not writing code I'm thinking about routing tables, TLS certificate chains, and why federal IT is the way it is.
Selected repositories across security, infrastructure, government data, and developer tooling.
Ansible-managed bastion/jump host with secure hardening and Google PAM authentication. Deployable on AWS; supports 2FA for SSH access.
Python library for SSLMate's CertSpotter v1 API — monitor certificate transparency logs for your domains and receive alerts when new certs are issued.
Curated reference of CLI tools for working with TLS/SSL certificates — inspection, validation, and field-level debugging.
asdf version manager plugin for TruffleHog — install and manage the secrets-scanning tool alongside your other development tools.
Collects and aggregates CIDR ranges published by AWS, Azure, and GCP into a unified dataset — useful for firewall rules, routing policies, and network audits.
Nginx reverse proxy mapping incoming URLs to S3 bucket paths — serve private assets through a URL layer without exposing buckets publicly.
Collapses overlapping IP ranges to the minimal set of CIDR blocks — shrinks firewall whitelists and routing tables down to their essentials.
Curated list of CDN providers and their known IP address ranges — useful for network policy, traffic classification, and origin filtering.
Practice repository for cidranger — a fast Go library for IP-to-CIDR range lookups, useful in firewall and routing applications.
Tracks U.S. government domains and their autonomous system (AS) information — an open information portal for understanding .gov infrastructure.
Continuous scrape of CDC event codes from the Public Health Information Network (PHIN) notifiable disease condition list — automatically kept in sync via GitHub Actions.
Raw data tracker for doge.gov — archives and diffs the public dataset over time so changes don't disappear quietly.
Aggregates federal agency job listings from public government sources — a pipeline for normalizing and tracking positions across agencies.
Detects whether a PDF uses the XML Forms Architecture (XFA) format — lets processing pipelines route XFA vs AcroForm documents to the right handler.
asdf plugin for Trippy — a modern network diagnostic tool that combines ping and traceroute into a single interactive TUI.
asdf plugin for oauth2c — a CLI tool for testing OAuth2 authorization flows interactively from the terminal.
Practical guide for managing multiple GitHub accounts via SSH —
covers key generation,
~/.ssh/config, and per-repo identity switching.
Converts UTF-8 simplified Chinese subtitle files to traditional Chinese for home entertainment use — batch-processes an entire directory of .srt files.
Personal development environment configuration — dotfiles, shell setup, and toolchain bootstrapping for a reproducible workstation.
Python solver for the Otaku Baz 3D mechanical puzzle — brute-force search with constraint pruning. Live demo at GitHub Pages.
Interactive Shiller CAPE ratio valuation tool for the S&P 500 — visualizes historical data to contextualise current market valuations. Live on GitHub Pages.