Independent practice · Las Vegas, NV · Now accepting engagements

Building Secure Platforms and Processes from Code To Infrastructure

I help organizations build, secure, and optimize the systems that power modern software delivery. Whether partnering directly with engineering leadership or working alongside existing development, platform, and operations teams, I provide practical expertise in infrastructure security, platform engineering, Kubernetes security, DevSecOps, and secure architecture to help organizations reduce risk while maintaining engineering velocity.

~ banksinfosec — tmux: prod-ops
$ kubectl get nodes -o wide   NAME STATUS ROLES VERSION cp-01 Ready control-plane v1.34.0 worker-01 Ready worker v1.34.0 worker-02 Ready worker v1.34.0
k8-control-node
$ ssh platform-admin@prod-gw Last login: Tue 08:13:42 UTC   $ journalctl -p err -n 5 08:10:12 nginx upstream timeout 08:10:18 sshd accepted publickey
bastion-host-node
$ gitlab-runner verify   Runtime platform: linux/amd64   Runner: build-runner-prod Status: alive
cicd-runner-node
$ suricata alerts   ET SCAN Nmap Scripting Engine SRC: 45.13.x.x   ET EXPLOIT Apache Struts Attempt SRC: 91.211.x.x
honeypot-node

Some industries don't earn the right to delay security.

The business determines the threat model, and the threat model determines the security architecture.

Four pillars, mapped to your industry.

P/01

Identity

  • MFA
  • Least privilege
  • Vendor access
  • Secure remote access
// where this matters most
  • Financial services
  • Healthcare
  • MSPs
P/02

Trust Boundaries

  • Network segmentation
  • Zero Trust
  • Asset inventories
// where this matters most
  • Critical infrastructure
  • Manufacturing
  • Healthcare
P/03

Platform Security

  • Secrets management
  • Secure CI/CD
  • Supply chain security
// where this matters most
  • SaaS
  • Cloud providers
  • Technology companies
P/04

Operational Resilience

  • Monitoring
  • Incident response
  • Backup and recovery
  • Vulnerability management
// where this matters most
All industries
[ 03 ] — ENGAGEMENT

Build security into the foundation
before risk builds into the business.

Initial calls are free · No NDA required to chat · Replies within 24h
Start an engagement