Work

A five-node Proxmox cluster on a zone-segmented UniFi network, running family photos and friends' voice servers alongside an Active Directory forest and a Wazuh and Splunk security stack, with every change written down.

• Proxmox
• UniFi
• Docker
• Ansible
• Wazuh

A self-service app store for managed Windows PCs: people install software an administrator approved, without admin rights, through Action1 or a SYSTEM agent I wrote, backed by an ASP.NET Core server and shipped as an MSI.

• C#
• Avalonia
• ASP.NET Core
• Action1
• winget

Twenty-seven small tools for monitoring, Windows and Linux administration, and Ansible automation, each with its own README, example config, safeguards, and tests, all held to one repository-wide check.

• Python
• Bash
• PowerShell
• Ansible
• pytest

A Python command-line tool that gets Parrot OS 7 working on 2016-2017 Touch Bar MacBook Pros: it reads the hardware, offers only the fixes that Mac needs, and can undo every one of them.

• Python
• Linux
• Parrot OS
• systemd
• Debian packaging

Fixes and a setup guide for running Ubuntu 26.04 on a Surface Pro 5 as a tablet: multitouch that works, a touchscreen that survives boot and snap installs, a kernel pin that does not go stale, and working power and volume buttons.

• Linux
• Ubuntu
• Bash
• systemd
• udev

A Discord bot that builds the weekly event schedule post from a shared Google Calendar and edits it whenever the calendar changes, handed off to a friend with a one-click installer and a local control panel.

• Python
• discord.py
• Google Calendar
• Flask
• Automation

A blue-and-red security portfolio where every attack I run ends on the control that catches it: custom Snort and Wazuh detections, a Splunk pipeline, DFIR, and exploit work in an isolated VM lab.

• Snort
• Splunk
• Wazuh
• Kali
• DFIR

Turning a flat home network into a segmented, zero-trust one: 12 routed VLANs, a zone-based firewall, WireGuard-only admin access, plus Cisco IOS and subnetting built from scratch.

• UniFi
• VLANs
• Firewall
• WireGuard
• Cisco

A two-controller Windows Server 2025 forest, hardened with Group Policy and AppLocker, synced to Entra ID, backed up to Azure, then attacked from Kali to prove the hardening holds.

• Windows Server 2025
• Active Directory
• Entra ID
• Group Policy
• Azure

Five hands-on projects across the platforms my infrastructure runs on: Linux from the command line up, Python and PowerShell scripting, and Windows patch management I can audit.

• Linux
• Bash
• Python
• PowerShell
• Windows

Hands-on infrastructure across AWS, Azure, and GCP: a custom VPC from an empty region up to a reachable web server, then compute, storage, databases, auto scaling, governance, IAM, and a costed game-server design.

• AWS
• Azure
• GCP
• VPC
• IAM

A Star Wars galaxy map and community site for the TNIO gaming group: a shared 3D map that admins edit live, a news section, and access rules enforced in the database rather than the browser.

• React
• TypeScript
• Three.js
• Supabase
• PostgreSQL

An open-source Valorant scouting tool built on pro match data from GRID.gg. I built the AI pipeline that turns raw match events into a written scouting report on an opposing team.

• Valorant
• Node.js
• Gemini
• GRID.gg
• Open Source