About me
The practitioner
behind the programs.
"I build security programs — the same way I did at Palo Alto Networks, AWS, and Microsoft."
I started in network security at Rackspace in 2011, building automated security platforms before "security automation" was a common phrase. Three years of IDS, WAF, and Cisco ASA work taught me that the difference between a good security program and a paper one is whether it actually runs when you're not watching.
That philosophy carried through Amazon AWS, where I designed hybrid cloud architectures and led ECS automation migrations. At Microsoft, I became the escalation engineer for the company's highest-severity Azure security cases — the ones that went to senior engineers when standard support couldn't resolve them. At Palo Alto Networks I spent 4.5 years inside enterprise CSPM implementations at Fortune 500 scale, across five cloud providers, delivering HIPAA, PCI, FedRAMP, and GDPR compliance.
Now I take that full stack to regulated AI companies — healthcare AI, fintech, and AI-native startups navigating HIPAA and NIST AI RMF for the first time. I build the actual infrastructure, write the SOPs, and operate the orchestration pipelines. Hands-on across every layer — from network security to CSPM to AI governance.