About
I spent years in law enforcement using public safety technology in the field. Now I build the compliance tooling for systems like those.
I write open-source Python and AWS tools for evidence collection, continuous monitoring, policy-as-code, and compliance-as-code. Mapped to SOC 2, ISO 27001:2022, NIST 800-53 Rev 5, FedRAMP High, and CJIS v6.1. I build with AI agent workflows and MCP integrations: one model writes the code, a separate model audits the diff before anything gets committed.
Before that I did Identity Governance at a financial services company: privileged access monitoring, user access reviews, RBAC analysis. Now I do product support at a FedRAMP High public safety software company.
Skills
Compliance Frameworks
- CJIS v6.1
- CMMC
- FedRAMP High
- GovRAMP
- ISO 27001:2022
- NIST 800-53 Rev 5
- NIST 800-171
- NIST CSF 2.0
- SOC 2 (Trust Services Criteria)
AI & Agentic Tooling
- Claude Code
- Cursor
- LLM-integrated automation
- Model Context Protocol (MCP) servers
- Prompt pipelines
Technical Skills
- AWS (GovCloud, Config, Security Hub, IAM, KMS, CloudTrail, Lambda)
- Bash
- CloudFormation
- GitHub Actions
- OPA/Rego
- OSCAL
- Python
- REST APIs
- SQL
- dbt
- DuckDB
- Terraform
GRC Tooling
- AWS Audit Manager
- Checkov
- Conftest
- IBM Compliance Trestle
- myctrl.tools
Observability
- Kibana/OpenSearch
- Sentry
- Splunk
Concepts
- Compliance-as-Code
- Continuous Monitoring
- FedRAMP 20x KSIs
- Identity Governance & Administration (IGA)
- OSCAL Component Definitions
- Policy-as-Code
Certifications
-
CGE-P
GRC Engineering Club
-
CGE-AUD
GRC Engineering Club
-
SSCP
(ISC)²
-
CySA+
CompTIA
-
PenTest+
CompTIA
-
Security+
CompTIA
-
Network+
CompTIA
-
A+
CompTIA
-
Project+
CompTIA
-
ITIL 4
PeopleCert / Axelos
-
LPI LE
Linux Professional Institute