Network &
cloud security.
Understanding what's exposed, how systems connect, and who has access.
Explore CyberNetwork and cloud security, servers, and infrastructure, built to stay private and reachable.
Explore the workMost of my work is around network and cloud security, setting up servers, and the infrastructure that holds it all together.
Understanding what's exposed, how systems connect, and who has access.
Explore CyberSetting up servers and services with attention to reliability, maintenance, and how everything fits together.
Recent infrastructure projects, described at the level of architecture and outcome.

Two Ubuntu servers running containerized services behind one front door. The only way in from the internet is an outbound Cloudflare Tunnel; everything else answers only on private networks and Tailscale. Updates, reboots, and monitoring run on a schedule.

When plain DNS stopped working on the local network, both servers moved to DNS-over-HTTPS: Quad9 first, Cloudflare as backup, and a scheduled check that returns to the primary once it recovers. A documented DNS-over-TLS path covers recovery.

A native Mac app that measures connection health, maps the local network, discovers devices, and keeps the evidence behind each failure. History stays in a local database, with no cloud account.
Analytics for several sites and apps, run on owned hardware. A collector holds events while the service is down and replays them in order, and visitor IP addresses never reach the disk.

A few earlier projects, from my days building iOS Shortcuts.
Services run on owned hardware, with documented setup, updates, and recovery.

Practical work across networks, cloud environments, and the servers that connect them.
Explore CyberA question, an idea, or something worth making better.