Core Capabilities
Zero Trust Architecture
Identity-gated access, private service exposure, and policy enforcement across self-hosted infrastructure.
Infrastructure Automation
Reproducible provisioning and configuration management with Terraform, Ansible, and version-controlled workflows.
Network Segmentation
VLAN-based isolation, deny-by-default firewalling, and reduced lateral movement across internal services.
Detection Engineering
Host and network telemetry pipelines with Wazuh, Suricata, and monitoring built for attack validation.
Stack: Proxmox, OpenWRT, Terraform, Ansible, Cloudflare Zero Trust, Wazuh, Suricata, Linux