About me

I kinda have a weird job.

Over 15 years, I’ve built CMDB and CIEM platforms, earned two patents for solving cloud data analysis at scale, and helped organizations secure environments spanning 25,000+ AWS accounts and 10M+ assets.

I build platforms that give developers the autonomy they need while keeping security teams happy. This approach has proven valuable enough to survive two acquisitions and scale to some of the largest cloud deployments in the industry.

The environments I work on tend to break vendors. When off-the-shelf tools can’t handle analyzing millions of assets or traversing IAM policies across thousands of accounts, we build our own. This requires a tricky blend of distributed systems knowledge, cloud expertise, threat modeling, and a willingness to challenge convention.

I’ve spent time on both sides of the table – building security products at vendors as a principal engineer and implementing them at uncommon complexity. This dual perspective helps me understand what actually works in production versus what looks good in a demo.

Finally, cloud security involves a lot of coordination between security teams, engineering teams, and the humans who just want to ship code. I spend my time writing software, designing architectures, and occasionally explaining why “just open port 22 to 0.0.0.0/0” isn’t a great idea.