I work where systems, security, and shipping meet. Twenty-five years in, I've gone from Linux boxes and Fibre Channel fabric to AI platforms and CISO war rooms — and never left the command line. I harden networks with zero-trust, automate infrastructure from bare metal to the edge, and turn rough prototypes into tools people quietly depend on. Equal parts architect, operator, and closer — most at home closing the gap between “works on my machine” and “works in production, at 3am, without me.”
Enterprise AI — the boring-but-hard kind. Turning messy inputs into trustworthy, reviewable output, governed so nothing ships unseen. The interesting parts live under NDA.
The whole house, declared. One YAML file compiles to the firewall, the Wi-Fi (one SSID, per-key VLAN steering), and the switches — with dual-WAN failover, a k3s GitOps platform, and age-encrypted secrets. Break glass is a git revert.
Meetings that never leave the machine. On-device transcription + summarization on Apple-Silicon models, written straight into Obsidian — no bot joins the call. Extended from Minute to sync M365 calendar and bolt into an AI-assist pipeline.
Recon on tap. A headless OSINT API — DNS, whois, nmap, cert-transparency — running on Oracle Ampere, fully Terraform-provisioned. Bearer-auth, fail2ban + nftables, scanners dropped to least privilege.
The living-room command center. A Next.js kiosk for an Android TV plus a Kotlin companion — with hand-built D-pad spatial navigation (the hard part), Home Assistant control, and per-room screens.
Buy vs. rent the GPUs. Models real AI-inference cost — tokens/sec, VRAM, quantization, electricity and PUE — across on-prem builds and AWS / GCP / Azure / OCI.
Exit the hypervisor. Turns RVTools exports into a VMware-to-cloud migration cost analysis — the spreadsheet the CFO actually reads.
► also in ~/tinkering: taptunes · kyrr · hugvord · mosquiddodeth · vpx-autoqa-monitor · agentic-voice
// systems // security // ai