I build cloud platforms and delivery pipelines, data pipelines, security detections, and the Linux, database and network infrastructure underneath them. Based in Toronto. My background includes leading a York University campus physical security control-room shift, where I handled alarm triage, emergency escalation and operator training.
Portfolio and case studies · LinkedIn · Email
| Project | What I built | Proof |
|---|---|---|
| DevSecOps Supply Chain | Five security gates (Gitleaks, Semgrep, Trivy, Checkov, tests), then keyless cosign signing, an SBOM and SLSA provenance, and promotion by digest to the GitOps repo. | Gates proven by blocked PRs · OpenSSF Scorecard |
| Kubernetes GitOps Platform | Argo CD runs the cluster from Git: Kyverno admits only pipeline-signed images, canary releases roll back on Prometheus alerts, Terraform modules for EKS and AKS. | 35/35 end-to-end checks |
| Toronto Crime SQL Analytics | Twenty SQL questions, generated results and a live dashboard from City open data. | Findings · Case study |
| Toronto Open Data Pipeline | CKAN extraction → PostgreSQL → 11 dbt models → Airflow, with a prototype TTC delay model. | Run results and limitations · Case study |
| PostgreSQL DBA Toolkit | Primary, replica, WAL archive, diagnostics and repeatable recovery and failover drills. | Drill output · Case study |
| Sigma Detection Pack | Eleven detection rules tested against planted positives and near-misses. | Tests · Case study |
The project READMEs include setup steps, design decisions and limitations. These are independent portfolio projects and lab builds; their results are reported with the test conditions that produced them.
- Cloud & platform: AWS Security Auto-Remediation, Azure Toronto Data Platform
- Data: TTC Real-Time Pipeline, Credit Risk with MLflow
- Security: SOC Alert Analytics, PCAP Threat Hunting, Vulnerability Prioritization
- AI tooling: Toronto Data MCP Server (read-only MCP server with a SQL guard, least-privilege role and end-to-end protocol tests), LLM SOC Triage (a planted instruction in a username closed every real intrusion; only a deterministic guard held), Text-to-SQL Evaluation (local models on 92 real questions: SQL that runs 92% of the time and is right 2%)
- IT administration: Microsoft 365 Identity and Device Lab (PowerShell and Microsoft Graph: onboarding, offboarding, Conditional Access and Intune as code, help desk runbooks)
- Infrastructure: Ansible Server Baseline, Network Automation Lab, Directory Services Lab
CompTIA Security+ · AWS Certified DevOps Engineer – Professional · Microsoft Power Platform Developer Associate