Security analyst. Five years supporting, defending, and building the infrastructure underneath.

August 2025 — present

Security Analyst

Libra Solutions Group · Las Vegas, NV

• Defend company infrastructure by managing a security toolset spanning Microsoft Azure, ZScaler Red Canary, Blackpoint Cyber, KnowBe4, Fortra, HivePro, and ConnectSecure.
• Led the effort to achieve SOC 2 and HIPAA compliance, using Vanta for tracking and Microsoft Azure to implement required controls.
• Reduced company spending through usage monitoring, license and infrastructure right-sizing, and adoption of more cost-effective tools and processes.

December 2024 — August 2025

Application Support Engineer

Libra Solutions Group · Las Vegas, NV

• Led internal application support for multiple development teams using Atlassian tools.
• Managed user accounts, software installs and updates, and coordination of bug reports and enhancement requests.
• Used SQL and Microsoft 365 daily to address support tickets and communicate with users and development teams.
• Led documentation efforts for the support process, improving user experience and supportability.

August 2021 — November 2024

Application Support Specialist

Trimble Viewpoint · Portland, OR

• Supported customers across 13 product offerings using Salesforce, SQL Server Management Studio, IIS, SSRS, and Crystal Reports.
• Supported software integrations with OAuth2, Okta, and Azure Active Directory for single sign-on.
• Queried customer databases daily via SQL to gather information and resolve support cases.
• Implemented employee training programs documenting functionality, workflows, and common support scenarios.

2020 — present

Self-hosted DevSecOps infrastructure

Personal project · Proxmox, Linux, Windows

• Built a full DevSecOps CI/CD pipeline: hosts provisioned with Ansible and Terraform, GitLab for source control, Wazuh for security monitoring, a K3s cluster for application hosting, and an Ollama AI server integrated with GitLab and Wazuh for AI-assisted code review and alert analysis.
• Designed network architecture with MikroTik VLAN segmentation, Cloudflare tunnels for secure external access without exposed inbound ports, and Prometheus and Grafana for infrastructure monitoring.
• Host production self-hosted services — Nextcloud, TrueNAS CE, Plex and Jellyfin, Mealie, Minecraft, and Valheim — with automated SSH key distribution and host provisioning across the fleet.

stack

Proxmox VE, Ceph, Terraform, Ansible, GitLab CE/CI, Docker, K3s, Helm, Wazuh, Trivy, Semgrep, OWASP ZAP, Cloudflare Tunnel, MikroTik RouterOS, Prometheus, Grafana, Loki