Full-stack engineer who works the whole path — from the Angular component
down to the Kubernetes node it's scheduled on.
- 🏗️ Platform — multi-cluster Kubernetes on RKE2, GitOps with Argo CD from a controlling hub, and the self-hosted services and observability stack that keep it honest
- 🧩 Product — Angular + .NET across a server-side-rendered storefront, a workflow engine, and an OIDC identity estate on Duende IdentityServer
- 🔐 Supply chain — when npm gets compromised, I'd rather have a scanner than a hunch. Two of the repos below started as incident response and stayed
- 🤖 Agentic engineering — building the scaffolding that lets LLM agents do real work in a real codebase: durable memory, scoped context loading, and issue-backed work state
| Project | What it is |
|---|---|
| secrets-store-csi-driver-provider-1password | 1Password Connect provider for the Kubernetes Secrets Store CSI Driver |
| yet-another-malicious-axios-scanner | PowerShell scanner for the compromised axios releases |
| Yet-Another-Sha1-Hulud-Scanner | Python sweep for the Shai-Hulud npm supply-chain compromise |
Languages
Frontend
Backend & data
Platform
Every chart here is generated by scripts/build_cards.py,
refreshed monthly by a scheduled workflow, and served
from this repository — no third-party card services, nothing to rate-limit.
This is the Way.