01Critical infrastructure
Securing power generation at enterprise scale.
Led multi-year security engineering for NextEra Energy / FPL across 17 power plants and a 250+ firewall environment, supporting NERC CIP governance and AMI growth from 2 million to 5 million smart meters.
17 power plants
250+ firewalls
5M meters
- NERC CIP-aligned governance
- Segmentation and firewall modernization
- Multi-year operational continuity
02National security + NDR
Turning network telemetry into detection advantage.
Architected Corelight / Zeek detection capabilities for government and national-security environments, integrating Suricata, threat intelligence, SIEM workflows, and automated AWS sensor lifecycle operations.
- Zeek + Suricata engineering
- Threat intelligence and hunting workflows
- Repeatable sensor lifecycle automation
03Private AI infrastructure
Production-ready private AI platforms.
Engineered an end-to-end Ansible framework for Linux and Kubernetes AI clusters with MetalLB, Calico, NVIDIA GPU Operator, Triton, Ollama, and full GPU observability.
ANSIBLE→K8S + GPU→MODEL SERVING→OBSERVABILITY
- Reproducible cluster provisioning
- GPU time-slicing and model serving
- Prometheus, DCGM, and Grafana dashboards
04Transportation + payments
Defense in depth for continuous operations.
Designed security across two FDOT / SunPass data centers and four high-availability firewall clusters built from the ground up for PCI-regulated toll-collection systems.
2 data centers
4 HA clusters
PCI regulated
- High-availability architecture
- Defense-in-depth controls
- Validated operational handoff