Homelab Security Portfolio
A security-focused enterprise-style homelab documenting segmented architecture, Zero Trust ingress, isolated CI/CD, independent recovery, SIEM integration, administrative trust boundaries, and constrained local AI.
Engineering
Engineering
Security architecture, ICS/OT, DevSecOps, infrastructure engineering, and validated technical case studies.
Backup Migration: From Same-Host Protection to an Independent Recovery Tier
A completed recovery-engineering migration that moved authoritative application backups outside the production Docker storage failure domain using encrypted transport, fail-closed validation, application-aware staging, Restic, and isolated restore testing.
Wazuh Integration: Central Security Telemetry Without Flattening the Network
A segmented SIEM integration that centralized endpoint and firewall telemetry while preserving narrow inter-zone policy, Zero Trust administration, host-level defense in depth, and explicit enforcement ownership.