Cybersecurity & Network Engineering
Segmented. Hardened. Documented.
Tailscale — the only admin path, to the K3s control plane and ESXi management.
Five systems I designed, built, and run.
A public game server, run from home. Players come in through a tunnel; admin access stays on a private path.
Key decision — public traffic and admin access never share a path.
A UniFi home network split into trusted, IoT, guest, and DMZ segments, with WPA3 where devices support it.
Key decision — nothing crosses between zones unless a rule allows it.
K3s on Oracle Cloud's Always Free ARM instances, behind Ingress-NGINX with automatic TLS.
Key decision — every public service gets a clean ingress and certificate, never an ad-hoc port.
A self-hosted BookStack wiki that runs on the same cluster it documents.
Key decision — guests can read, edits need sign-in, and the data is backed up.
IRLab sends a realistic alert, takes your response plan, and scores it.
Key decision — no LLM in the score, so every point is explainable.
Provisioned Cisco switches and routers, traced and repaired campus fiber, and reconciled access-point records for ISO audit preparation.
Jan 2025 – Sep 2026
Designed an AWS Zero Trust architecture and multi-account access governance for a multi-cloud environment. Selected as an outstanding intern.
Jul 2026 · Seoul
Guided students through Windows System Administration projects, graded assignments with detailed feedback, and resolved lab environment issues.
Aug 2024 – May 2025
Built a two-room data center for research and instruction: installed servers, cabling, and power distribution, and configured Cisco and HP network equipment.
Jul 2024 – Aug 2024
Configured and repaired endpoints across internet, intranet, and private networks.
Nov 2021 – Aug 2023
GPA 3.68 · West Lafayette, Indiana
Aug 2020 – Dec 2026
Final semester · Fall 2026
CNIT 45500
Packet filtering, VPNs, IPsec, RADIUS, and intrusion detection.
Labs: firewalls · VPNs · vulnerability testing and IDS
CNIT 47000
Identify, protect, detect, respond, and recover, with hands-on host forensics.
Labs: identify · protect · detect · respond
CNIT 48101
Availability and SLAs, leaf-spine data centers, virtualization, and containers.
Labs: cloud-init · Vagrant · Docker multi-stage builds
CNIT 58100
Kubernetes, Helm, infrastructure as code, and cloud monitoring.
Labs: Docker images · multi-container nginx · shared volumes
Email is the fastest way to reach me.