Lead Infrastructure Engineer moving into DevOps and security-focused platform engineering. 15 years of enterprise operations, now building infrastructure the way software gets built: in code, reviewed, and secure by default.
My homelab is run like a small production platform, and everything changes through pull requests.
- Network as code: UniFi gateway networks imported into Terraform and managed through reviewed plans
- Containers: Docker stacks behind Traefik with Let's Encrypt TLS, managed through Dockhand with an outbound-only agent
- Automation: Ansible baselines for every host
- Next: CI that validates every PR, monitoring and alerting, and k3s
- Secrets never touch Git. Pre-commit secret scanning, push protection, and
.examplefiles in place of real config - Least privilege by default. Dedicated service accounts and scoped API tokens
- Segmented networks. Zone-based firewall policies between VLANs
- Verified TLS. Trusted certificates everywhere, with no skipped verification
- Reviewable changes. Protected
main, signed commits, and a plan reviewed before every apply
| Area | Tools |
|---|---|
| IaC and config | Terraform · Ansible |
| CI/CD and GitOps | GitHub Actions · Git · pull request workflows |
| Containers | Docker · Docker Compose · Traefik · Kubernetes (learning: k3s) |
| Security | Secret scanning · Least privilege · Network segmentation · TLS · Zero Trust |
| Scripting | PowerShell · Bash · Python (learning) |
| Platforms | Linux · Windows Server · Nutanix · VMware · Hyper-V |
| Identity | Active Directory · Entra ID · SAML SSO |
| Networking | UniFi · VLANs · DNS |
Enterprise infrastructure at scale: HCI virtualization, Rubrik BCDR, SAML SSO rollouts, and Microsoft 365 and Entra ID administration. Nutanix Certified Professional (NCP-MCI).
Now applying that operations experience to automation, CI/CD, and security.