Projects
A collection of projects I've worked on.
Latest Projects I'm Working On
What I'm doing professionally at Aquia right now, from getting started on CMS SaaS governance work to my current role on SEAS-IT, plus a federal AI guardrail framework I co-authored along the way.
CMS SaaS Governance Initiative
Security ArchitectAquia was a subcontractor for this initiative and built the first SaaS Governance program in the federal space from the ground up for the Centers for Medicare & Medicaid Services (CMS). I served as Security Architect on this engagement.
CMS SEAS-IT: Enterprise Architecture Services
Lead / Principal Security EngineerMy current role, supporting CMS's Enterprise Architecture Services under the SEAS-IT contract, including the agency's push toward measurable AI outcomes. I'm the Lead/Principal Security Engineer on this contract.
Federal AI Guardrail Framework
Co-AuthorCo-authored a framework to help federal agencies evaluate AI risk and deploy responsibly.
Spacelift Blog
Contributing AuthorI contribute articles to the Spacelift.io engineering blog, covering security and cloud infrastructure topics for their developer audience.
Professional Development Projects
A running list of side projects I'm building on my own time to learn new tools and sharpen my skills. Check back as I add more of what I'm currently tinkering with.
RiskForge
A web-based risk register for NIST SP 800-53, NIST AI RMF 1.0, and the OWASP GenAI LLM Top 10, with a 5x5 risk matrix, control mapping, dashboards, and CSV reporting.
- FastAPI
- React
- TypeScript
- PostgreSQL
- Docker
STRIDE Threat Modeling Tool
An interactive web app for conducting STRIDE threat analysis, with automatic risk scoring, visual analytics, and exportable HTML/CSV/JSON reports.
January 10, 2026 → Present
- Astro
- React
- TypeScript
- Tailwind CSS
Driftwatch
A CLI tool that catches infrastructure drift between live AWS environments and Terraform code, with pre-deploy conflict checks, drift detection, and full infra scans exported to JSON, Excel, and Mermaid diagrams.
April 22, 2026 → Present
- Python
- AWS
- Terraform
- boto3