Principal-level engineer with 12+ years architecting, building, deploying, and improving secure SaaS and PaaS platforms, from late-stage startups to global enterprises. I've worn many hats along the way: Systems Architect, DevOps Engineer, SaaS/PaaS Platform Engineer, Forward-Deployed / Resident Solutions Engineer, and now Security Platform Engineer. Across startups at every stage and large corporations alike, one constant has remained: I love solving the engineering challenges that security work presents. Lately that's landed at the intersection of AI/ML security, zero-trust identity, and cloud-native platform engineering: building security platforms powered by AI and LLMs, and securing the models, agents, and pipelines the next decade will run on.
// current projects
The hard problems are moving up the stack — from securing infrastructure to securing the models and agents running on it. This is where I'm focused now.
Protecting models against extraction, inversion, poisoning, and adversarial inputs. Threat modeling the full ML lifecycle — from training data integrity to inference-time defense.
Building the policy and enforcement layer for autonomous agents — OPA-backed tool-use governance, prompt injection defense, and runtime constraints on what an agent can actually access and do.
Distilling and optimizing models for secure, cost-efficient self-hosted deployment — shrinking frontier capability into controllable, auditable models you actually own.
Architecting cloud infrastructure to run models securely — isolated inference environments, secrets-managed model access, network segmentation, and zero-trust identity for AI workloads.
// skills
AI / ML Security & Tooling
Security & Zero-Trust
Cloud Services
Automation & IaC
Microservices
CI / CD
Observability
Data
Operating Systems
Languages
// experience
Senior Security Platform Engineer responsible for architecting and deploying Wiz CNAPP across multi-cloud (AWS/Azure) estates — agentless cloud scanning, KSPM, and shift-left IaC/SAST gating integrated into CI/CD pipelines. Govern compliance frameworks (CIS, NIST, SOC 2, FedRAMP) and build automated finding-to-remediation workflows via Jira and ServiceNow, eliminating manual triage at scale.
Embedded inside large enterprise customers to design and automate secure cloud operating models on the HashiCorp stack.
Led a globally distributed platform team building security tooling and internal platform capabilities.
// builds
Currently building
Shipped
// contact
Whether you're looking to bring in senior AI security engineering talent, need a consulting partner for model security or agentic platform architecture, or just want to talk about what governing autonomous systems looks like in production — I'd like to hear from you.