Available for hire

AARON
HENDRICKS

More than just mad skills.

I got into technology in 8th grade when a friend showed me his PC running Ubuntu Linux. Something clicked that day that never unclicked. I've spent the years since learning how systems actually work — not just how to use them, but how to own them. I believe the best engineers aren't the ones who know the most answers. They're the ones who can't stop asking why.

Salt Lake City, UT
Open to remote
Open to relocation
Solutions Engineer · Technical Strategist · Leadership
Get in touch →

01

SKILLS

Systems & Infrastructure
  • Linux (Ubuntu/Debian)
  • Windows Server 2016–2022
  • Active Directory
  • Azure AD / Entra ID
  • Proxmox VE
  • VMware ESXi
  • iRedMail
  • DNS / DHCP
  • Office 365
Networking & Security
  • VLAN Segmentation
  • WireGuard / Headscale
  • Nginx Reverse Proxy
  • nftables / UFW
  • SSL/TLS (Certbot)
  • Cisco Meraki
  • pfSense
  • SPF/DKIM/DMARC
  • VoIP (FreePBX)
  • PON / FTTH
Automation & Development
  • Python
  • Bash
  • Flask
  • SQL / MariaDB
  • REST API Integration
  • API Reverse Engineering
  • Stripe API
  • SMTP Automation
Hardware & IoT
  • ESP32 / Arduino
  • Raspberry Pi
  • Circuit Prototyping
  • GPIO / Sensors
  • Ubiquiti UniFi
  • RF / WiFi Planning
  • Structured Cabling

02

THE FLEET

// kriegsmarine-named homelab nodes · connected via self-hosted headscale mesh · 100.64.110.0/23

Kriegsmarine // Active Fleet
MESH: ONLINE
NODES: 8

03

PROJECTS

🌐 Homelab Infrastructure
Headscale Mesh + Fleet CLI

Self-hosted WireGuard overlay connecting an 8-node fleet across physical locations. Built custom fleet CLI tooling for SSH command broadcast, deployment, MOTD management, and status monitoring across all nodes simultaneously.

HeadscaleWireGuard PythonProxmox VE BashSSH
🔐 Security Research
Email Spoofing Tool

Discovered that malicious actors were bypassing Proofpoint (enterprise spam filter) via direct-to-MX delivery — skipping DNS MX records entirely. Built a custom spoofing test tool to prove the vector and validate the fix. Saved a client from active exposure.

PythonSMTP SPF/DKIM/DMARCSecurity Research
🤖 AI + Hardware
Jarvis (Butterpooch)

A SunFounder robot dog on a Raspberry Pi 5 running a full AI voice pipeline: OpenWakeWord → faster-whisper STT → local LLM (Gemma 4 via LM Studio) → Piper TTS. Also doubles as a security camera with LLM image analysis and email alerts. Because why build a robot dog that just walks around?

Raspberry Pi 5Python LLMPiper TTS OpenWakeWordWhisper
🔒 Personal Project
IoT Smart Lock

ESP32-based WiFi smart lock prototype with deep sleep power management, matrix keypad entry, magnetic door sensor, and motor driver. Flask API server handles dynamic PIN sync across multiple units. Now in active consideration for a real residential deployment.

ESP32Arduino C++ FlaskGPIO REST APIDeep Sleep
♟ Chess + AI
Chess Coach App

Built for a coworker who said he wanted to improve his game. FEN position analysis, PGN game review, Gemini API integration, piece influence visualizer (attack/defense heat overlays), and a tension map showing contested squares. He never used it. Occupational hazard.

PythonGemini API CanvasFEN/PGN
🎮 API Reverse Engineering
Game Automation Bot

Inspected browser network traffic to map a web game's full client-server API. Built a Python client that speaks the native protocol — auth, world queries, movement, interaction, harvest timing. Territory-boundary validation prevents invalid requests. Built with my brother.

PythonAPI Reverse Eng. HTTP Interceptionrequests
🔐 Personal Project
Shield — Email Alias Platform

Database-backed email alias system built on Python, Flask, and MariaDB. Custom Postfix piping routes inbound email dynamically based on real-time database lookups. Full identity control without any third-party dependency.

PythonFlask PostfixMariaDB SMTP
Field Notes More details on these projects at my blog. blog.ahcomputing.com

04

EXPERIENCE

Microworks
Mar 2021 – Present
Salt Lake City, UT · MSP
  • Design and support hybrid IT infrastructure for SMB clients — Windows Server, VLANs, VoIP. Highest tier of technical escalation.
  • Identified an email spoofing vector bypassing enterprise spam filtering; built a test tool to validate the attack and confirm the fix.
  • Redocumented a 20+ VLAN multi-site network with pfSense mesh VPN — enabling hardware refresh and DHCP pool expansion; also configured Azure AD SSO for DocuSign on the same client.
  • Built full apartment network infrastructure from scratch — cabling, switches, VLANs, APs — including Python scripts to auto-generate per-unit VLAN configs.
  • Designed multi-floor WiFi coverage plans using Ubiquiti UniFi Design Manager with architectural floor plans and RF heatmap validation.
Vicidiem
Jun 2019 – Mar 2021
Salt Lake City, UT
  • Deployed full apartment network infrastructure at new construction sites — physical cabling through firewall config and per-unit router setup.
  • Wrote Python scripts to generate VLAN configs for 100–300 unit properties; independently extended them to add QR code WiFi onboarding for tenants.
  • Led a solo 2-day nursing home phone migration: new FreePBX server, 66-block termination, multiple Grandstream ATAs.
Extra Space Storage
Nov 2016 – Jun 2019
Salt Lake City, UT
  • Key contributor to technology rollouts across 1,500+ sites: Android MDM, RingCentral VoIP, Office 365 for 3,200 employees.
  • Traveled solo to Atlanta to lead satellite office network buildout — site installation and domain join completed independently.
  • Built a weekly process to monitor cellular backup bandwidth and block overages before threshold — process lapsed after departure. ESS incurred ~$100K in carrier fees. $100K IMPACT

05

CERTIFICATIONS

SEC+
CompTIA Security+
February 2019
NET+
CompTIA Network+
October 2010
A+
CompTIA A+
October 2010

LET'S TALK

// open to Solutions Engineer · Technical Strategist · Fractional CTO · and roles worth defining · remote or relocation considered