I got into technology in 8th grade when a friend showed me his PC running Ubuntu Linux. Something clicked that day that never unclicked. I've spent the years since learning how systems actually work — not just how to use them, but how to own them. I believe the best engineers aren't the ones who know the most answers. They're the ones who can't stop asking why.
// self-hosted homelab nodes · connected via headscale mesh · 100.64.110.0/23
Designed, programmed, and installed a full fiber ISP serving 200+ residential units. Ubiquiti infrastructure, 2Gbps uplink, 10G backbone, per-unit VLAN isolation. Each tenant gets their own network — not a shared pipe.
Before launch, identified the #1 likely support call: residents asking for WiFi passwords. Built a Python tool that generates QR code documents and emails them automatically on tenant onboarding. Resident WiFi calls dropped to zero.
The ad at the top of this page had no camera, no editing timeline, and no voice actor. Every shot is a Python script: a procedural 3D set and a rigged model of my robot dog, built in headless Blender and rendered with Cycles on my own RTX 3090. The voices are local text-to-speech, the score and sound effects are synthesised in NumPy, and a PIL/ffmpeg pass handles grading, captions, and both the 16:9 and 9:16 cuts.
Automated gates check the animation before any render time is spent — limbs clipping through bodies, joints bending backwards, eyes covered, props sunk into the floor — so defects get caught by code, not by a viewer.
One RTX 3090 serves the whole mesh: a local LLM (Gemma 4 on Ollama, with vision and audio input), Kokoro text-to-speech, and faster-whisper large-v3 speech-to-text, plus Qwen3-TTS character voices that load on demand and free the GPU when the job ends. Context sizes and quantisation are tuned so everything shares 24 GB of VRAM. Cluster apps and devices call it over the WireGuard mesh, and nothing leaves the network.
LLM output is constrained with JSON schemas and few-shot examples, then validated against allow-lists in code. Measured, not assumed: 2 bad values in 10 calls without examples, 0 in 12 with them.
A reporting PWA that turns typed or dictated construction notes into reviewed PDF reports. Whisper transcribes the dictation, an LLM asks clarifying questions and drafts revisions, and the report is reviewed before it's final. Photo handling, SQLite storage, device authentication, output validation, and a prompt-evaluation harness so prompt changes are tested, not guessed.
Type in an address, get a roof estimate. Address lookup, satellite and solar data, Claude Vision analysis of the roof, materials and labor calculations, and a finished PDF estimate — external data and AI analysis wired into one complete browser workflow, built and deployed during a hackathon.
Reusable instructions, scripts, and validation workflows that let AI coding agents do repeatable creative and technical work — 3D asset pipelines, generative art, video production, cluster deployments. Each skill packages tool usage, project conventions, troubleshooting notes, and human review checkpoints, so the agent does the same job the same way every time.
A government-opportunity finder that pulls from federal sources, ranks results programmatically, and has AI explain each match — including saying so when nothing fits. And a browser agent where every outbound action needs human approval, with a versioned learning playbook, full audit trails, and a simulation benchmark with a control arm to measure whether it actually gets better.
An ad-free ambient sound mixer for sleep — layered rain, thunder, and theta waves, installable as an app. It's the most-used tool in my personal portfolio, which also includes games with regular players.
Self-hosted WireGuard overlay connecting an 8-node private cloud across physical locations. Built custom CLI tooling for SSH command broadcast, deployment, MOTD management, and status monitoring across all nodes simultaneously.
Discovered that malicious actors were bypassing Proofpoint (enterprise spam filter) via direct-to-MX delivery — skipping DNS MX records entirely. Built a custom spoofing test tool to prove the vector and validate the fix. Saved a client from active exposure.
A SunFounder robot dog on a Raspberry Pi 5 running a full AI voice pipeline: OpenWakeWord → faster-whisper STT → local LLM (Gemma 4 on Ollama) → Kokoro TTS. Also doubles as a security camera with LLM image analysis and email alerts. Because why build a robot dog that just walks around?
ESP32-based WiFi smart lock prototype with deep sleep power management, matrix keypad entry, magnetic door sensor, and motor driver. Flask API server handles dynamic PIN sync across multiple units. Now in active consideration for a real residential deployment.
Built for a coworker who said he wanted to improve his game. FEN position analysis, PGN game review, Gemini API integration, piece influence visualizer (attack/defense heat overlays), and a tension map showing contested squares. He never used it. Occupational hazard.
Inspected browser network traffic to map a web game's full client-server API. Built a Python client that speaks the native protocol — auth, world queries, movement, interaction, harvest timing. Territory-boundary validation prevents invalid requests. Built with my brother.
Open-source command-line tool wrapping the Porkbun REST API for DNS and domain management — published on GitHub and used in production at High Ground Web. Paired with private tooling that automates nginx site provisioning, cutting new-client deployment from hours to minutes.
Deployed a full iRedMail server with SPF/DKIM/DMARC enforcement, then built a visualizer that parses DMARC aggregate reports into a dashboard — auditing delivery health and spoofing exposure across every owned domain at a glance.
Database-backed email alias system built on Python, Flask, and MariaDB. Custom Postfix piping routes inbound email dynamically based on real-time database lookups. Full identity control without any third-party dependency.
// open to Solutions Engineer · Systems Administrator · AI Expert · Technical Strategist · and roles worth defining · remote or relocation considered