Available for hire

AARON
HENDRICKS

I got into technology in 8th grade when a friend showed me his PC running Ubuntu Linux. Something clicked that day that never unclicked. I've spent the years since learning how systems actually work — not just how to use them, but how to own them. I believe the best engineers aren't the ones who know the most answers. They're the ones who can't stop asking why.

Salt Lake City, UT
Open to remote
Open to relocation
Solutions Engineer · Technical Strategist · Leadership
Get in touch →

01

SKILLS

Systems & Infrastructure
  • Linux (Ubuntu/Debian)
  • Windows Server 2016–2022
  • Active Directory
  • GPO
  • Azure AD / Entra ID
  • Proxmox VE
  • VMware ESXi
  • iRedMail
  • DNS / DHCP
  • Office 365
  • Google Workspace
Networking & Security
  • VLAN Segmentation
  • WireGuard / Headscale
  • Nginx Reverse Proxy
  • nftables / UFW
  • SSL/TLS (Certbot)
  • Cisco Meraki
  • pfSense
  • SPF/DKIM/DMARC
  • VoIP (FreePBX)
  • PON / FTTH
Automation & Development
  • Python
  • Bash
  • PowerShell
  • Flask
  • Git
  • SQL (MariaDB/PostgreSQL)
  • REST API Integration
  • API Reverse Engineering
  • Stripe API
  • SMTP Automation
Hardware & IoT
  • ESP32 / Arduino
  • Raspberry Pi
  • Circuit Prototyping
  • GPIO / Sensors
  • Ubiquiti UniFi
  • RF / WiFi Planning
  • Structured Cabling
Cloud & AI
  • Kubernetes (k3s)
  • Docker
  • Longhorn Storage
  • Ollama / Local LLM
  • AI Automation Pipelines
  • Speech / Vision Processing
  • Backup & Recovery

02

PRIVATE CLOUD

// self-hosted homelab nodes · connected via headscale mesh · 100.64.110.0/23

Headscale // Mesh Topology
MESH: ONLINE
NODES: 8

03

PROJECTS

🌐 Homelab Infrastructure
Headscale Mesh + Node CLI

Self-hosted WireGuard overlay connecting an 8-node private cloud across physical locations. Built custom CLI tooling for SSH command broadcast, deployment, MOTD management, and status monitoring across all nodes simultaneously.

HeadscaleWireGuard PythonProxmox VE BashSSH
🔐 Security Research
Email Spoofing Tool

Discovered that malicious actors were bypassing Proofpoint (enterprise spam filter) via direct-to-MX delivery — skipping DNS MX records entirely. Built a custom spoofing test tool to prove the vector and validate the fix. Saved a client from active exposure.

PythonSMTP SPF/DKIM/DMARCSecurity Research
🤖 AI + Hardware
Jarvis (Butterpooch)

A SunFounder robot dog on a Raspberry Pi 5 running a full AI voice pipeline: OpenWakeWord → faster-whisper STT → local LLM (Gemma 4 via LM Studio) → Piper TTS. Also doubles as a security camera with LLM image analysis and email alerts. Because why build a robot dog that just walks around?

Raspberry Pi 5Python LLMPiper TTS OpenWakeWordWhisper
🔒 Personal Project
IoT Smart Lock

ESP32-based WiFi smart lock prototype with deep sleep power management, matrix keypad entry, magnetic door sensor, and motor driver. Flask API server handles dynamic PIN sync across multiple units. Now in active consideration for a real residential deployment.

ESP32Arduino C++ FlaskGPIO REST APIDeep Sleep
♟ Chess + AI
Chess Coach App

Built for a coworker who said he wanted to improve his game. FEN position analysis, PGN game review, Gemini API integration, piece influence visualizer (attack/defense heat overlays), and a tension map showing contested squares. He never used it. Occupational hazard.

PythonGemini API CanvasFEN/PGN
🎮 API Reverse Engineering
Game Automation Bot

Inspected browser network traffic to map a web game's full client-server API. Built a Python client that speaks the native protocol — auth, world queries, movement, interaction, harvest timing. Territory-boundary validation prevents invalid requests. Built with my brother.

PythonAPI Reverse Eng. HTTP Interceptionrequests
🌍 Open Source
Porkbun DNS CLI

Open-source command-line tool wrapping the Porkbun REST API for DNS and domain management — published on GitHub and used in production at High Ground Web. Paired with private tooling that automates nginx site provisioning, cutting new-client deployment from hours to minutes.

PythonREST API DNSCLI GitHub
📊 Email Security
DMARC Report Visualizer

Deployed a full iRedMail server with SPF/DKIM/DMARC enforcement, then built a visualizer that parses DMARC aggregate reports into a dashboard — auditing delivery health and spoofing exposure across every owned domain at a glance.

PythoniRedMail SPF/DKIM/DMARCData Viz
🔐 Personal Project
Shield — Email Alias Platform

Database-backed email alias system built on Python, Flask, and MariaDB. Custom Postfix piping routes inbound email dynamically based on real-time database lookups. Full identity control without any third-party dependency.

PythonFlask PostfixMariaDB SMTP
Field Notes More details on these projects at my blog. blog.ahcomputing.com

04

EXPERIENCE

High Ground Web
May 2026 – Present
Salt Lake City, UT · Founder
  • Founded and operate a web hosting and deployment platform serving small-business clients — auto repair, accounting, home services — owning the full stack from domain registration to production hosting.
  • Published an open-source CLI on GitHub wrapping the Porkbun REST API for DNS and domain management; built private tooling that automates nginx site provisioning, cutting new-client deployment from hours to minutes.
  • Run nginx reverse-proxy configuration, SSL/TLS, and Flask contact-form backends across client sites, coordinated through a structured port registry.
Microworks
Mar 2021 – Jun 2026
Salt Lake City, UT · MSP
  • Design and support hybrid IT infrastructure for SMB clients — Windows Server, VLANs, VoIP. Highest tier of technical escalation.
  • Identified an email spoofing vector bypassing enterprise spam filtering; built a test tool to validate the attack and confirm the fix.
  • Redocumented a 20+ VLAN multi-site network with pfSense mesh VPN — enabling hardware refresh and DHCP pool expansion; also configured Azure AD SSO for DocuSign on the same client.
  • Built full apartment network infrastructure from scratch — cabling, switches, VLANs, APs — including Python scripts to auto-generate per-unit VLAN configs.
  • Designed multi-floor WiFi coverage plans using Ubiquiti UniFi Design Manager with architectural floor plans and RF heatmap validation.
  • Built Python automation for deployment, monitoring, and network config generation; performed full multi-site Synology NAS remediation across client environments.
Vicidiem
Jun 2019 – Mar 2021
Salt Lake City, UT
  • Deployed full apartment network infrastructure at new construction sites — physical cabling through firewall config and per-unit router setup.
  • Wrote Python scripts to generate VLAN configs for 100–300 unit properties; independently extended them to add QR code WiFi onboarding for tenants.
  • Led a solo 2-day nursing home phone migration: new FreePBX server, 66-block termination, multiple Grandstream ATAs.
Extra Space Storage
Nov 2016 – Jun 2019
Salt Lake City, UT
  • Key contributor to technology rollouts across 1,500+ sites: Android MDM, RingCentral VoIP, Office 365 for 3,200 employees.
  • Traveled solo to Atlanta to lead satellite office network buildout — site installation and domain join completed independently.
  • Built a weekly process to monitor cellular backup bandwidth and block overages before threshold — process lapsed after departure. ESS incurred ~$100K in carrier fees. $100K IMPACT

05

CERTIFICATIONS

SEC+
CompTIA Security+
February 2019
NET+
CompTIA Network+
October 2010
A+
CompTIA A+
October 2010
CKA
Certified Kubernetes Administrator
In progress · 2026

LET'S TALK

// open to Solutions Engineer · Technical Strategist · Fractional CTO · and roles worth defining · remote or relocation considered