Background
how I got hereAir Force, 2008. Secret and Top Secret encryption devices, switch refreshes at two in the morning. You learn what a network is by being responsible for one when nobody is around to help.
Six years at the Department of Defense — team lead for unclassified networks serving 10,000 users, then a $7M project portfolio. Running a portfolio changed how I engineer: a design that cannot be sequenced, funded, and staffed is not a design.
Then Campbell's, and five years at Virgin Galactic — where I arrived to no SIEM, SonicWall at the edge, and a legacy VPN, and left a security program. Every piece of it was a migration, not a purchase.
Today I assess and recover other people's environments at Sygnia, and translate what I find for the engineers who will do the work and the executives who will fund it.
How I Work
opinions, earnedMigrations are the job. The question is never which platform — it is how you get there without a window where you are blind.
Consolidation beats acquisition. Most environments do not need another tool; they need the ones they own centrally managed and cut to a policy set a human can reason about.
Cost is a security argument. A control that costs less than what it replaced survives the next budget cycle.
Write it down for the next person. Which is what this site is for.
Stack
hands-on, in productionWhat This Site Is For
vitalsecurity.ioWhere I publish what running security programs actually teaches you — the parts that do not make it into vendor documentation. Free, and aimed at people who have to make this work on Monday.