Skip to content
DM

Skills

What I work with

Languages by proficiency, then 222 frameworks, platforms, and tools grouped by where they fit, and the wider technical and professional skill set behind them.

01

Programming

Languages I write regularly, with an honest read on depth.

Formats and dialects

  • T-SQL, PostgreSQL, Spark SQL, and SQLite dialects
  • GraphQL
  • YAML
  • TOML
  • JSON and JSON5
  • XML
  • Markdown
  • HCL for Terraform
  • CloudFormation templates
  • Dockerfile and Compose
  • Regular expressions

02

Stack

Frameworks, platforms, and tooling from shipped work, grouped by the layer they live in.

Frontend

Component frameworks, build tooling, and the libraries behind data-heavy interfaces.

  • React
  • Next.js
  • Astro
  • Vue
  • Vite
  • Tailwind CSS
  • TanStack Query
  • React Hook Form
  • Zod
  • Recharts
  • Chart.js
  • D3
  • Three.js
  • ELK.js
  • unified, remark, and rehype
  • Shiki
  • KaTeX
  • Orama
  • VS Code Extension API

Backend and APIs

Python services on ASGI, background work, persistence, and the auth around them.

  • FastAPI
  • Granian
  • ASGI
  • Pydantic
  • SQLAlchemy
  • Alembic
  • Celery
  • Flask
  • httpx and requests
  • REST API design
  • GraphQL
  • Server-Sent Events
  • OAuth 2.0 and OIDC
  • JWT
  • Argon2 and bcrypt
  • Rate limiting and quotas
  • nginx

Data platforms

Lakehouse pipelines on Databricks, the engines under them, and the stores beside them.

  • Databricks Apps, Jobs, and SQL Warehouses
  • Unity Catalog
  • Delta Lake and Change Data Feed
  • PySpark
  • Spark Connect and serverless compute
  • Polars
  • pandas
  • NumPy
  • PyArrow
  • sqlglot
  • MLflow
  • Power BI
  • PostgreSQL
  • SQL Server
  • SQLite
  • Redis
  • Parquet, Avro, JSON, and XML
  • Medallion architecture
  • Incremental and CDC pipelines
  • Fuzzy matching

AI and machine learning

LLM systems in production, from agents and retrieval to evaluation, plus classical ML.

  • Claude
  • Databricks Model Serving
  • OpenAI SDK
  • LangChain
  • Tool-use agents
  • Multi-agent planning
  • Retrieval with embeddings
  • LLM-as-judge evaluation
  • AI code review pipelines
  • scikit-learn
  • PyTorch
  • MLflow experiments

Cloud

Identity, networking, and compute across the three clouds in use.

  • Azure Entra ID
  • Azure Key Vault
  • Azure Front Door
  • Azure VNets and NSGs
  • Azure Web Apps
  • Azure IAM and RBAC
  • AWS ECS Fargate
  • AWS ECR
  • AWS ALB and CloudFront
  • AWS CloudFormation
  • AWS IAM with OIDC federation
  • Oracle Cloud

Infrastructure and operations

Containers, orchestration, provisioning, and the observability stack around them.

  • Docker
  • Docker Compose
  • Kubernetes
  • Terraform
  • Ansible
  • nginx
  • Proxmox
  • Portainer
  • Home Assistant
  • Jellyfin
  • Prometheus
  • Grafana
  • Linux
  • Windows Server
  • Cisco networking

CI/CD and supply chain security

GitHub Actions at organization scale, with every pull request scanned and attested.

  • GitHub Actions
  • Reusable workflows and composite actions
  • Branch rulesets and required checks
  • OIDC federation to AWS and Azure
  • Dependabot
  • Dependency Review
  • CycloneDX SBOM
  • Build provenance attestations
  • Trivy
  • Semgrep
  • Secretlint
  • Bandit
  • pip-audit
  • SARIF and Code Scanning
  • Settings as code

Testing and code quality

Test frameworks, type checkers, and linters wired into every repository.

  • pytest
  • pytest-asyncio
  • pytest-cov
  • Vitest
  • Jest
  • Testing Library
  • cargo test
  • Coverage and JUnit reporting
  • Smoke boot tests
  • Bundle-size budgets
  • Duplicate-code detection
  • ty
  • mypy
  • TypeScript strict mode
  • Ruff
  • Black
  • ESLint
  • Stylelint
  • Prettier
  • ShellCheck
  • Hadolint
  • clippy and rustfmt
  • pre-commit

Systems programming

What goes into a database engine written from scratch in Rust.

  • Tokio
  • parking_lot
  • crossbeam
  • mimalloc
  • rustls
  • zstd
  • hyper
  • Raft consensus
  • MVCC
  • B+ trees
  • Write-ahead logging
  • Columnar encoding
  • Wire protocols
  • Lock-free hot paths
  • Benchmark harnesses

Identity and access

Who gets in, how they prove it, and what they can touch once they are in.

  • Okta
  • Microsoft Entra ID
  • SailPoint
  • Zero trust access
  • Passwordless authentication
  • FIDO2 and WebAuthn
  • Hardware security keys
  • Federation and single sign-on with SAML and OIDC
  • Multi-factor authentication
  • Conditional access
  • Privileged access management and just-in-time elevation
  • Role-based access control
  • Least privilege
  • Service principals and workload identity
  • Token scoping and rotation
  • Identity governance and administration
  • Identity lifecycle management
  • Access certification and reviews
  • Segregation of duties
  • Active Directory and directory services

Security engineering

The practices behind the tools, from architecture and audits to cryptography.

  • Zero trust architecture
  • Threat modeling
  • Identity threat modeling
  • Secure SDLC
  • Security audits
  • Architecture risk assessments and design reviews
  • Reference architectures and technical standards
  • Incident response
  • Disaster recovery
  • Secrets management
  • Key management with Azure Key Vault
  • PKI and TLS
  • Encryption at rest and in transit
  • Hybrid post-quantum key exchange
  • Cryptography
  • Network segmentation with VNets and NSGs
  • Web application firewall
  • Vulnerability management
  • Supply chain security and SBOM
  • Data masking and access governance
  • Audit logging and compliance
  • NIST CSF, ISO 27001, HIPAA, SOX, and FDA cybersecurity guidance
  • Browser hardening with CSP and HSTS
  • Penetration testing
  • Digital forensics

Security tooling

Offensive, defensive, and forensic tools from coursework, CTFs, and audits.

  • Autopsy
  • Burp Suite
  • CrowdStrike
  • CrowdSec
  • Metasploit
  • Nessus
  • Nmap
  • OWASP ZAP
  • pfSense
  • Snort
  • SolarWinds
  • Splunk
  • Wireshark
  • Semgrep
  • Trivy
  • Secretlint
  • Bandit
  • GitHub Code Scanning

Source control and collaboration

Where code and conversations live.

  • Git
  • GitHub REST and GraphQL APIs
  • GitLab
  • Gitea
  • Azure DevOps
  • Microsoft Graph
  • Microsoft Teams integrations
  • Microsoft 365
  • draw.io and Mermaid
  • MkDocs
  • Technical writing

03

Technical

  • Automated Testing / Unit Tests
  • CI/CD
  • Cisco Software & Hardware
  • Cloud Architecture
  • Cloud Configuration
  • Code Review
  • Cybersecurity
  • Data Analysis
  • Database Management
  • Data Protection
  • Hardware Troubleshooting, Assembly, and Maintenance
  • Incident Response
  • Information Security
  • IT Strategic Planning
  • Linux and Windows Server
  • Microsoft 365
  • Network Administration
  • Network Security
  • Risk Assessment & Management
  • System Administration
  • Threat Detection & Intelligence
  • Web Application Development

04

Professional

  • Agile Methodology
  • Adaptability
  • Analytical and Critical Thinking
  • Collaboration
  • Conflict Resolution
  • Effective Communication
  • Decision Making
  • Dependability
  • Etiquette
  • Integrity
  • Public Speaking
  • Project Management
  • Research