Skills
What I work with
Languages by proficiency, then 222 frameworks, platforms, and tools grouped by where they fit, and the wider technical and professional skill set behind them.
01
Programming
Languages I write regularly, with an honest read on depth.
- PythonExpert
- TypeScriptExpert
- JavaScriptExpert
- SQLExpert
- RustExpert
- JavaAdvanced
- BashAdvanced
- PowerShellAdvanced
- HTMLAdvanced
- CSS and SCSSAdvanced
- AssemblyAdvanced
- CProficient
- RProficient
- PHPProficient
- MalbolgeBeginner
Formats and dialects
- T-SQL, PostgreSQL, Spark SQL, and SQLite dialects
- GraphQL
- YAML
- TOML
- JSON and JSON5
- XML
- Markdown
- HCL for Terraform
- CloudFormation templates
- Dockerfile and Compose
- Regular expressions
02
Stack
Frameworks, platforms, and tooling from shipped work, grouped by the layer they live in.
Frontend
Component frameworks, build tooling, and the libraries behind data-heavy interfaces.
- React
- Next.js
- Astro
- Vue
- Vite
- Tailwind CSS
- TanStack Query
- React Hook Form
- Zod
- Recharts
- Chart.js
- D3
- Three.js
- ELK.js
- unified, remark, and rehype
- Shiki
- KaTeX
- Orama
- VS Code Extension API
Backend and APIs
Python services on ASGI, background work, persistence, and the auth around them.
- FastAPI
- Granian
- ASGI
- Pydantic
- SQLAlchemy
- Alembic
- Celery
- Flask
- httpx and requests
- REST API design
- GraphQL
- Server-Sent Events
- OAuth 2.0 and OIDC
- JWT
- Argon2 and bcrypt
- Rate limiting and quotas
- nginx
Data platforms
Lakehouse pipelines on Databricks, the engines under them, and the stores beside them.
- Databricks Apps, Jobs, and SQL Warehouses
- Unity Catalog
- Delta Lake and Change Data Feed
- PySpark
- Spark Connect and serverless compute
- Polars
- pandas
- NumPy
- PyArrow
- sqlglot
- MLflow
- Power BI
- PostgreSQL
- SQL Server
- SQLite
- Redis
- Parquet, Avro, JSON, and XML
- Medallion architecture
- Incremental and CDC pipelines
- Fuzzy matching
AI and machine learning
LLM systems in production, from agents and retrieval to evaluation, plus classical ML.
- Claude
- Databricks Model Serving
- OpenAI SDK
- LangChain
- Tool-use agents
- Multi-agent planning
- Retrieval with embeddings
- LLM-as-judge evaluation
- AI code review pipelines
- scikit-learn
- PyTorch
- MLflow experiments
Cloud
Identity, networking, and compute across the three clouds in use.
- Azure Entra ID
- Azure Key Vault
- Azure Front Door
- Azure VNets and NSGs
- Azure Web Apps
- Azure IAM and RBAC
- AWS ECS Fargate
- AWS ECR
- AWS ALB and CloudFront
- AWS CloudFormation
- AWS IAM with OIDC federation
- Oracle Cloud
Infrastructure and operations
Containers, orchestration, provisioning, and the observability stack around them.
- Docker
- Docker Compose
- Kubernetes
- Terraform
- Ansible
- nginx
- Proxmox
- Portainer
- Home Assistant
- Jellyfin
- Prometheus
- Grafana
- Linux
- Windows Server
- Cisco networking
CI/CD and supply chain security
GitHub Actions at organization scale, with every pull request scanned and attested.
- GitHub Actions
- Reusable workflows and composite actions
- Branch rulesets and required checks
- OIDC federation to AWS and Azure
- Dependabot
- Dependency Review
- CycloneDX SBOM
- Build provenance attestations
- Trivy
- Semgrep
- Secretlint
- Bandit
- pip-audit
- SARIF and Code Scanning
- Settings as code
Testing and code quality
Test frameworks, type checkers, and linters wired into every repository.
- pytest
- pytest-asyncio
- pytest-cov
- Vitest
- Jest
- Testing Library
- cargo test
- Coverage and JUnit reporting
- Smoke boot tests
- Bundle-size budgets
- Duplicate-code detection
- ty
- mypy
- TypeScript strict mode
- Ruff
- Black
- ESLint
- Stylelint
- Prettier
- ShellCheck
- Hadolint
- clippy and rustfmt
- pre-commit
Systems programming
What goes into a database engine written from scratch in Rust.
- Tokio
- parking_lot
- crossbeam
- mimalloc
- rustls
- zstd
- hyper
- Raft consensus
- MVCC
- B+ trees
- Write-ahead logging
- Columnar encoding
- Wire protocols
- Lock-free hot paths
- Benchmark harnesses
Identity and access
Who gets in, how they prove it, and what they can touch once they are in.
- Okta
- Microsoft Entra ID
- SailPoint
- Zero trust access
- Passwordless authentication
- FIDO2 and WebAuthn
- Hardware security keys
- Federation and single sign-on with SAML and OIDC
- Multi-factor authentication
- Conditional access
- Privileged access management and just-in-time elevation
- Role-based access control
- Least privilege
- Service principals and workload identity
- Token scoping and rotation
- Identity governance and administration
- Identity lifecycle management
- Access certification and reviews
- Segregation of duties
- Active Directory and directory services
Security engineering
The practices behind the tools, from architecture and audits to cryptography.
- Zero trust architecture
- Threat modeling
- Identity threat modeling
- Secure SDLC
- Security audits
- Architecture risk assessments and design reviews
- Reference architectures and technical standards
- Incident response
- Disaster recovery
- Secrets management
- Key management with Azure Key Vault
- PKI and TLS
- Encryption at rest and in transit
- Hybrid post-quantum key exchange
- Cryptography
- Network segmentation with VNets and NSGs
- Web application firewall
- Vulnerability management
- Supply chain security and SBOM
- Data masking and access governance
- Audit logging and compliance
- NIST CSF, ISO 27001, HIPAA, SOX, and FDA cybersecurity guidance
- Browser hardening with CSP and HSTS
- Penetration testing
- Digital forensics
Security tooling
Offensive, defensive, and forensic tools from coursework, CTFs, and audits.
- Autopsy
- Burp Suite
- CrowdStrike
- CrowdSec
- Metasploit
- Nessus
- Nmap
- OWASP ZAP
- pfSense
- Snort
- SolarWinds
- Splunk
- Wireshark
- Semgrep
- Trivy
- Secretlint
- Bandit
- GitHub Code Scanning
Source control and collaboration
Where code and conversations live.
- Git
- GitHub REST and GraphQL APIs
- GitLab
- Gitea
- Azure DevOps
- Microsoft Graph
- Microsoft Teams integrations
- Microsoft 365
- draw.io and Mermaid
- MkDocs
- Technical writing
03
Technical
- Automated Testing / Unit Tests
- CI/CD
- Cisco Software & Hardware
- Cloud Architecture
- Cloud Configuration
- Code Review
- Cybersecurity
- Data Analysis
- Database Management
- Data Protection
- Hardware Troubleshooting, Assembly, and Maintenance
- Incident Response
- Information Security
- IT Strategic Planning
- Linux and Windows Server
- Microsoft 365
- Network Administration
- Network Security
- Risk Assessment & Management
- System Administration
- Threat Detection & Intelligence
- Web Application Development
04
Professional
- Agile Methodology
- Adaptability
- Analytical and Critical Thinking
- Collaboration
- Conflict Resolution
- Effective Communication
- Decision Making
- Dependability
- Etiquette
- Integrity
- Public Speaking
- Project Management
- Research