Privileged access, platforms, and automation
Built and operated in production
I'm Anthony — a systems engineer shipping PAM, SIEM, PKI, WireGuard, AI platforms, and full-stack tools on the same infrastructure I run day to day.
What I Do
Security Engineering
Privileged access, SSH certificate authorities, WebAuthn/FIDO2, SIEM, and auditable identity-aware access.
Platform & Control Planes
Next.js/TypeScript apps with PostgreSQL and Redis — operator UIs, gateways, and production workflows.
Automation
PowerShell and Python that turn multi-hour ops work into minutes with fewer failure modes.
Self-hosted Infrastructure
Linux, Docker, NGINX, Step-CA PKI, WireGuard, Wazuh SIEM, and Azure systems run end-to-end.
Recent Projects
Privileged Access Management
Enterprise PAM control plane with short-lived SSH certificates, session recording, and JIT provisioning.
Web Gate Opener v2
ESPHome gate control through Home Assistant — web UI that presses the same Lovelace buttons.
PDF Data Extraction Pipeline
Extracting data accurately from lengthy PDF's
Impact & Results
Enterprise PAM with short-lived certificates, session recording, and just-in-time host access
Cut property appraisal onboarding from 1–2 hours to about 5 minutes with automation
Real-time OCR extraction pipeline scaled for long appraisal documents
Self-hosted SIEM, PKI, VPN admin, AI platform, and portfolio infra under active operation
Skills
SSH CAs · WebAuthn/FIDO2 · Okta/OIDC · PostgreSQL · Redis · Docker · Wazuh · Step-CA · WireGuard · Ansible · Go
Building secure systems that ship
Need privileged access tooling, self-hosted platforms, or automation that holds up in production? Let's talk.