I build systems that are meant to be broken and then I make sure they can't be.
By day, I am a DevOps Engineer; by nature, I am a Penetration Tester. My journey began in Ethical Hacking, which fundamentally changed how I view infrastructure. I don't just architect for scalability; I architect to survive an adversary.
- 🛡️ Infrastructure as Code (Security): Hardening CI/CD pipelines and Kubernetes clusters before the first line of app code is even deployed.
- 🏗️ Engineering Automation: Writing high-performance internal tools and Kubernetes Operators in Go to replace manual toil with reliable code.
- 🌐 Community First: I believe the best way to secure the web is through Open Source. I'm an active contributor focused on infrastructure reliability and cloud-native security.
Break it, report it, fix it — the loop that keeps cloud-native infra honest.
1. Eliminating Alert Fatigue in Kubernetes HPAs
Project:
kubernetes-monitoring/kubernetes-mixin
2. Securing RabbitMQ Operator Deployments
Project:
bitnami/charts
3. Enabling Custom Plugin Webservers for Mattermost
Project:
mattermost/mattermost-helm| PR: #396
- The Fix: Engineered dynamic
extraPortssupport in Helm, letting plugins with standalone webservers integrate cleanly with Mattermost.
| Date | Repository | Issue | Status | TL;DR |
|---|---|---|---|---|
| Aug 2026 | netbirdio/kubernetes-operator |
#397 | 🟢 Open | netbird-kubeapi-proxy image is hardcoded with no override, stuck a release behind. |
| Mar 2026 | kubernetes-mixin |
#1193 | ✅ Fixed — PR #1194 | KubeHpaMaxedOut false positive on fixed-scale HPAs. |
| Jan 2026 | mattermost-operator |
#447 | 🟢 Open | Operator defaults to multiple replicas, breaking core messaging for non-Enterprise users. |
| Jun 2025 | brancz/kubernetes-grafana |
#139 | 🟢 Open | Bundled Grafana version stuck behind upstream — requested bump to 12.0.0. |
| Dec 2023 | vmware-tanzu/helm-charts |
#533 | 🟢 Open | Velero backups go PartiallyFailed — fails to get the VolumeSnapshot. |
| Sep 2023 | bitnami/charts |
#19394 | ✅ Fixed — PR #19568 | RabbitMQ-Operator chart violates PodSecurity policy. |
| May 2023 | zalando/postgres-operator |
#2337 | 🟢 Open | Logical backups use pg_dump instead of pg_dumpall. |
| Apr 2023 | zalando/postgres-operator |
#2288 | 🟢 Open | Postgres pod comes back as secondary after a Kubernetes cluster upgrade. |
| Jul 2021 | hashicorp/terraform-provider-aws |
#20161 | ✅ Closed | Canary docs wrong for s3:// script-location URIs. |
| Date | Repository | PR | Impact | Tech Stack |
|---|---|---|---|---|
| Mar 2026 | kubernetes-mixin |
#1194 | Fixed KubeHpaMaxedOut PromQL false positive. |
PromQL, Prometheus |
| Sep 2023 | bitnami/charts |
#19568 | Patched PodSecurity violations for RabbitMQ. | Helm, Kubernetes |
| Jun 2023 | mattermost-helm |
#396 | Added extraPorts support for backend plugins. |
Helm, Kubernetes |
I'm always up for a deep dive into secure architecture, reliability engineering, or shifting security left.