/* global React, ReactDOM */
const { useState, useEffect } = React;
// === Icons ===
const Icon = {
mail: ,
globe: ,
linkedin: ,
shield: ,
bolt: ,
users: ,
cog: ,
spark: ,
lock: ,
pulse: ,
badge: ,
cal: ,
building: ,
brain: ,
};
// === DATA ===
const BRINGS = [
{
icon: Icon.shield,
title: "Cryptographic-trust depth, not just talking points.",
body: "Twenty years inside the Microsoft trust boundary — PKI, code-signing HSMs, manufacturing crypto, and confidential compute. I know where attestation breaks before it does.",
},
{
icon: Icon.building,
title: "Hyperscale infrastructure delivery.",
body: "Architected and shipped a 9-SCIF enterprise datacenter — HA networking, multi-tenant storage, and cryptographic isolation — through to stable production.",
},
{
icon: Icon.users,
title: "Global engineering leadership.",
body: "Lead 12 engineers across three regions. Built on Model, Coach, Care — psychologically safe, accountable, and willing to ship the hard thing.",
},
{
icon: Icon.spark,
title: "AI-augmented engineering, in practice.",
body: "Drive team adoption of GitHub Copilot, agents, and CLI automation — measured velocity gains, not vendor demos.",
},
{
icon: Icon.pulse,
title: "Incident command with zero repeats.",
body: "Six Sev 2 incidents through IcM rotations — zero repeat occurrences. Pre-mortems and SDL drive risk into the backlog before it becomes news.",
},
];
const IMPACT = [
{
num: "9-SCIF",
desc: "Enterprise datacenter architected and delivered with HA networking, multi-tenant storage, and crypto isolation.",
},
{
num: "40 TB",
desc: "SharePoint migration to O365 — 200K sites, 500K sub-sites moved to the cloud.",
},
{
num: "0 repeats",
desc: "Across 6 Sev 2 incidents under IcM command — driven by rigorous post-mortem execution.",
},
];
const STATS = [
{ num: "20+", unit: "yrs", label: "Engineering across security, infra, and reliability.", icon: Icon.cal },
{ num: "19y", unit: "11m", label: "Tenure inside Microsoft, six progressive roles.", icon: Icon.building },
{ num: "12", unit: "", label: "Engineers led globally across three regions.", icon: Icon.users },
{ num: "100%", unit: "", label: "WebTrust compliance held across Network / Storage.", icon: Icon.shield },
];
const STACK_CHIPS = [
"Azure", "PKI / HSM", "Confidential Compute",
"Zero Trust", "GitHub Copilot", "C# / .NET",
"PowerShell", "Python", "Kusto",
"ADO CI/CD", "SIEM", "BCDR",
];
const ROLES = [
{
id: "r1",
years: "2024 — Now",
span: "Current",
title: "Principal Security Software Manager",
company: "Microsoft · PKI / Licensing / Manufacturing / Security",
summary: "Leads global strategy for security, networking and storage infrastructure powering enterprise-scale services.",
bullets: [
"Architected a hybrid Zero Trust licensing service using Confidential Compute and Managed HSMs for hardware-rooted trust and host attestation.",
"Directed architecture and deployment of a 9-SCIF Enterprise Datacenter with HA networking, multi-tenant storage, and cryptographic isolation.",
"Commanded IcM rotations through 6 critical Sev 2 incidents with zero repeat occurrences.",
"Achieved 100% WebTrust compliance across Network / Storage through continuous SDL, patching, and threat modeling.",
"Drove team adoption of GitHub Copilot, CLI tooling, and autonomous agents — measurable velocity gains.",
],
stack: ["Zero Trust", "Confidential Compute", "Managed HSM", "GitHub Copilot", "ADO", "Kusto"],
},
{
id: "r2",
years: "2020 — 2024",
span: "3 yr 3 mo",
title: "Principal Security Software Engineer",
company: "Microsoft · PKI / Licensing / Manufacturing / Security",
summary: "Technical SRE & security lead for the hardware supply chain — monitoring, patching, T&V, SIEM, secrets, code-signing PKI on HSMs.",
bullets: [
"Architected security baselines for High Valued Assets (HSMs) across Windows and Azure ecosystems.",
"Built automation framework centralizing scripts and modularizing runbooks — major team-wide time savings.",
"Designed secure Azure DevOps CI/CD pipelines, reducing manual deployment toil.",
"Led the build of a fully automated Azure Update Management patching system — minimized time-to-patch.",
"Designed JIT secrets management for Windows and Linux admins, removing persistent administrators.",
"Hackathon project lead — ADO PR cleanup bot and quantum RNG tool.",
],
stack: ["Azure IaaS/PaaS", "Azure DevOps", "PowerShell", "HSM", "SIEM", "JIT"],
},
{
id: "r3",
years: "2013 — 2020",
span: "7 yr 6 mo",
title: "Senior Security Service Engineer",
company: "Microsoft · WDG Security",
summary: "SRE & security lead for High Valued Assets — monitoring, patching, T&V, SIEM, secrets, code-signing PKI, and provisioning.",
bullets: [
"Architected security solutions for Microsoft manufacturing products.",
"Cloud architect & automation specialist — Azure (IaaS/PaaS), Azure Automation.",
"Built automation framework centralizing scripts and modularizing runbooks for the broader org.",
"Led the fully automated patching effort that minimized time-to-patch and increased compliance.",
"Designed the JIT secrets management solution that removed persistent administrators.",
"Redefined manufacturing asset security from on-premises to a cloud model.",
],
stack: ["Azure", "PowerShell", "HSM", "Code Signing", "PKI"],
},
{
id: "r4",
years: "2008 — 2013",
span: "4 yr 8 mo",
title: "Senior IT Service Engineer",
company: "Microsoft · SharePoint Infrastructure",
summary: "SharePoint engineer & architect for high-traffic Microsoft internal sites — HA, provisioning, and BCDR strategy.",
bullets: [
"Led a SharePoint Operations team of 10 vendors, including a 50+ resource RFP contract.",
"Led migration of Microsoft IT internal SharePoint to O365 — 40 TB, 200K sites, 500K sub-sites.",
"Wrote an automated SharePoint deployment system — setup time cut from a week to 1–2 hours.",
"Speaker at Microsoft TechEd and TechReady events.",
],
stack: ["SharePoint", "O365", "BCDR", "PowerShell"],
},
{
id: "r5",
years: "2006 — 2008",
span: "2 yr 5 mo",
title: "Operations Engineer",
company: "Microsoft · Office.com / OfficeLive",
summary: "Production reliability for office.microsoft.com, officelive.com, and Watson infrastructure.",
bullets: [
"Drove incident improvements, postmortems, and 24×7 on-call rotation.",
"Developed a C# / SQL telemetry system for Windows log data — used across troubleshooting, reliability, and capacity.",
"Wrote custom SCOM management packs that decreased incident durations.",
],
stack: ["C#", "SQL", "SCOM", "Windows Server"],
},
{
id: "r6",
years: "2003 — 2006",
span: "3 yr 4 mo",
title: "Distributed Systems Engineer",
company: "Catalyst Client Services · University of Washington",
summary: "Managed 200+ client workstations and developed remote deployment and patching solutions.",
bullets: [
"Managed 200+ client workstations across UW computing labs and offices.",
"Developed remote deployment and patching solution to standardize and reduce manual effort.",
],
stack: ["Windows", "Imaging", "Scripting"],
},
];
const WHY = [
{
icon: Icon.lock,
title: "Security is the floor, not the ceiling.",
body: "I lead engineering teams where Zero Trust, HSM-rooted attestation, and WebTrust compliance are table stakes — and shipping velocity comes from automating the rest.",
},
{
icon: Icon.spark,
title: "AI-augmented, by default.",
body: "Driving real Copilot and agent adoption inside Microsoft. I evaluate what actually moves velocity vs. what looks good in a demo deck.",
},
{
icon: Icon.users,
title: "Globally distributed, locally accountable.",
body: "Twelve engineers across three regions. Model, Coach, Care isn't a poster — it's how I run reviews, postmortems, and 1:1s.",
},
];
const FAQ = [
{
q: "What kind of role am I open to?",
a: <>
Principal IC, Principal Manager, or Engineering Director roles in security, infrastructure, platform, or SRE organizations. Strong preference for teams where cryptographic systems, datacenter infrastructure, or AI-augmented engineering is core to the strategy.
,
},
{
q: "Am I open to relocation?",
a: <>
I'm based in the Greater Seattle Area and currently prefer remote or Pacific-Northwest hybrid roles. Open to selective travel — and to conversations about the right opportunity.
,
},
{
q: "Where am I deepest, technically?",
a: <>
PKI, HSMs, and code-signing infrastructure. Hardware-rooted trust. Confidential Compute and host attestation. Datacenter delivery — networking, multi-tenant storage, BCDR. And the SRE / IcM disciplines around all of it.
,
},
{
q: "Do I still ship code, or only lead?",
a: <>
Both. I drive PowerShell, C#, and Python automation directly when the team needs it, and I prototype the AI-augmented patterns my team then productizes. The most senior leaders I trust still read PRs — so do I.
,
},
{
q: "What's my leadership style?",
a: <>
Model, Coach, Care. I run psychologically safe but highly accountable teams. I expect engineers to own outcomes — and I own clearing the path. Career coaching for new staff is a personal commitment, not an HR mandate.
,
},
{
q: "How do I think about incident response?",
a: <>
Six Sev 2 incidents through IcM rotation, zero repeats. The work happens before the incident: pre-mortems on a 6-month cycle, post-mortems with real actions, and observability that surfaces resiliency risk into the backlog.
I'm a CISSP-certified principal engineering leader with 20+ years building cryptographic, datacenter, and PKI systems for one of the world's largest enterprise platforms. I currently lead a global team driving the strategic roadmap for security, networking, and storage infrastructure — and I'm exploring my next chapter at the intersection of trust, hyperscale infrastructure, and AI-augmented engineering.
What I bring to any engineering org
{BRINGS.map((b, i) => (
{b.icon}
{b.title} {b.body}
))}
{STATS.map((s, i) => (
{s.num}{s.unit && {s.unit}}
{s.label}
{s.icon}
))}
Stacks I work in
{STACK_CHIPS.map(c =>
{c}
)}
{Icon.badge}
Credentials
CISSP · Advanced Infrastructure Hacking (2019) · Ethical Hacking: System Hacking · B.S. EE, University of Washington.
);
}
function WhyHireMe() {
return (
Why hire me
Engineering leadership at the intersection of trust, scale, and AI.
Currently exploring Principal IC and Engineering Director roles where security, infrastructure depth, and AI-augmented practice converge. The fastest way to reach me is on LinkedIn.