An independent software engineer who takes compliance-heavy platforms, data and telemetry pipelines, and cross-platform mobile from first spec to production. End-to-end ownership, fault-intolerant discipline, and every engineering choice made as a business decision.
Every engineering choice is a business decision — capacity sized to the shape of demand, margin designed into the architecture, and leverage that lets one engineer ship what usually takes a team.
End-to-end delivery for work where correctness, compliance, and uptime are the point — not an afterthought. The stack is chosen for the problem, not a house favorite.
End-to-end delivery for SOC 2, FedRAMP-High, PCAOB, HIPAA, HITRUST, PCI DSS, and ISO environments — with audit evidence and reasoning traceable to the controlling standards, and architecture invariants enforced as executable tests.
Streaming pipelines that hold throughput and integrity at once — 10GB+ files processed in Rust without ever loading them whole, a bitemporal store that answers what you knew and when, and real-time event fan-out where one signal has to reach many consumers at once.
Offline-first Flutter and native iOS/Android with background sync and sensor/MQTT integration, for field capture, performance tracking, and logistics — built to keep working off-network and reconcile cleanly on reconnect, so the captured record stays complete.
Drag to browse →
High-throughput services in Rust and Kotlin over OpenSearch and Postgres, across three product teams spanning data-security-posture management, cloud-native application protection, and a unified AI surface — under continuous-authorization constraints.
The first capability bridging cloud services with legacy on-prem for secure, multisite device discovery across an industrial IoT fleet.
Multi-source ingestion and validation pipelines taken to enterprise scale, serving thousands of engineering organizations — carried through the GitPrime → Pluralsight Flow acquisition as one continuous platform.
The full method lives on the services page. In brief:
Spec-first, agent-fleet development with adversarial review gating every merge, and deterministic verification of every model-generated artifact. Model output never touches a result blind.
Sustained-concurrency load testing on every serious path, targeting 10x expected average use — because peak load arrives with peak customer stakes.
Unit costs metered as a first-class part of the pipeline, and margin designed into the architecture rather than trimmed.
Not only client work — products I own, run, and hold to the same fault-intolerant bar.
White-label e-signature infrastructure — your brand, your domain, your signers.
A document-agnostic, tamper-evident signing service with a hash-chained audit trail, built to drop into a regulated workflow and disappear behind the customer’s brand. Post-quantum-ready by design: tamper-evidence and encryption rest on 256-bit symmetric cryptography (HMAC-SHA-256, AES-256) that quantum computers don’t break, with hybrid X25519 + ML-KEM key exchange for data in transit.
The cap table for all — one flat price, unlimited issuance, the record always yours.
Cap-table software with a hash-chained audit log at its core: authorized shares and security classes, stakeholders and founder stock, an option pool and grants against it, round and exit modelling, and 83(b) deadline tracking — none of it metered. $499 a year per company, however many certificates you issue or colleagues you invite. If a subscription lapses every read keeps working and the whole ledger stays exportable — a statutory register is never held hostage over a renewal.
I bring depth across FedRAMP-High cybersecurity, healthcare imaging and security, industrial IoT, data and analytics at scale, and audit and compliance — plus the products I own and run end to end.
auditRAMP(AI)
The Rifle AppStart with the spec and the constraints, and I take it from there to production — with verifiable provenance at every step.