INFRASTRUCTURE ARCHITECT & CYBERSECURITY PROFESSIONAL · FREDERICK, MD · DC METRO · IN PRODUCTION SINCE 2009
One operator across every layer of the stack — when the person who pulled the cable also hardens the hypervisor and reads the SIEM, accountability has one name on it.
DIRECT LINE TO THE OPERATOR · NO ACCOUNT MANAGERS · REPLIES IN ONE BUSINESS DAY
Tap a layer. Seven layers, one chain of custody — one request, fiber to model, one pair of hands.
Flip any card for the proof.
Control mapping across all 110 requirements, SSP and POA&M development, technical control deployment, and SIEM-driven evidence collection.
Tenant administration in the U.S. sovereign cloud — Exchange Online, identity, retention and compliance configuration supporting CUI handling.
Spine-leaf cores, MLAG/VLT distribution, dual-WAN HA edge, RADIUS-backed port authentication — and the physical plant beneath it.
VMware-exit migrations onto Proxmox VE with Ceph clustering — licensing spend cut ~60% while sustaining 99.9% availability.
Graylog SIEM engineering, Sysmon + NXLog fleet telemetry, and digital forensics with full chain-of-custody when it matters.
Local inference infrastructure — GPU passthrough on Proxmox, vLLM model serving, multi-model orchestration. Your data stays home.
Five contracts — or one signature. Flip it.
Operated directly, in production — no aspirational logos.
Proxmox VE
WireGuard
Graylog
Wazuh
SonicWall
Dell
MongoDB
OpenVPN
Keycloak
Vaultwarden
Ansible
Docker
Nginx
Fail2ban
iptables
Let's Encrypt
Pi-hole
Uptime Kuma
Cloudflare
Microsoft 365Select a node. Pulsing markers are active revisions.
Six standing rules, with the CIA triad as the basis of design.
MFA everywhere, documentation as a deliverable, open reporting and continuous reinforcement.
Centralized SIEM logging with real-time alerting, zero-trust assumptions, tested backups and rehearsed response.
Risk and supply-chain assessment, controls validated against the standard, demonstrable integrity.
Identify threats, measure business impact, adjust as the intelligence changes.
Rapid patching across OS, app, and firmware; encryption in transit and at rest; least privilege, reviewed.
Privacy honored, teams trained, controls that evolve with the threat instead of aging in a binder.
Serving clients and colleagues well serves a purpose larger than the invoice.
Matthew 25:40Every client and teammate is treated the way I'd want to be — in pricing, honesty, and follow-through.
Luke 6:31Sometimes the right answer is “change nothing.” You'll hear what you need to, not what closes the deal.
Proverbs 27:6Recommendations serve your outcome, even at less revenue. Trust outlasts any transaction.
Philippians 2:3-4Engagements run through DATAROSS — assessments, builds, compliance programs, and steady-state operations. You talk to the person who does the work. Every command lands in a ledger.
Engage via DATAROSS ↗Commercial engagements — assessments, managed infrastructure, CMMC programs — run through DATAROSS: engagement models, documented outcomes, the open-source catalog, and the live operational infrastructure.
dataross.com ↗