OSCAL Assessment Orchestration Platform
Custom assessment platform leveraging OSCAL and MCP to modernize security assessments — machine-readable controls, AI-assisted analysis, and structured evidence collection.
GRC engineer who codes. 12-year Air Force veteran. Cloud Security Assessor.
Guardrails aren't barriers — they're protective freedom. They give us a clear line of where we shouldn't be going, while giving us the freedom to operate within those boundaries.
I'm not your typical GRC person who lives in spreadsheets. I build tools to escape them. My work sits at the intersection of compliance automation, AI, and education — with a strong belief that guardrails aren't barriers; they're where creativity begins.
Currently a Cloud Security Assessor at the Maryland Department of Information Technology, I bring 12 years of U.S. Air Force experience across finance, network operations, and cybersecurity. I joined wanting to be a teacher — that never left. Now I build content and tools for people breaking into GRC and veterans who know there's a better way.
If it can be automated, it should be. Structured, repeatable processes replace manual, error-prone workflows.
Not AI replacing practitioners — AI amplifying what they can accomplish. LLMs + OSCAL can change assessment workflows.
Building for people entering GRC and veterans in the field who know there's a better way to do things.
Shipped tools and active development — each project is evidence of controls implemented in code, not slides.
Custom assessment platform leveraging OSCAL and MCP to modernize security assessments — machine-readable controls, AI-assisted analysis, and structured evidence collection.
Automates NIST 800-171 control tracking, gap identification, POA&M management, and PDF report generation.
Claude Code project template — from raw idea to shipped code autonomously, combining spec-driven development with agentic coding loops.
Calculates gross salary needed to hit take-home targets, accounting for VA disability compensation plus federal and state taxes.
Official open-source GRC toolkit from the GRC Engineering Club — Claude Code plugins for evidence collection and compliance workflows.
Learn it. Build it. Ship it for others — a curriculum for practitioners entering AI engineering.
Open to mentoring, speaking, open-source collaboration, consulting, and freelance work. If you're working on something at the intersection of GRC, AI, or compliance education — let's talk.