Governance, Risk,
and Compliance,
engineered.
// autonomous governance at machine speed
Building intelligent compliance infrastructure that replaces manual, error-prone workflows with autonomous, policy-as-code systems. OSCAL, OPA, and AI — wired together.
10
Portfolio Projects
6+
Frameworks Covered
3yr
Cybersecurity Experience
10
Certifications
// 01 — Portfolio
Featured
projects
From foundational OSCAL tooling to AI-powered remediation. Enterprise-grade systems across the full complexity spectrum.
01
BEGINNER
OSCAL profile validator
CLI tool validating NIST OSCAL profiles with real-time error detection and multi-format conversion.
02
BEGINNER
Compliance evidence crawler
AWS Lambda collecting compliance evidence from CloudTrail, Config, and Security Hub on a schedule.
03
BEGINNER
Risk register automation
Terraform + Lambda auto-generating risk registers from IaC with NIST 800-53 control mapping.
04
INTERMEDIATE
Policy-as-Code engine (OPA)
Open Policy Agent ruleset enforcing AWS security compliance via custom Rego policies mapped to NIST controls.
05
INTERMEDIATE
Control assessment dashboard
React dashboard with real-time control status, evidence tracking, and audit readiness scoring.
06
INTERMEDIATE
Compliance-to-policy pipeline
CI/CD pipeline converting OSCAL profiles into executable OPA/Rego policies via GitHub Actions.
// 02 — Latest writing
From the
blog
Technical writing on GRC engineering, automation, and building compliant cloud infrastructure.