Skills & tools / Across the system
The Tools and Systems I work with
My work starts with people and follows the systems they depend on, from a managed laptop and an identity provider to Linux, networks, automation and GPU infrastructure.
I enjoy learning how those layers fit together, finding where they fail and making the whole experience easier to operate.
A view of my toolkit.
Select a tool to explore the work behind it.
Google WorkspacePeople & collaboration
Microsoft EntraIdentity & access
IntuneManaged endpoints
MosyleApple management
SlackConnected teams
DockerApplication runtime
KubernetesPlatform operations
UbuntuLinux infrastructure
Tailscale + HeadscaleMy self-hosted VPN
TerraformInfrastructure as code
GitHubCode & delivery
n8nWorkflow automation
GrafanaOperational visibility
PrometheusMetrics & monitoring
PostgreSQLDurable application state
NVIDIAGPU infrastructure
A selection above; the broader toolkit is below. My experience ranges from daily administration and hands-on operations to integrations and project work. The case studies show where I have gone deeper.
How the experience connects.
Workplace technology led me into endpoint management and identity. Following those dependencies took me further into networks, Linux, cloud infrastructure, containers, automation, observability and GPU systems.
Independent infrastructure / My own VPN
I operate the access layer too.
I self-host my own VPN setup using Tailscale clients with Headscale as the self-hosted coordination server. It is part of how I connect to and operate my own infrastructure.
That gives me practical ownership of device connectivity, access configuration and troubleshooting. I have to understand how a connection reaches the right service, not simply whether a VPN application says “connected.”
Explore my self-hosted platformDevice connectivity + access configuration
Identity, collaboration & SaaS
Helping people join, collaborate and get the right access. My work includes user lifecycles, groups, shared resources, application administration and the dependencies between them.
- Google Workspace
- Google Admin Console
- Google Groups
- Shared Drives
- Google Calendar
- Google Chat Spaces
- Slack Pro
- Slack Connect
- Microsoft 365
- Microsoft Teams
- Notion
- 1Password
- HiBob
- GitHub
- HubSpot
- Intercom
- Ashby
- Metaview
- Trelica
- Drata
- Envoy
- NetSuite
- tldraw
- Whimsical
- Juuno
- Tella
Endpoint & device management
Managing devices so people can work securely. Application deployment, device policies, compliance, vulnerability remediation and troubleshooting across Windows and Apple environments are a substantial part of my professional work.
- Microsoft Intune
- Microsoft Defender for Endpoint
- Mosyle
- Windows 11
- macOS
- Apple MDM
- Android / Samsung management
- Apple Content Caching
- Microsoft Edge policies
- Microsoft Outlook policies
Microsoft, cloud identity & access
Connecting corporate identity to applications and infrastructure. I work with authentication, provisioning, roles and access reviews, and investigate failures across the complete sign-in or provisioning chain.
- Active Directory
- Windows Server
- Microsoft Entra ID / Azure AD
- Azure Arc
- Azure VMs
- Azure Container Registry
- SAML / SSO
- SCIM
- OAuth / OIDC
- RBAC
- Google Context-Aware Access
- OAuth2 Proxy
Networking & secure connectivity
Understanding how traffic reaches a resource, which identity can access it and where a connection is failing. This spans workplace networks, segmentation, remote access and my own self-hosted VPN.
- Layer 2 / Layer 3
- VLANs
- Firewalls / network rules
- DNS
- DHCP
- Office / guest networking
- UniFi / UDM
- Firezone VPN
- WireGuard
- Tailscale
- Headscale
- Caddy
Linux, servers & storage
Operating the services and storage underneath applications: Linux administration, permissions, processes, mounts, scheduled jobs and recovery. I follow dependencies between compute and shared storage when diagnosing failures.
- Ubuntu Server
- Linux server administration
- systemd
- cron
- NFS
- QNAP NAS
- RAID / mdadm
- Filesystems / fstab
- VMware Fusion
- Datacenter operations
- SFTP / Puzzel transfers
- lftp
- AzCopy
- NAS-backed recording storage
- NFS data pipelines
Containers & platform
Packaging, deploying and operating applications alongside their dependencies. My self-hosted platform has made image availability, networking, persistent state, health checks and rollback practical concerns.
- Docker
- Docker Compose
- containerd
- Kubernetes
- k3s
- Helm
- Traefik
- Flannel
- Multus CNI
- CoreDNS
- Metrics Server
- local-path-provisioner
- GitHub Container Registry / GHCR
Automation, IaC & delivery
Turning repeated tasks into workflows that others can understand and operate. I use scripting, APIs, workflow tools and version-controlled configuration, with attention to access, failure handling and a recovery path.
- PowerShell
- Bash / shell scripting
- Python
- n8n
- Zapier
- GAMADV-XTD3
- Slack webhooks
- Onboarding / offboarding automation
- Terraform
- Git
- GitHub Actions
- GitHub Environments
- GitHub Secrets
- GitHub OIDC
- GitHub Projects
- Codespaces
- YAML
- SOPS / age
- Argo CD / Flux CD
- CodeQL / Dependabot
Observability & operational evidence
Making systems explain enough about their state to be operated. I work with metrics, logs, dashboards and alerts, including custom monitoring for Apple Content Caching and the infrastructure behind my projects.
- Datadog
- Grafana
- Prometheus
- PromQL
- Loki
- Tempo
- Custom exporters
- Apple Content Caching exporter
Databases & messaging
Working with the data and messaging dependencies around applications and workflows. In my own projects, durable state and understanding what can safely be retried are recurring engineering concerns.
- PostgreSQL
- Redis
- Apache Kafka
- Apache ZooKeeper
- pgvector
- Milvus / Weaviate
GPU & AI infrastructure
Working across the host, driver, container, storage and monitoring layers that GPU workloads depend on. This includes NVIDIA troubleshooting and operational work around speech and ML services, alongside independent AI experimentation.
- NVIDIA GPUs / A100
- CUDA
- NVIDIA MIG
- NVIDIA Triton Inference Server
- NeMo / TDT models
- GPU-backed Docker workloads
- LlamaFactory workloads
- Transcription
- Formatting
- Voice-command processing
- Speech-quality assessment
- Corti S1
- Corti OpenAI-compatible APIs
- Corti CLI
- Hermes Agent / Desktop
- Custom model / provider configuration
- Ollama
Development & integration tools
The tools I use to inspect, build and connect systems. AnySeller has extended this work into commerce APIs and operational software; other projects explore internal IT operations and accountable AI.
- VS Code
- GitLens
- VS Code Docker extension
- VS Code Kubernetes extension
- VS Code GitHub Actions extension
- Terminal / CLI tools
- FastAPI
- HTTPX
- asyncpg
- Jinja2
- REST APIs / webhooks
- Zernio / WhatsApp
- WooCommerce / Dokan
- Ozow
- TradeSafe
- Google Maps APIs
- Purple Guard
- Internal IT operations tooling
The tools matter. So does how I use them.
I bring curiosity, structure and a willingness to take ownership. I want to understand the people affected, make the work repeatable and leave something another person can operate. I’m also looking for the next challenge that will stretch what I know.