Work

Compliance automation I build and publish. Some of it is open source, so you can read the code.

Open source

DoD compliance and automation

VMware's public repository of STIG compliance content and automation. I publish and maintain STIG compliance profiles here as part of my work at Broadcom, so the community can adopt and validate them.

Open the repository My pull requests

My commits

Recent pull requests

Loading activity from GitHub…

More of what I build

Containers

STIG-hardened images

Container images hardened to STIG, with GitHub Actions pipelines and Twistlock scans that gate every build.

CIS

CIS Benchmark for VCF

Owned the benchmark effort for VMware Cloud Foundation, from defining controls to coordinating delivery.

FIPS

Non-FIPS crypto scanner

An internal tool that finds non-FIPS cryptographic modules before they become audit findings.

Working on compliance, security or automation? Let's talk.

Get in touch Download resume