Right now I’m at Chainguard, working on supply chain security. I rebuild open source packages from source with SLSA 3 provenance so enterprises can actually trust what they ship. That means building the JavaScript and Java ecosystem rebuilders — 500k+ artifacts across 44+ enterprise customers.

Before that, a decade of distributed systems. I designed a 100 Gbps network data ingestion pipeline at MixMode. Built the Kubernetes inventory system at Anchore that cut container analysis time by 60%. Architected a Kafka and Quarkus data pipeline at LogicMonitor pushing 2M+ monitoring metrics daily.

I care most about the work between the work — the tooling, the automation, the systems that make other systems reliable. If something can be verified, it should be. If something can be automated, it probably should be too.

How I Work

Data over instinct. I make spreadsheets before I make decisions. Gut feel gets a vote, not a veto.

Build the thing that builds the thing. The best leverage is in tooling and infrastructure that multiplies what a team can do.

Simple until proven otherwise. The right amount of complexity is what the problem actually requires.

Background

Java, Python, Go · AWS, GCP, Kubernetes · distributed systems, supply chain security