I build security and AI governance programs that make AI systems auditable — where governance evidence is something the system emits, not something a person remembers. Models change, prompts get edited, and new tools get wired in every sprint; governance has to keep pace or it turns into paperwork describing a system that no longer exists.
Underneath that is 20+ years of platform and infrastructure engineering, so I can sit with an auditor in the morning and review an engineer's architecture in the afternoon — and design controls engineers will actually use.
| Security & Compliance |
- SOC 2 Type II program leadership and audit readiness - Third-party penetration testing program and remediation - Vendor and third-party risk, security policy, customer security & AI diligence |
| AI Governance |
- Programs built on the NIST AI RMF: charter, AI inventory, risk tolerance, design-review gates - ISO/IEC 42001 - Shadow-AI detection and data-governance controls |
| Agent Security |
- Authorization, containment, observability, and tamper-evident records for autonomous AI systems - Founder, Anuclei — building Multisynapse, a governance, observability, and evaluation platform for AI agents |
Long before AI governance, I was doing governance in open source.
View my Credly profile
| Governance |
- Jenkins Governance Board – Details - Kubernetes Release Manager – Details - Kubernetes Moderator Co-Lead & Org Member – Details |
| Mentorship |
- Kubernetes Mentoring Lead – Details - Continuous Delivery Foundation Ambassador - Google Summer of Code Mentor – Details |
| Speaking & Writing |
- Speaker: KubeCon + CloudNativeCon NA 2022 – Credential, cdCon 2022 – Credential, cdCon 2020 – Credential - Featured by CNCF – Read Article - Talk on AI and ML – View Talk - MLOps: An Introduction (CD Foundation) – Read Blog - Writing on agent security and AI governance – LinkedIn |
| Certifications | - Exam Developer: Certified Backstage Associate – View Certification |
| Awards |
- Most Valuable Jenkins Advocate – Details - Kubernetes ContribEx Contributor Award – Details |
Previously at Yahoo!, Symantec, HP, AT&T Labs, Sysdig, Equinix Metal (formerly Packet), Hightail (formerly YouSendIt), Blue Cross of California, and Jasmine Multimedia. BA and master's degree from MIT. U.S. Army veteran, with service in Iraq and Afghanistan.
Bass angler (Bassfinity), home cook — I've contributed recipes to the cloud-native community cookbook — and SF Giants fan.
