I'm a systems architect working on enterprise infrastructure security and automation: zero-trust networking, identity, and the platform automation that makes both hold up at scale.
I'm building Innerwall, an open-source microsegmentation platform, and writing about how these systems are designed.
Projects
Recent Writing
- Innerwall: 41 days to a shipped open-source microsegmentation platformOct 18, 2026
- Native Firewalls as the Enforcement Plane: Compiling Policy AtomicallyOct 10, 2026
- Inbound First: Scoping Enforcement for a First ReleaseOct 7, 2026
- Short-Lived Certificates for an Agent Fleet: Enrollment and RenewalOct 5, 2026
- Streaming Desired State: Snapshots, Deltas, and Per-Workload VersionsOct 3, 2026
Series
Microsegmentation from First Principles
A series working through the design decisions behind Innerwall, one problem at a time.
- 1.Observe Before You Enforce: Why Segmentation Starts with a Flow Map
- 2.Simulation as a Deployment Stage: Running Policy Without Dropping a Packet
- 3.Labels, Not Addresses: Workload Identity in Network Policy
- 4.Streaming Desired State: Snapshots, Deltas, and Per-Workload Versions
- 5.Short-Lived Certificates for an Agent Fleet: Enrollment and Renewal
- 6.Inbound First: Scoping Enforcement for a First Release
- 7.Native Firewalls as the Enforcement Plane: Compiling Policy Atomically