24 documents · June – October 2026
Documentation Portfolio
I write things down as I work: what I changed, why, how to undo it, and what someone else needs to run it without me. The documents below come from my own infrastructure and client work. They’re redacted for security, and the IAM templates use fictional data in place of any employer’s records.
Hiring teams can review the full set. Request access, and once I approve you, you’ll sign in with a one-time code sent to your email. Access lasts 14 days.
Field notes & work logs
What happened, what I decided, and what I'd do differently, written the same day.
AI Operator Access and Fleet Hardening
Least-privilege, expiring tokens with just-in-time elevation for an AI assistant, used to bring 25 DNS zones to one standard.
Product Launch Work Log
A resume-website service taken from idea to taking payments in one evening, with least-privilege setup throughout.
Incident, Migration and Outage Log
Two sites restored after a vendor OS update, a four-site CMS retired with no data loss, and an outage isolated layer by layer.
Workflow Platform Build and Retirement
An automation platform built on dedicated storage with offsite backup, measured, then retired by decision.
Zero Trust Remote Access
Remote wake and desktop access with identity checked before traffic reaches the device, and no open ports.
Container Management Consolidation
Every container host moved under one console, two deployment faults diagnosed from evidence, one exposure flagged.
Runbooks & guides
Step-by-step procedures written so someone else can run them.
Site Migration and Rollback Runbook
Move a live site to new hosting, test it before visitors see it, and switch back in a minute if needed.
Order Fulfillment Runbook
Every customer order handled the same way, with customer data protected, inside one business day.
EHR Operations Runbook
Running a health-record system with layered access, application MFA, verified backups and a monthly restore test.
Client Email Setup Guide
A plain-language guide that gives a business owner full ownership of their email sending in about 20 minutes.
Standards, plans & decisions
The written source of truth, and the reasoning behind it.
Standard Site Configuration
One baseline for TLS, protection, hosting, email and access that every domain is audited against.
Client Hosting and Monitoring Plan
A phased plan with decisions on record: monitoring, client status pages, reliability work and automation.
Service Design: Small Business Sites
Problem, offer, pricing hypotheses, guardrails and a validation plan, written before the first sale.
Decision Record: Telehealth Platform
Where self-hosted patient video can and can't run, and why shared hardware was ruled out.
Audits, records & reference
Evidence: what exists, what was tested, and what changed.
Infrastructure Baseline Audit
A three-node environment audited from the live systems, and the gaps found where reality disagreed with the notes.
Backup and Restore Test Record
Restore tests against encrypted, versioned backups, including one apparent pass deliberately not counted.
Application Upgrade Change Record
Three production apps upgraded one at a time, each backed up, verified and given a rollback path.
Home Lab Systems Reference
One versioned document for what exists, where it runs, and how it's protected and backed up.
Supporting Work Appendix
Scripted automation with dry runs, a security comparison, and a roadmap tied to career goals.
IAM templates
The formats I use in enterprise identity governance, filled with fictional data for a made-up company.
IAM Risk Register
Scored, owned and dated identity risks, each with a treatment and a fixed review cadence.
Access and License Review
A certification cycle that removes access nobody can justify and recovers licenses nobody uses.
Service Account Risk Analysis
Finding the non-human identities that carry the most risk, ranked by a weighted score.
Security Incident Report
A blameless, evidence-first record: timeline, containment, root cause and owned corrective actions.
Accounts and Access Register
Every account, admin role and sign-in for a small business, and where each secret lives, never the secret itself.