Services

What you can hire me for

Pick the track that matches how you buy. If you are not sure, say so — I will tell you which shape fits before we talk rate.

Federal / contract

Program coverage

  • ISSO / AISSO / SCA surge or coverage — day-to-day security engineering, control owners, assessment liaison.
  • ATO and cATO support — SSP, SSPP, POA&M, evidence binders, assessor Q&A, continuous authorization readiness.
  • NIST 800-53, FedRAMP, and GRC — control work, GRC platform administration, r4 to r5 migrations in Xacta-style tools.
  • GovCloud and network architecture — IAM, segmentation, logging, diagrams, and the write-ups reviewers expect.

Engagements are with me personally as a contractor or sub. I do not sell a company vehicle, set-aside, or SAM listing from this site.

Inquire about contract work

Commercial / ad-hoc

Scoped jobs

  • Control-gap or architecture review — a time-boxed pass with a written punch list.
  • Hardening and cloud review — IAM, segmentation, logging/monitoring, Zero Trust principles as a review lens, backup posture.
  • Small engineering builds — Python/automation, recon or lookup tooling, static site hardening.
  • Second opinion — read a vendor proposal, SSP excerpt, or design and tell you what is missing.

Fixed fee when the boundary is clear. Hourly when it is not. No sponsorships and no “buy me a coffee” funnel.

Inquire about ad-hoc work

Also in the toolkit

Not the lead offer, but it shows up when the job is bigger than a control spreadsheet: enterprise LAN/WAN, fiber and structured cabling, SATCOM and microwave, 24/7 fault isolation. I previously held Microsoft, Cisco, Juniper, and AWS certifications; those are expired and are not listed as current. The operations background is not.

What I will not take

  • Unauthorized testing of systems you do not own or cannot authorize in writing.
  • Work that needs a registered company, facility clearance, or set-aside I cannot honestly claim.
  • Retainer-only “advisory” with no artifacts.
  • Anything that belongs in incident response with law enforcement or a full DFIR firm — I can triage, then hand off.

How to buy

Direct

Email or WhatsApp. I invoice as an independent consultant. Suitable for commercial teams and many primes who already have a 1099 / subcontract path.

Through your prime

If you need me on an existing vehicle, say so in the first message. I can work as a sub if your contracting shop can onboard an individual.

Short notice

If the need is this week, put that in the subject. I will say yes or no quickly rather than schedule a discovery call for its own sake.

Go to contact · About