Hi, my name is
I'm a Security Engineer specializing in cloud security, infrastructure as code, and cybersecurity architecture. Currently working at Capital One, I'm passionate about building secure, scalable cloud solutions and protecting digital assets.
About Me
Hello! I'm Daniel, a Security Engineer based in Herndon, Virginia, specializing in cloud security architecture and cybersecurity. I'm passionate about technology and enjoy building secure, scalable cloud infrastructure solutions that protect organizations from evolving threats.
Currently working at Capital One, I focus on implementing security best practices, compliance frameworks, and zero-trust architectures. This fall, I'm starting my M.S. in Computer Science at Georgia Tech to go even deeper on the systems I secure.
I hold 14 industry certifications across security, cloud, and infrastructure — check out the Certifications section below to see the verified badges.
Where I've Worked
- Led design and implementation of a centralized AWS Private Certificate Authority (ACM + PCA) with least-privilege IAM guardrails, unblocking production mTLS migrations for 1,000+ clients
- Architected a globally highly available Certificate Revocation List (CRL) service on AWS CloudFront with multi-region S3 origin failover and TLS 1.3
- Drove supply-chain security hardening across the enterprise PKI platform, converting 100% of package and image pulls to credential-authenticated access
- Engineered custom Python telemetry integrated with New Relic and PagerDuty, reducing Mean Time to Detection by over 90%
- PKI
- Cryptography
- Data Protection
- AWS
Certifications
GIAC Defensible Security Architecture (GDSA)
GIAC / SANS · Mar 2025
Certified Information Systems Security Professional (CISSP)
ISC2 · Feb 2026
Certified Information Systems Auditor (CISA)
ISACA · Dec 2025
AWS Certified Solutions Architect – Associate
Amazon Web Services · Aug 2021
AWS Certified SysOps Administrator – Associate
Amazon Web Services · Oct 2023
AWS Certified Cloud Practitioner
Amazon Web Services · Apr 2021
Microsoft Certified: Azure Administrator Associate
Microsoft · May 2023
Microsoft Certified: Azure Fundamentals
Microsoft · Mar 2023
Google Cloud Associate Cloud Engineer
Google Cloud · May 2023
HashiCorp Certified: Terraform Associate (003)
HashiCorp · Jun 2023
CompTIA Security+ ce
CompTIA · Jul 2023
CompTIA A+ ce
CompTIA · Jan 2021
CompTIA IT Fundamentals+ (ITF+)
CompTIA · Jun 2020
Splunk Core Certified User
Splunk · Dec 2024
All badges verified on Credly
Some Things I've Built
Security engineering pays the bills — these are the things I ship on nights and weekends. Real products, built end to end, each one started because of a problem in my own life.
01 · Shipped to both app stores
Mobile arcade game · iOS & Android
The question that started it: could one person design, build, and ship a real game? BopRush is the answer — nine reflex, memory, and timing mini-games with weekly ranked ladders, real-time battle rooms for up to four players, and an XP, level, and badge progression system. Free to play, with a Pro subscription handled through in-app purchases.
- Swift
- iOS
- Android
- Real-time Multiplayer
- StoreKit
Idea
Script
Posted
02 · Full-stack creator SaaS
Idea → script → film → post, in one place
Making short-form content means juggling ideas, scripts, filming, and posting across half a dozen apps. I built one home for it instead: fast idea capture, an AI script assistant, a built-in fullscreen teleprompter with mirror mode, a posting calendar, and a kanban pipeline that tracks every idea from first hook to published post. Then I productized it — Supabase auth with realtime cross-device sync, and Stripe subscriptions enforced all the way down to Postgres row-level security.
- Next.js
- TypeScript
- Supabase
- Stripe
- AI Gateway
no account needed · just vote
03 · Crowdsourced leaderboard
The internet's best advice, ranked
A leaderboard for practical life advice. Anyone can submit a tip, upvote, mark it 'tried,' and comment — no account required. The interesting problems live under the hood: ranking math that keeps fresh tips competitive, abuse reporting, sponsor slots, and Postgres row-level security keeping it all safe without a single login.
- Next.js
- TypeScript
- Supabase
- Tailwind CSS
store links validated in CI ✓
04 · Product storefront
The game's public face
Every product needs a storefront. The BopRush site carries the launch: game mode overviews, support and privacy pages, and App Store / Google Play CTAs — with the store URLs covered by automated tests in CI, so a launch-day download link can never quietly 404.
- Next.js 15
- React 19
- TypeScript
- Tailwind CSS
v1 · 2020
v2 · today
05 · 2020 → today
The site you are reading right now
v1 was a single-page React app on GitHub Pages, built in 2020 when I was first learning to code. This rebuild is everything I've learned since: Next.js and TypeScript, an interactive particle field, verified Credly badges, light and dark themes — and now this section. Keeping v1 public is the point: every project here started somewhere.
- Next.js
- TypeScript
- Framer Motion
- Tailwind CSS
Professional Work
Capital OnePKI & Cryptography Platform
Cryptographic solutions, digital certificates, and encryption key management on the Data Protection team — PKI at enterprise scale.
- PKI
- Cryptography
- AWS
NIHZero Trust Cloud Architecture
Zero Trust in the hybrid enterprise and AWS cloud migration for the STRIDES program, with Terraform infrastructure as code across AWS, Azure, and GCP.
- AWS
- Terraform
- Zero Trust
NIHSecurity Compliance Automation
Automated compliance monitoring against NIST SP 800-53, FedRAMP, and RMF, with Splunk dashboards for real-time security visibility.
- NIST
- FedRAMP
- Splunk
Fannie MaeSecurity GRC & Risk Management
Technology risk assessments, threat modeling, and security design reviews for new systems and vendors — owning the risk register and control exceptions.
- GRC
- Threat Modeling
- Risk
Free Training
Pass your first cloud cert in the next 14 days.
I’ve earned 15 certifications. Three of them actually made me money. The free training is which ones those were, and the one-hour-a-day system that gets you through the first one around a full-time job.