Terraform Provider for pfSense
Configure pfSense firewall/router devices with Terraform. Written in Go with the Terraform Plugin Framework.
About Me
Before I was a platform engineer, I worked as a full-stack web developer using React, Node.js, and a touch of Java. I spent my time building application features, shaping the user experience, and writing backend services. Even so, I kept gravitating toward the DevOps side of the house: automating infrastructure, packaging applications, and wiring up deployments. The pull never let up, so I made the jump to platform engineering!
My start in software development still shapes how I architect platforms: I treat each one as a product developers actually want to use, not a pile of tools they’re required to adopt. I’m partial to solving problems at the intersection of software and infrastructure. In practice, I prove out new ideas with working prototypes and turn the ones that hold up into standards across every layer of the platform. The goal is always the same: simplify how teams ship, run, and observe their applications.
Platform
I like getting into the weeds of:
- Multi-cloud and hybrid architecture, managed with infrastructure as code
- GitOps-driven Kubernetes in the cloud, on-premises, and at the edge
- Internal developer platforms with self-service golden paths to production
- Observability, from telemetry collection and governance to the dashboards and alerts teams rely on
- Reusable CI/CD pipelines and release engineering for consistent, tested deployments
- Platform security, including policy as code, secrets management, workload identity, and supply chain integrity
Software Engineering
When a platform is missing a piece, I build it:
- Go services and Kubernetes controllers for platform automation
- Terraform providers and other glue between tools
- Upstream features and fixes for open source projects
Outside of Work
What my Saturdays look like:
- Self-hosting, homelabbing, and home automation
- Playing co-op video games with my wife
- Brewing pour-over coffee and whisking matcha
- Discovering new music and catching concerts
- Hiking, the more scenic the better
- Hunting for bargains
Get in Touch
Have a question or want to compare notes? Looking for my resume? Shoot me an email. I’m always up for talking about platform engineering, open source, interesting problems, or anything on the lists above.
Curated Projects
Terraform Provider for Ansible
Run Ansible playbooks using Terraform, without the local-exec provisioner. Supports execution environments and jq queries against playbook artifacts, among other features. Written in Go, with acceptance tests and published coverage reports. GitHub Actions is used for CI/CD.
K3s Cluster Terraform Module
Provision and operate a Kubernetes cluster with the convenience of a managed offering. Targets Fedora CoreOS, with SELinux support and Butane submodules for machine configuration. Highly available control plane via HAProxy and Keepalived. Supports air-gapped installs, upgrades, and certificate rotation. Built on my Ansible provider and used for my homelab clusters.
Home Automation
- homelab
Fedora CoreOS VM provisioned on Proxmox with Terraform and configured with Ansible. All workloads run as Podman Quadlets. Zigbee2MQTT bridges devices from an SLZB-MR2 network-attached coordinator to Home Assistant over Mosquitto. Caddy runs rootless with systemd socket activation and terminates HTTPS with certificates from lego.
Cooling a Closet Homelab
Measured whether two USB fans actually helped. Uses an OpenTelemetry Collector, Prometheus, and Grafana, with dashboards generated from Jsonnet. Scripts mark changes and compare the windows on either side.
Personal Website
This very website. Rendered with Hugo and styled with Tailwind CSS. Pages are precompressed with Brotli and served by Caddy from a reproducible, signed container image with an SBOM. Deployed to GCP Cloud Run with Terraform. CI/CD with GitHub Actions includes Lighthouse audits and security scans.