Skip to content
Dev0 Docs

Dev0 Docs

A minor blog and documentation site designed to share lessons learned and snippets that I find useful.

I’m a Systems Engineer with nearly a decade of experience supporting both government and corporate environments. My current focus is on DevSecOps, Software Development Lifecycle (SDLC) optimization, and the development and maintenance of Linux system baselines and tooling.

I specialize in streamlining engineering processes, enhancing security posture, and improving system reliability through automation and modern development practices.

DevSecOps & SDLC

  • Transitioning from “build every time” to artifact/package creation and retention for improved efficiency and traceability
  • Designing and maintaining CI/CD pipelines across multiple products
  • Implementing SAST, SCA, and dependency scanning to ensure secure and compliant codebases
  • Containerizing development and operational workflows to support scalable and portable deployments
  • Aligning development practices with Executive Order 14028 by securing the software supply chain, implementing SBOMs, and enhancing code scanning and traceability

Linux Systems Engineering

  • Managing, deploying, and maintaining RHEL-based system baselines hosting a variety of applications
  • Developing Kickstart and Ansible-based automation for deployment, system maintenance, and configuration enforcement
  • Enforcing STIG compliance through automated tooling and continuous validation

Outside of my professional role, I stay active in the tech community, offering support to users and helping maintain various SaaS and cloud infrastructure components the communities rely on. I enjoy exploring new technologies and trends in my homelab, which features a healthy mix of modern platforms and tooling.

I also dabble with NodeJS/React, and contribute to open source projects by creating and maintaining GitHub Actions workflows, several of which I host in Azure or other clouds.

Purpose

This site is to serve as a blog and pseudo-wiki replacement for any notes I think are useful enough to share and a place to post some of the things I already share with people and need to constantly re-write each time I want to explain. I am not a writer, I am not a developer, I guarantee neither the English nor the code to be pretty but it all hopefully works.

Open source projects

  • r-Techsupport/WebDBG
  • PipeItToDevNull/nginx-certbot
    • With my move to Podman I needed to find a new simple Infrastructure as Code method of proxying and obtaining certificates for my various containers. This was also a great introduction to Github Actions, containers are built nightly to ensure vulnerabilities are kept at a minimum.
  • r-Techsupport/Get-Specs
    • Now archived, due to better tools being created in the community, but used for several years; this is a PowerShell based tool that inventories a machine then uploads the results as HTML to a remote server for rendering and sharing. It grabs a software inventory, hardware inventory, network configurations, and performs various checks for known bad configurations. Check the ReadMe for an exhaustive list of what it gathers.
  • PipeItToDevNull/Get-Smartcard
    • As far as I know, this is the only project that exists for interacting with smartcard certificates via PowerShell objects. I created this so I could manipulate smartcards using more reliable and advanced scripts. Using the native certutil executable this will format and display all the certificates on a smartcard in a human and machine readable object based format.
  • r-Techsupport/rTS_Debian
    • A fun project originally started because having users install packages in a live environment is painful when they don’t know Linux. This is the exclusive source for all the guides and tutorials we create on the r/TS Wiki
  • r-Techsupport/Hyde
    • A web editor and CMS for Jekyll/git static sites designed specifically for the rTS Wiki.
    • This products deployment has been automated into Azure test and prod instances.