A capability statement, not a portfolio.

Engineering degrees at bachelor's and master's level, in electrical and computer engineering respectively. Those do not expire, and I am happy to evidence them.

I also held the security and audit certifications for most of a career - CISSP, CISM, CISA and the rest of that alphabet. I no longer do. They lapsed, I did not renew them, and you will not find them claimed anywhere else on this site.

They are genuinely useful in two situations: a salaried hiring process that needs a filter it can apply at scale, and a room where nobody is placed to judge the work directly. Neither describes this one. You can read what I think about segmentation, secrets, supply chain and the rest, and form a view before we ever speak.

The body of knowledge behind them has also been thoroughly commoditized. It sits in free courseware, in the published standards themselves, and in any model you care to ask. A certification that once stood for access to scarce material stands for less once the material stopped being scarce. What it still evidences is that somebody passed an exam on a particular Tuesday. What I would weigh instead is whether an architecture survives a motivated attacker rather than a compliant one, and whether the person carried a framework all the way to an audit instead of only reading it.

References and named project history are provided directly under engagement, along with any non-disclosure terms your procurement requires. They are not published here, and neither are client names.

If procurement needs to know the shape of the delivery team, ask on the first call. Every specialist who would touch your engagement is named before you sign - there is no bench being allocated behind the scenes, because there is no bench.

Work is delivered in English and Spanish, remotely across the United States and internationally, from San Antonio, Texas.