I am a Computer Science graduate from the University of Maryland, Baltimore County (UMBC), having earned my B.S. in May 2025. With a strong focus on systems administration, cloud infrastructure, and cybersecurity, I hold an active CompTIA Security+ (SY0-701) certification obtained in January 2025. I specialize in architecting, securing, and automating IT environments across operating systems including Windows 10/11, macOS, and Linux. My technical expertise ranges from managing local Proxmox and VMware homelabs to deploying enterprise-simulated Active Directory networks, Docker containers, and AWS cloud environments.
During my academic career, I expanded my global perspective by studying abroad at Yonsei University in South Korea, and developed strong organizational skills serving as the Vice President and Secretary of the UMBC Korean Student Association (KSA). In these leadership roles, I spearheaded outreach, orchestrated large-scale cultural events with a cross-functional team, and engineered campaigns that sustained a 90% event attendance rate.
In my downtime, I'm usually modifying custom mechanical keyboards, optimizing high-performance hardware, or studying the Korean language.
Deployed an AWS environment seeded with five real-world misconfigurations (public S3 bucket, over-privileged IAM role, open SSH/RDP security group, unencrypted EBS volume, disabled logging) and audited it against the CIS AWS Foundations Benchmark using Prowler, surfacing 242 failures across 362 checks. Triaged findings by severity, mapped each to its CIS control, and remediated via AWS CLI, enforcing least privilege, scoping IAM permissions, restricting network access, and enabling audit logging, all performed under a dedicated read-only scanning identity and verified with a second scan. Also caught a security group the scanner missed because it was unattached to a running resource, confirming the exposure manually. Documented all findings and remediations in a formal audit report.
View on GitHub →Deployed a self-hosted Wazuh SIEM with a full manager-agent architecture to replicate core SOC analyst workflows end to end. Simulated SSH brute-force attempts, privilege escalation, and unauthorized account creation against a monitored Ubuntu endpoint, then validated detection coverage by mapping 28 generated alerts to MITRE ATT&CK across 6 tactics, including a correlated Level 10 alert triggered by repeated failed logins rather than isolated events. Ran a vulnerability scan against the endpoint, identifying 67 critical and 457 high-severity findings and prioritizing remediation by affected package. Documented the full exercise in a formal incident report covering timeline, detection evidence, MITRE-mapped analysis, and remediation recommendations.
View on GitHub →Architected a distributed system that provisions an isolated, ephemeral Docker container for each match on demand, eliminating idle compute by automatically tearing down instances at completion. Engineered a pure-JDK orchestration layer that launches containers, runs TCP readiness probes, and publishes routing events over Redis to a Velocity proxy for seamless player transfers. Implemented a four-case container lifecycle with self-terminating instances and an automated garbage-collection sweep to guarantee zero leaked resources under failure. Instrumented the full stack with hand-written Prometheus exporters and provisioned Grafana dashboards for real-time observability of active matches, boot-time latency, and per-match server health, deploying the entire environment on a self-hosted Proxmox node.
View on GitHub →Engineered a production-grade network security stack on a Raspberry Pi 4 running OpenWrt, establishing full WAN/LAN separation via a USB ethernet adapter to enable proper routing between upstream and local networks. Deployed DNS-based threat blocking to intercept and nullify over 251,000 malicious and ad-serving domains across all network devices. Configured a self-hosted WireGuard VPN server from scratch using public-key cryptography, enabling encrypted remote access with full DNS filtering enforced on connected clients. Hardened the system by enforcing SSH key-only authentication, blocking WAN-facing SSH exposure, and implementing forced DNS redirection to prevent client bypass. Integrated Tailscale as an independent remote access layer and provisioned a containerized Prometheus and Grafana stack for real-time network telemetry and system health monitoring.
View on GitHub →Deployed an enterprise-simulated IT environment using VMware, featuring a Windows Server 2025 Domain Controller and Windows 11 client nodes on a secure NAT network. Engineered automated user account and security group provisioning using custom PowerShell scripts, effectively reducing manual setup time by 60%. Secured the domain by enforcing Group Policy Objects (GPOs) for password policies, account lockouts, and desktop restrictions.
Feel free to reach out for collaborations, project inquiries, or just to say hello.