Computer Science student at York University (graduating December 2026), Toronto. Background in 24/7 security operations; building toward data engineering, systems and database administration, and security engineering. CompTIA Security+ · AWS Certified DevOps Engineer – Professional · Microsoft PL-400
Data engineering and analytics
| toronto-open-data-pipeline | ELT for City of Toronto open data: CKAN → PostgreSQL → dbt star schema (11 models, 40 tests) → Airflow, with a retrained delay-probability model served by FastAPI. |
| azure-toronto-data-platform | The same pipeline Azure-native: Bicep, Data Factory, ADLS Gen2, Databricks (PySpark/Delta medallion), Synapse serverless. |
| databricks-credit-risk-mlflow | Credit-risk model in Spark MLlib with the full MLflow lifecycle: tracking, CV tuning, registry alias, batch scoring. AUC 0.78, KS 0.43. |
| ttc-realtime-pipeline | Streaming: live TTC vehicle positions (GTFS-Realtime) → Redpanda/Kafka → idempotent PostgreSQL sink → live route views. |
| toronto-crime-sql-analytics | Twenty SQL questions on a decade of police data, a findings write-up, and a live dashboard. |
Database and systems administration
| postgres-dba-toolkit | PostgreSQL primary/replica with verified point-in-time recovery and failover drills, a diagnostics query library and measured index tuning (24.9 ms → 0.2 ms). |
| ansible-server-baseline | Linux provisioning and hardening in eight Ansible roles, proven idempotent and verified against 41 CIS Benchmark checks. |
| directory-services-lab | Active Directory domain (Samba AD) with Kerberos, LDAP and DNS, a joined Linux client authenticating real users, and a tested user lifecycle. |
Security analytics and detection engineering
| soc-alert-analytics | SIEM alert and triage analytics (rule tuning, SLAs, ATT&CK coverage, attack chains) plus Isolation Forest anomaly detection evaluated against planted incidents. |
| sigma-detection-pack | Eleven Sigma rules converted to SQL, Splunk and Sentinel KQL with pySigma, tested in CI against a corpus with planted positives and near-misses. |
| pcap-threat-hunting | PCAP → Zeek → SQL hunts for C2 beaconing, DGA and exfiltration, scored against planted ground truth. |
| aws-security-auto-remediation | CloudTrail + GuardDuty + Config → EventBridge → Lambda remediations, Terraform-deployed, tested against mocked AWS. |
| vuln-prioritization | Trivy scans enriched with CISA KEV and EPSS, tiered in SQL: 3,934 findings → 95 that matter. |
Network engineering
| network-automation-lab | Six-router FRRouting lab (OSPF, iBGP, dual-homed eBGP with policy) generated from YAML with Jinja2 and verified by 22 tests on every push. |