Technologies

The tools behind
the work.

Technologies I use to build, automate, and operate infrastructure, from enterprise IT and cloud services to software development and AI workloads.

Technologies
94
Years of experience
7+
M365 users managed
100s

94 technologies across 13 categories

Domain 01

Virtualization & Infrastructure

Enterprise hypervisors and virtual desktop infrastructure.

See the lab →

Proxmox VE

Primary hypervisor for homelab and production workloads with clustering and HA

Microsoft Hyper-V

Windows Server virtualization for enterprise environments

Azure VDI

Azure Virtual Desktop deployments for remote workforce

Windows 365 Cloud PC

Cloud-based Windows desktops for hybrid work scenarios

LXC Containers

Lightweight Linux containers for efficient resource utilization

VMware ESXi

Enterprise virtualization platform experience

Domain 02

DevOps

Source control, CI/CD, infrastructure as code, and containers.

See projects →

GitLab

Self-hosted Git, CI/CD pipelines, and container registry

CI Pipelines

Automated build, test, and deployment workflows using GitLab CI and GitHub Actions

Terraform

Cloud infrastructure provisioning

Ansible

Infrastructure as code and configuration management

Docker

Application containers for deployed services and development workflows

Docker Compose

Multi-container application orchestration

NVIDIA Container Toolkit

GPU-enabled containers for vLLM and CUDA workloads

Bash/Zsh

Shell scripting for automation and system administration

PowerShell

Windows automation and scripting

Domain 03

AI & Automation

Local AI infrastructure and automation tooling.

See AI infrastructure →

vLLM

LLM inference and serving across a two-node DGX Spark cluster

LiteLLM

Central model gateway for named routes and scoped API access to inference backends

SGLang

Local language model serving and evaluation alongside vLLM

ComfyUI

Node-based image and video generation workflows on local GPUs

NCCL

Multi-GPU and multi-node communication for distributed inference

CUDA

GPU-accelerated inference and compute workloads across NVIDIA GPUs

Hermes Agent

Agent orchestration connecting models, tools, memory, and reusable skills

OpenShell

Policy-controlled execution environments for agent tools and workloads

OpenClaw

Personal AI assistant and coding agent

n8n

Workflow automation and integration platform

Domain 04

Languages & Development Tools

Languages, editor, and version control.

See projects →

Rust

Systems programming for CLI tools

Zig

Low-level systems programming and libraries

Python

Scripting and automation

Neovim

Primary editor with custom Lua configuration

Git

Version control for all projects

GitHub

Code hosting, public repositories, and collaboration

Domain 05

Microsoft 365 & Azure

Cloud infrastructure, identity, and productivity at scale.

Microsoft 365 Admin

Tenant management, licensing, and user administration at scale

Microsoft Intune

MDM/MAM for device enrollment, policies, and app deployment

Azure AD / Entra ID

Identity management, conditional access, and SSO

Azure Infrastructure

VMs, networking, storage, and hybrid connectivity

Entra App Proxy

Secure remote access to on-prem web apps without a VPN

Azure Site Recovery

Cloud DR orchestration with failover and replication

Azure Backup / Recovery Vault

Centralized backup vaults for VMs, files, and workloads

Power Automate

Low-code workflow automation across M365 and external services

Power BI

Business intelligence dashboards and data reporting

Exchange Online

Email administration, mail flow rules, and migration

Teams Phone / VOIP

Cloud voice with call queues, auto attendants, and direct routing

SharePoint & OneDrive

Document management and collaboration platforms

Domain 06

Networking & Security

Firewalls, VPNs, and network infrastructure management.

See the architecture →

Fortinet FortiGate

Next-gen firewalls with UTM, SSL inspection, and SD-WAN

Tailscale

Zero-trust mesh VPN for secure remote access and site-to-site connectivity

UniFi Network

Ubiquiti SDN controllers, switches, and access points

SD-WAN

Software-defined WAN with automatic failover and traffic optimization

pfSense/OPNsense

Open-source firewall and routing platforms

WireGuard

Modern VPN protocol for high-performance tunnels

Domain 07

Observability & Threat Detection

EDR, SIEM, and observability across endpoints and infrastructure.

See the lab →

Huntress EDR

Managed detection & response for endpoint threat hunting and remediation

Wazuh SIEM

Open-source SIEM/XDR for log analysis, file integrity, and compliance

CrowdSec

Distributed, crowd-sourced intrusion prevention across hosts and edge

Prometheus + Exporters

Metrics collection with node_exporter and Proxmox pve-exporter

Grafana

Dashboards and visualization for metrics, logs, and alerting

Defender for Business

Microsoft endpoint protection and threat analytics for M365 tenants

Defender for Cloud Apps

CASB for SaaS visibility, shadow IT discovery, and policy enforcement

Domain 08

Identity & Secrets

Password vaults, passkeys, and phishing-resistant authentication.

Bitwarden

Password vaults, secure sharing, and credential management for business and personal use

Vaultwarden

Self-hosted Bitwarden-compatible server for homelab credentials, testing, and lab service hosting

Passkeys

Passwordless, phishing-resistant sign-in using WebAuthn credentials

FIDO2 Security Keys

Hardware-backed authentication for phishing-resistant MFA and passwordless sign-in

Domain 09

Email Security

Advanced threat protection and email filtering solutions.

Proofpoint

Enterprise email security with threat intelligence

Avanan

API-based email security for M365 and Google Workspace

Microsoft Defender

Built-in M365 security with Safe Links and Safe Attachments

DMARC/DKIM/SPF

Email authentication and anti-spoofing configuration

Domain 10

Backup & Storage

Backup, disaster recovery, and S3-compatible object storage.

See the lab →

Veeam

Backup and disaster recovery for VMs, M365, and physical workloads

Datto

BCDR appliances and cloud backup for business continuity

Azure Blob Storage

Tiered object storage for backups, archives, and app data

Wasabi

Low-cost S3-compatible hot cloud storage with no egress fees

Backblaze B2

Affordable S3-compatible object storage for offsite backups

Amazon S3

Industry-standard object storage and the S3 API baseline

MinIO

Self-hosted S3-compatible object storage on own infrastructure

Domain 11

Web Hosting & DNS

Domain management, web servers, reverse proxies, and CDN.

Cloudflare

DNS, CDN, DDoS protection, and zero-trust tunnels

NGINX

Web server for static sites and reverse proxy

Traefik

Cloud-native reverse proxy with automatic SSL

HestiaCP

Open-source web hosting control panel

ACME / Let's Encrypt

Automated TLS certificate issuance and renewal via the ACME protocol

Astro

Modern static site generator (this site!)

WordPress

CMS management and migration

Domain 12

MSP Tools & Documentation

Documentation, remote support, PSA, RMM, and licensing platforms.

Hudu

Self-hosted IT documentation platform (current internal use)

IT Glue

Cloud-based documentation and password management

ConnectWise/Autotask

PSA platforms for ticketing and billing

Kaseya BMS

PSA for ticketing, billing, and service delivery

Pax8

Microsoft 365 / cloud partner and reseller marketplace for licensing and provisioning

ScreenConnect

Self-hosted remote support behind Tailscale in Azure

NinjaRMM

Remote monitoring and management platform

Domain 13

Wallets & Signing

Hardware and software wallets for on-device review and transaction signing.

Hardware Wallets

Keystone 3 Pro

Air-gapped wallet with QR-based transaction signing

Ledger Stax

Touchscreen hardware wallet with on-device transaction review and signing

Trezor

Hardware wallets and account management through Trezor Suite

Tangem

NFC hardware wallets used with the Tangem mobile app

NGRAVE

ZERO air-gapped hardware wallet with QR-based transaction signing

Software Wallets

Xaman

XRP Ledger wallet for account management and transaction signing

HashPack

Hedera wallet for HBAR, tokens, and dApp connections

xBull

Stellar wallet for account management and transaction signing

MetaMask

Wallet for Ethereum and EVM networks, tokens, and dApp connections

See these tools in practice.

Explore the projects and infrastructure behind the technology list.