Cybersecurity student focused on securing machine identities and AI agents. IAM is the foundation; the interesting problems are one layer up — service accounts, API keys, and autonomous agents that authenticate without a human in the loop.
cat projects.md
Hands-on labs and builds spanning NHI security, IAM, cloud threat detection, and infrastructure automation.
NHI Security Lab
Built a hands-on lab focused on Non-Human Identity (NHI) security — auditing service accounts, API keys, and machine credentials for over-privilege, stale access, and secrets exposure. Automated detection of dormant service accounts using Python and AWS IAM Access Analyzer, simulated credential exfiltration to test detection coverage, and implemented secrets rotation workflows with AWS Secrets Manager to minimize standing access risk.
Deployed an internet-facing honeypot on AWS using EC2 and OpenCanary inside an isolated VPC, capturing live attacker activity across SSH, HTTP, FTP, MySQL, and Telnet. Built a fully serverless logging pipeline with CloudWatch, Lambda, and DynamoDB to parse and store structured attack data in real time. Enforced least-privilege IAM and observed automated probes within minutes of deployment.
Built an AWS EC2 lab to simulate IAM misconfigurations and privilege escalation attacks using Kali Linux and the AWS CLI against over-privileged IAM accounts. Monitored suspicious activity via CloudTrail and GuardDuty, then automated incident response with Lambda (Python/Boto3) to disable compromised accounts in real time.
Deployed a static website on Amazon EC2 using Apache HTTP Server on Amazon Linux. Covered the full flow: launching an instance, SSH configuration, Apache setup, custom HTML upload, and security group rules for HTTP/SSH traffic. A foundational project for understanding cloud hosting, Linux server administration, and AWS networking.
Developed a PowerShell-based detection system to identify IAM misconfigurations across 15,000+ user accounts during my City of Dallas internship. Reduced unauthorized access risk and significantly improved audit efficiency across the enterprise.
PowerShellActive DirectoryIAMAudit & Compliance
cat skills.cfg
Tools and technologies used across internships, homelabs, and coursework.
Developed PowerShell-based detection system to identify IAM misconfigurations across 15,000+ user accounts, reducing unauthorized access risk and improving audit efficiency.
Engineered Okta Workflow automation to suspend terminated users in real time, minimizing access risk and supporting compliance logging across the enterprise.
Audited Active Directory organizational units and remediated misaligned accounts, strengthening least-privilege enforcement and access control integrity.
Collaborated with IAM team to identify root causes of provisioning errors, reducing account misconfiguration risk across departments.
cat involvement.txt
Programs, achievements, and communities that have expanded my technical perspective and leadership experience.
State Farm Hackday Finalist
Selected as a top 10 finalist among 200+ teams at State Farm's enterprise hackathon for developing an AI-powered damage measurement tool integrated into the company's claims application.
AWS Cloud Club
Technical Coordinator — part of the founding cohort establishing UH's first AWS Cloud Club, hosting hands-on workshops showcasing cloud computing services.
MongoDB Next In Tech Summit
Selected as one of approximately 50 students nationwide to attend MongoDB's Next In Tech Summit, a program focused on security and early-career development (May 2026).
NSBE
National Society of Black Engineers member at the University of Houston chapter.
Code Coogs
Active member of UH's coding and software development community.
ColorStack
Member of ColorStack, a community supporting Black and Latinx students pursuing careers in computing.