Principal Cloud (GCP & AWS), Network Security (JNCIP-SEC) & Agentic AI Infrastructure Architect (ai-ops) • 15+ years of production experience architecting global multi-cloud platforms (GCP, AWS, OpenStack, Proxmox VE, Kubernetes), global golden-image & IaC CI/CD pipelines (Terraform Enterprise across 500+ workspaces, Ansible, Puppet, Pulumi, Packer, GitLab CI, GitHub Actions), carrier & data center routing/switching (1,000+ devices • BGP, OSPF, EVPN-VXLAN, Juniper Junos, Cisco IOS-XE/NX-OS, Cumulus Linux), and autonomous Zero-Trust SecOps (Wazuh SIEM/XDR, HashiCorp Vault, MCP, Graphify).
📍 Location & Mobility: Remote (US) • Los Angeles Metro • San Francisco Bay Area • Austin, TX • New York City Metro (Open to Relocation w/ Package)
| Domain | Technologies & Production Capabilities |
|---|---|
Agentic AI & Autonomous SecOps (ai-ops) |
Two-Tier Orchestrator/Sub-Agent Architecture (Vertex AI, Google Agentspace, AI Agent Gateways, Bedrock, OpenAI, Gemini), LLMOps/MLOps Governance, Model Context Protocol (MCP), Graphify Topological Knowledge Graphs (<150-token queries), Autonomous Wazuh & CI/CD Remediation (Hermes), Candidate Diff Staging |
| Google Cloud (GCP) & AWS Architecture | GCP: GKE, Cloud Run, Vertex AI, Agentspace, Shared VPC, Cloud Router & NCC HA BGP/IPsec, Cloud Armor WAF, Workload Identity Federation, BigQuery/GMP • AWS: 1,000+ VM Migrations, Transit Gateway (TGW), Direct Connect, EKS/ECS, GuardDuty, Security Hub, Network Firewall, Cloud FinOps |
| Multi-Cloud IaC & Global CI/CD | Terraform & Terraform Enterprise (500+ Workspaces), Pulumi (Python/TypeScript), Ansible, Puppet, Packer Golden Images, GitLab CI/CD, GitHub Actions, Jenkins across NA, LATAM, EU & APAC |
| Carrier & Data Center Networking | 1,000+ Managed Devices • BGP (95th-Percentile TE), OSPF, EVPN-VXLAN, VRF-Lite, ECMP, VRRP, LACP; Juniper Junos (MX/EX/QFX/SRX, PyEZ, NETCONF), Cisco (IOS-XE/NX-OS/ASA), Cumulus Linux (FRRouting), MikroTik RouterOS |
| Zero-Trust Security, SIEM/XDR & SSOT | Wazuh SIEM/XDR (OpenSearch CVE Indexing, MITRE ATT&CK, CIS Benchmarks), HashiCorp Vault Dynamic Secrets/PKI, Authentik SAML/OIDC SSO, Enterprise RADIUS/TACACS+ AAA, Global Factory IPsec/VTI, NetBox SSOT, Grafana Cloud (Prometheus/Mimir/Loki) |
| Industry Certifications & Education | JNCIP-SEC • JNCIP-DC • JNCIP-ENT • JNCDA • Juniper SE Champion • CCNP • CCNA • VMware VCP5-DCV • Mitel CVE • Cypress College (Cisco Network & Security Lab, Grade: A) • Victor Valley College (Linux Administration, Grade: A) |
📌 Featured Open-Source Release: nertwork/bluepill (v1.1.0)
BluePill (bluepill) is a unified, native C++20 and Qt6/QML desktop and CLI client for Apple iMessage, RCS, and SMS on Linux (x86_64 & aarch64 — Arch Linux, Omarchy, Wayland/Hyprland) paired with a zero-Electron macOS chat.db relay daemon & Web UI (bluepill-server) and 100% backward compatibility with legacy BlueBubbles servers:
- Pinned Conversations Avatar Bar & 1-Click 2FA OTP Copy Pill: Native circular avatar row synced with macOS
com.apple.messages.pinning.plistplus automatic🔑 Copy <code>extraction pills on incoming verification codes. - Zero-Electron macOS Relay (
bluepill-server) & Built-In Web UI (/web): Single-file Python 3 stdlib macOS daemon (brew install nertwork/tap/bluepill) readingchat.dbWAL,AddressBook-v22.abcddb, and binaryNSAttributedStringstreamtypedblobs directly, with a built-in responsive dark-slate Web UI (http://localhost:1235/weborbluepill --webui) and Direct SSH (ssh://user@mac-host) transport. - Edited, Expressive Send & Delivery Failure Badges: Inline
· Edited,· sent with confetti/slam/lasers, and⚠ Not Deliveredbadges alongsideCtrl+Vclipboard screenshot paste. - Real-Time Socket.IO v4 Push & Multi-Channel HTTP Isolation: Dedicated
QNetworkAccessManagerpools (m_sendNam,m_mediaNam,m_socketNam) prevent multi-photo downloads from blocking outbound message sends or typing indicators. - Native HEIC/AVIF Magic-Byte Decoding & Full-Window Photo Viewer: Automatically detects disguised Apple
ftyp(heic,heix,mif1,avif) attachments and converts them vialibheif(heif-convert) / ImageMagick.
# Linux Desktop & CLI Client (Arch Linux / Omarchy — AUR):
yay -S bluepill
# macOS Headless Relay Daemon + Web UI (Apple Silicon & Intel — Homebrew):
brew tap nertwork/tap && brew install nertwork/tap/bluepill🔗 GitHub Repository (nertwork/bluepill) • Arch User Repository (aur/bluepill) • Homebrew Tap (nertwork/homebrew-tap) • Omarchy Community Showcase (#18422) • Release v1.1.0 • macOS Relay & BlueBubbles Setup Guide • Configuration, Web UI & CLI Reference • Architecture Deep-Dive
Featured Technical Publications on nertwork.com
- Autonomous Cloud & Infrastructure SecOps: Integrating Wazuh SIEM/XDR, HashiCorp Vault, and Agentic AI Across AWS, GCP, and Proxmox Fleets
- Leveraging AI for a Homelab: Declarative Proxmox VE Infrastructure with Terraform, Pulumi & GitLab CI/CD
- Enforcing Network Standards Across a 1,000+ Device Fleet with Agentic AI
- Full Architect Resume, Experience Timeline & All 37 Articles (
/about/)
Automatically synchronized via GitHub Actions (
.github/workflows/update-profile.yml) andsync_github_profile.py. Last verified: 2026-11-12 18:04 UTC
| Status | Upstream Repository & Component | Pull Request & Issue | Technical Summary |
|---|---|---|---|
| home-assistant-libs/aiowebostv LG webOS TV ( aiowebostv) |
#778 |
Retrieve exceptions from all initial subscribe_tasks on failure to prevent unretrieved task warnings on Python 3.14 (shipped in aiowebostv==1.0.0 / HA Core 2026.11.0). |
|
| thomluther/anker-solix-api Anker SOLIX Python API |
#350 |
Add Solarbank PPS (F3000 / A1782) Home System MQTT telemetry (0421 a5/a6/d8), realtime status requests, and PV channel mapping. |
|
| thomluther/anker-solix-api Anker SOLIX Python API |
#351 |
Add Storm Guard (disaster_backup) and TOU usage mode schedule support (modify_solix_use_time) for Solarbank PPS A1782 (F3000) & full 16-command MQTT hardware verification. |
|
| zabuldon/teslajsonpy Tesla JSON Python ( teslajsonpy) |
#524 |
Add Tesla Powerwall Storm Watch (storm_mode_enabled) properties and controller commands (released in teslajsonpy==3.14.0). |
|
| alandtse/tesla Tesla Custom Integration ( tesla_custom) |
#1247 |
Add Tesla Powerwall Storm Watch switch entity (StormWatchSwitch). |
|
| alandtse/tesla Tesla Custom Integration ( tesla_custom) |
#1256 / Issue #1255 |
Guard teslamate.py against empty/float MQTT payloads (cast_int) and validate TeslaCarShiftState enum options during concurrent streaming. |
|
| home-assistant-libs/aioeagle Rainforest EAGLE-3 / EAGLE-200 ( aioeagle) |
#135 / Issue #136 |
Handle empty <Device/> XML responses and omitted component/variable fields in ElectricMeter during Zigbee HAN congestion. |
|
| jbergler/hass-ttlock TTLock Integration ( hass-ttlock) |
#367 / Issue #366 |
Extend REVERIFY_GRACE to locks with an online G2 Wi-Fi gateway (gateway_online), reset retry grace on webhook push, and restore Lock state on startup via RestoreEntity. |
|
| xZetsubou/hass-localtuya LocalTuya Integration ( hass-localtuya) |
#904 / Issue #909 |
Fix UnboundLocalError (prefix) and AffixData set hashability in pytuya/parser.py when logging unknown 4-byte header prefixes. |
|
| FunkeyFlo/ps5-mqtt PlayStation 5 MQTT ( ps5-mqtt) |
#704 / Issue #703 |
Use takeEvery for per-device Redux sagas (REGISTER_DEVICE, UPDATE_HOME_ASSISTANT), continue past transitioning consoles, and support comma-separated DDP broadcast targets (shipped in v1.9.0). |
|
| tsightler/ring-mqtt-ha-addon Ring-MQTT Add-on ( ring-mqtt-ha-addon) |
#128 |
Use str schema for disarm_code in config.yaml so Home Assistant Supervisor's addon_pwned check does not flag 4-digit keypad PINs against HaveIBeenPwned. |
|
| JeffSteinbok/hass-dreo Dreo Smart Device Integration ( hass-dreo) |
#828 / Issue #22 |
Add support for 001 MCU revision of DR-HAP003S Air Purifier (shipped in v1.11.11). |
|
| thomluther/ha-anker-solix Anker SOLIX HA Integration ( ha-anker-solix) |
#641 |
Use SolixPpsBatteryStatus enum for SOLARBANK_PPS battery_status sensor (manually merged upstream by maintainer). |
|
| thomluther/ha-anker-solix Anker SOLIX HA Integration ( ha-anker-solix) |
#643 |
Support Storm Guard and backup usage mode entities (select.py, datetime.py) for A1782 (F3000, incorporated into upstream SB_PPS support). |
|
| FunkeyFlo/ps5-mqtt PlayStation 5 MQTT ( ps5-mqtt) |
#709 / Issue #708 |
Debounce single transient UDP playactor.check failures during out-of-band console wake, clear transitioning in UPDATE_HOME_ASSISTANT, and deduplicate offline MQTT state updates. |
|
| apetrycki/daikinskyport Daikin Skyport ( daikinskyport) |
#164 / Issue #163 |
Scope TARGET_TEMPERATURE vs TARGET_TEMPERATURE_RANGE by active hvac_mode and implement turn_on/turn_off on Thermostat for Alexa Smart Home compatibility. |
| Status | Upstream Repository & Component | Pull Request & Issue | Technical Summary |
|---|---|---|---|
| tmn73/omarchy-calendar Omarchy Calendar ( omarchy-calendar) |
#46 |
Resolve Google Calendar event html_link for Evolution Data Server (EDS) CalDAV sources. |
|
| meviusisback/omarchy-hw-monitor Omarchy Hardware Monitor ( omarchy-hw-monitor) |
#6 |
Identify browser tab domains and process roles in proc_top with tmpfs caching. |
|
| omacom/omarchy Omarchy Linux ( omarchy) |
#16008 / Issue #16006 |
Handle early enterprise Wi-Fi script failures in the Quickshell network panel so failed nmcli connection creation clears actionKind. |
|
| twiking/omasettings OmaSettings ( omasettings) |
#30 / Issue #36 |
Deduplicate numbered NetworkManager Wi-Fi profiles (<SSID> 1), clear stale interface bindings, and unescape colons in SSIDs. |
|
| typecraft-dev/oma-cast Oma-Cast Launcher ( oma-cast) |
#88 / Issue #87 |
Accept numpad keys across Qt.KeypadModifier, navigation keysyms, and Wayland scan codes in launcher search, calculator, argument pills, and popup filter inputs. |
| Status | Upstream Repository & Component | Pull Request & Issue | Technical Summary |
|---|---|---|---|
| HappyPathway/github-runner-image GitHub Actions Runner Image |
#9 |
Add Python venv and workflow automation updates for self-hosted GitHub Actions runner image builds. |
|
| jarischaefer/docker-librenms Docker LibreNMS ( docker-librenms) |
#123 / Issue #119 |
Release version bumps (1.68 / 1.69) and distributed poller memcached support. |
|
| mrlesmithjr/ansible-frr FRRouting Ansible Role ( ansible-frr) |
#56 / Issue #43 |
Add BGP Listen Range support, OSPF distribute lists (#28), BGP neighbor timers (#16), Ubuntu 18/20 iproute2 support (#20), and check-mode fixes (#17) across 9 merged PRs. |
| Repository | Category / Plugin ID | Description |
|---|---|---|
nertwork/bluepill |
`Desktop / CLI / macOS Relay (AUR: bluepill | Brew: nertwork/tap/bluepill)` |
nertwork/homebrew-tap |
macOS Homebrew Tap (nertwork/tap) |
Official macOS Homebrew Tap (brew install nertwork/tap/bluepill) providing universal bottles and LaunchAgent services for the BluePill headless macOS relay daemon and Web UI. |
nertwork/omarchy-ai-agents |
nertwork.agents |
Real-time status, rate-limit, and token usage bar panel for AI coding assistants (Claude Code, OpenAI Codex, GitHub Copilot, Grok, Antigravity) on Omarchy Linux / Quickshell. |
nertwork/omarchy-network-info |
nertwork.network-info |
Unified network intelligence, public/LAN IP telemetry, Wi-Fi RSSI, and live interface bandwidth monitor for Omarchy (omarchy-shell). |
nertwork/omarchy-ip-info |
nertwork.ip-info |
Compact public/LAN IP address and geo-ASN status bar widget for Omarchy (omarchy-shell). |
nertwork/omarchy-battery-health |
nertwork.power |
Battery health diagnostics, 80% charge threshold limiting, and real-time power draw analytics for Omarchy Linux laptops. |
nertwork/omarchy-drawer |
nertwork.drawer |
Foldable status bar drawer container for Omarchy widgets with smooth expand/collapse animations. |
nertwork/proxmox-image |
Infrastructure |
Automated Ubuntu & Rocky Linux Cloud-Init VM template builder for Proxmox VE clusters. |
nertwork/change-acs-password |
Network Automation |
Python automation toolkit and library for managing enterprise Cisco ACS appliances. |




