Security Architect & GRC Engineer

I build the controls I document — cloud guardrails, endpoint hardening, evidence pipelines, and detection workflows that stand up in real operations and audits.

📧 career@pharns.com · 🌐 portfolio.pharns.com · 💼 LinkedIn

USAF Veteran (Service-Disabled) · USPTO Patent Holder · 14 Active Certifications

• I implement controls, not just map them. Framework requirements become working configurations, monitoring logic, and documented evidence — not recommendations in a report.
• I connect governance to operations. Design through implementation through audit-ready outputs — the documentation reflects what actually runs.
• Unusual edge-domain depth. RF/UAS security (USPTO patents, TraceLock™), governed automation systems, and real operator experience across USAF, a $5.6M startup build, and active consulting.

Production GRC automation platform — end-to-end intake workflow with n8n orchestration and CISO Assistant.

• Stack: Client portal + n8n + Nextcloud + SuiteCRM + DocuSeal + CISO Assistant (100+ frameworks)
• Impact: ~70% reduction in audit prep time; HMAC-authenticated webhooks; live demo running
• Status: Production MVP — 9 workflows operational
• View Project → · Try Live Demo →

Patent-pending RF surveillance detection across 6 wireless domains simultaneously with forensic-grade logging.

• Codebase: 25 Python modules · 81 shell scripts · ~12,500 LOC
• Domains: Wi-Fi · BLE · SDR · GPS · ADS-B · ISM
• Status: WGU BSCSIA Capstone · Patent Pending
• View Project →

S3 default-deny · GuardDuty findings export · Scoped IAM mapped to CIS/NIST

• Status: Architecture complete, implementation in progress
• View Project →

Security Onion SIEM with TheHive/Cortex case management, custom detection rules, and IR playbooks.

• Detection Content: Sigma-style rules · Alert tuning · False positive reduction
• View Project →

Deterministic AI agent orchestration with explainable routing and audit-grade logging.

• Codebase: 6,361 lines Python · 72 health checks · 4 provider integrations
• View Project →

Few practitioners combine these:

• USPTO-granted patents in UAV payload and delivery architectures
• TraceLock™ — patent-pending 6-domain RF detection platform
• FAA Part 107 certified · HAM/GMRS licensed
• SDR/wireless expertise — RTL-SDR, HackRF, Kismet, spectrum analysis
• USAF career veteran — mission-critical operations background
• CEO of $5.6M drone logistics company — 7 years hands-on UAV engineering

Security+ · CySA+ · CSAP · PenTest+ · CNSP · CNVP · Network+ · A+ · ITIL 4 · ISC² SSCP (Assoc.) · LPI · Project+ · CSIS · CIOS

AWS Cloud Practitioner · ISC² CCSP

B.S. Cybersecurity & Information Assurance — Western Governors University, March 2026 Capstone: TraceLock™

Best fit for teams that need implementation, not just policy decks.

_{Security architect/operator who turns governance into implemented controls, telemetry, and evidence. US Citizen · USAF veteran · Open to remote roles worldwide.}