Security Architect & AI Agent Governance Researcher

I build the controls I document — cloud guardrails, endpoint hardening, evidence pipelines, and detection workflows that stand up in real operations and audits.

📧 career@pharns.com · 🌐 portfolio.pharns.com · 💼 LinkedIn

Architect of the AQ Score™ — the independent measurement standard for governed autonomous action.

USAF Veteran · USPTO Patent-Filed (named inventor) · NIST OLIR Cataloged (×3, Final) · 17 Active Certifications

• I implement controls, not just map them. Framework requirements become working configurations, monitoring logic, and documented evidence — not recommendations in a report.
• I connect governance to operations. Design through implementation through audit-ready outputs — the documentation reflects what actually runs.
• Unusual edge-domain depth. RF/UAS security (USPTO patent filings, TraceLock™), governed automation systems, and real operator experience across USAF, a venture-funded drone logistics startup, and active consulting.

Production GRC automation platform — end-to-end intake workflow with n8n orchestration and CISO Assistant.

• Stack: Client portal + n8n + Nextcloud + SuiteCRM + DocuSeal + CISO Assistant (100+ frameworks)
• Impact: ~70% reduction in audit prep time; HMAC-authenticated webhooks; live demo running
• Status: Production MVP — 9 workflows operational
• View Project → · Try Live Demo →

Patent-pending RF surveillance detection across 6 wireless domains simultaneously with forensic-grade logging.

• Codebase: 25 Python modules · 81 shell scripts · ~12,500 LOC
• Domains: Wi-Fi · BLE · SDR · GPS · ADS-B · ISM
• Status: WGU BSCSIA Capstone · Patent Pending
• View Project →

S3 default-deny · GuardDuty findings export · Scoped IAM mapped to CIS/NIST

• Status: Architecture complete, implementation in progress
• View Project →

Security Onion SIEM with TheHive/Cortex case management, custom detection rules, and IR playbooks.

• Detection Content: Sigma-style rules · Alert tuning · False positive reduction
• View Project →

Runtime governance for autonomous AI agents — policy enforcement at the point of action, not after.

• What it does: classifies each agent action by risk tier before it runs, and enforces policy at the point of action rather than after the fact
• Governance: agent behavior is checked against policy before execution, not merely logged afterward
• Memory: agent memory is governed under the same policy pipeline as agent actions
• Audit: immutable, append-only decision log — not modifiable by governed agents
• Status: Operational — subject of multiple USPTO provisional filings (first: 64/029,300); cataloged in the NIST OLIR program as three Final Informative References (Ref 220 / AI RMF 1.0, Ref 215 / CSF 2.0, Ref 217 / SP 800-53 Rev 5.2.0)
• View Project →

Ingests live CTI feeds (abuse.ch URLhaus + ThreatFox) and transforms them into behavioral-analytics tables with dbt.

• Stack: dbt Core · DuckDB · Python — staging → intermediate → mart models, tested and documented
• Marts: IOC volume by threat family · daily volume vs. 7-day baseline (anomaly-ready) · cross-feed corroborated IOCs (multi-source correlation)
• Verified: 6 models · 14 passing tests · full lineage DAG
• View Project →

Deterministic AI agent orchestration with explainable routing and audit-grade logging.

• Codebase: 6,361 lines Python · 72 health checks · 4 provider integrations
• View Project →

Few practitioners combine these:

• USPTO patent filings (named inventor) in UAV payload and delivery architectures
• TraceLock™ — patent-pending 6-domain RF detection platform
• FAA Part 107 certified · HAM/GMRS licensed
• SDR/wireless expertise — RTL-SDR, HackRF, Kismet, spectrum analysis
• USAF career veteran — mission-critical operations background
• UAV engineering & operations leadership — 7 years hands-on across a drone logistics venture (payload/delivery architectures)

Security+ · CySA+ · PenTest+ · Network+ · A+ · Project+ · CSAP · CSIS · CIOS · ISC² SSCP · ISC² CC · ITIL 4 · LPI · CNSP (CompTIA) · CNVP (CompTIA) · CNSP (SecOps Group) · CNVP (SecOps Group)

NIST OLIR Program — 3 Final Informative References cataloged (AI RMF 1.0, CSF 2.0, SP 800-53 Rev 5.2.0)

AWS Cloud Practitioner · ISC² CCSP

B.S. Cybersecurity & Information Assurance — Western Governors University, March 2026 Capstone: TraceLock™

Best fit for teams that need implementation, not just policy decks.

_{Security architect/operator who turns governance into implemented controls, telemetry, and evidence. US Citizen · USAF veteran · Open to remote roles worldwide.}