I build tools for people who build systems.

Mostly that means infrastructure that stays out of your way: reproducible environments, small composable CLIs, and systems that fail loudly instead of mysteriously. I like static binaries, no magic, and being able to explain the whole thing on a whiteboard.

By day I lead infrastructure, security, observability, and AI engineering at a proprietary options trading firm. Low-latency market data, on-prem fleets, and the platform everything else sits on. Before that I cofounded Mimir (YC S15, acquired by HackerRank), where I built a code execution sandbox that safely ran millions of untrusted programs a day and a browser IDE back when that was still a strange idea.

pog — a framework for building bash CLIs that don't feel like bash. Flags, validation, completions, and help text, packaged with Nix. hex is written in it.

nix — my nixpkgs overlay collection. A pile of packages and helpers that several companies now use as the base of their internal dev environments.

hex — an opinionated abstraction layer that brings Nix to Kubernetes. Write declarative, composable spells instead of a YAML sprawl; get server-side diffs, Helm interop, and strict schema validation for free. Used in production by a handful of companies.

Plus a long tail of smaller things: MCP servers, observability daemons, agent tooling, and whatever else I needed badly enough to write.

Nix for everything reproducible · Rust and Go for daemons and performance-sensitive work · Python where iteration speed wins · Kubernetes, NixOS, and Terraform to hold it all together

I run a homelab I have no business running. a NixOS fleet, multiple k3s clusters, and enough GPUs to make local inference genuinely useful; largely because it's the best place to break things before work does.