SKILL SETS

This site is the reference build. Hand-written HTML, CSS, and JavaScript: no framework, no build step, no page builder, and no third-party scripts, with fonts served from the same domain. Custom SVG wordmark with a clip-path waterline and a generated canvas background layer. A real multi-page architecture, with each page independently indexable and carrying its own title and description, rather than a single scrolling page. Fluid type and layout that hold from a 360px phone to a 4K display, and a serverless edge worker handling contact dispatch with honeypot filtering and server-side validation. Deployed on Cloudflare Pages behind a custom domain, with DNS and business email configured in the same pass.

Production sites built from scratch: hand-written HTML, CSS, and JavaScript with intentional design systems, type scales, color theory, and fluid responsive layouts that hold from a 360px phone to a 4K display. Semantic markup, keyboard and screen reader accessibility, structured data, and metadata done properly instead of bolted on. Canvas and SVG work, custom logo and mark construction, and animation that serves the page rather than decorating it. No page builders and no theme to fight later.

The stack under the site: domain strategy, DNS and TLS, Cloudflare Pages deployment, serverless edge workers for form handling and transactional mail, business email architecture, rate limiting, spam control, and origin hardening. Authenticated web applications and internal tools backed by nginx, built around real data rather than screenshots of spreadsheets.

End-to-end network design: VLAN segmentation, firewall policy, routing, DNS, DHCP, and inter-VLAN access control. Directory services, Group Policy, user provisioning, and domain management across mixed OS environments. OPNsense, MikroTik, and enterprise switching at production scale. Extends past the wire to VoIP and PBX phone systems, conference room and structured AV, and on-site installation, consulting, and troubleshooting, billed and scheduled like any other engagement.

Production scripting in Bash and PowerShell across Linux and Windows environments. Systems-level development in C. Audit and verification scripts, restricted shell hardening, scheduled task automation, OT/IT data pipeline integration, and ERP taxonomy architecture. Includes replacing manual paper-to-system data entry with OCR-driven capture, and wrapping the resulting scripts in a plain menu-driven interface so the person running it day to day never has to type a command. Ice Streams Systems runs its own back office on exactly this pattern. ISS Terminal, a free browser-based Linux environment with 55+ commands and a guided scripting curriculum, is built on this same command line depth.

Production floor experience across CNC machining and die cast manufacturing. Industrial electrical panels: fault diagnosis, component replacement, and design contribution. Sensor integration, control system architecture, and the gap between what hardware does and what software assumes it does. Microcontroller development in C. RAPID programming for ABB industrial robots at production scale. The trajectory: design and ship embedded systems and operational software that modernize factory infrastructure at scale.

Direct experience designing and deploying isolated, locked-down environments: internal certificate authority chains, CRL distribution, hardware-backed MFA, audit trail architecture, LUKS encryption, and GPG key management. This is the engineering background behind the Security Review & Hardening service (see Services S-09), and the reason the rest of the work is built the way it is.

Proprietary in-house production tooling for QR codes, branded link pages, and social asset kits, built and maintained internally rather than rented as a subscription. The QR encoder is written directly from the ISO/IEC 18004 specification rather than wrapped around a third-party library. Every code ships decode-verified against two independent scanners under nine simulated real-world conditions: blur, rotation, low light, heavy compression, and print sizes down to the physical minimum a phone camera can resolve. Every social asset ships sized to each platform's actual current published spec, not a guess, and every color pairing is contrast-checked before delivery. The tooling runs entirely offline: nothing a client hands over during production leaves the machine.