Hi, I'm
Security & systems engineer focused on compliance tooling, container hardening, and secrets management. I build in Rust, Python, Go, and JavaScript.
Rust CLI for automated secret key rotation with pluggable provider support and vault integration. Handles credential lifecycle end-to-end.
DISA ASD STIG V6R4 compliance scanner — 8 automated check modules with SARIF & JUnit output.
Automated DISA API SRG V1R0.1 compliance scanner — 9 check modules with SARIF & JUnit reporting.
Scores any codebase across README, license, tests, CI, and security coverage. Instant health report for any repo.
Container image cosign automation — streamlines image signing and verification in CI/CD pipelines.
Interactive RACI matrix builder for mapping responsibilities across teams and tasks.
Automated security scanning pipeline for continuous vulnerability detection and reporting.
CI/CD pipeline image for deploying workloads to OpenShift clusters.
Hardened RHEL 8 base image with security configurations applied for production container workloads.
View all repositories
github.com/kelleyblackmore ↗
Wiring a Vite SPA to a real backend and Keycloak — using a backend-for-frontend so access tokens never touch browser JavaScript, plus the proxy trick that makes dev and prod behave identically.
A practical guide to the three building blocks of Claude-powered automation — skills for reusable prompts, agents for parallel work, and workflows for deterministic multi-step orchestration.
How to keep your Cargo dependency tree clean, audit it for known vulnerabilities, and generate a Software Bill of Materials you can actually use.
How to prompt and constrain an LLM agent so it outputs well-formed Jira stories — user role, goal, benefit, description, and tight acceptance criteria every time.
A practical guide to the three primitives that make an LLM agent actually useful: skills it can invoke, memory it can recall, and rules that keep it on track.
A practical guide to measuring LLM latency, throughput, quality, and cost — without getting fooled by leaderboard numbers.
How to structure mount paths, policies, and auth methods so that Vault scales cleanly across teams and environments.
A practical introduction to Rust — ownership, the borrow checker, cargo, and the patterns that make it click for systems work.
A complete guide to deploying and maintaining a static site on GitHub Pages — custom domains, Jekyll pitfalls, and keeping it fast.