Hello, Recruiter!

If you've reached this page, chances are you're looking to contact me about a position, possibly coming from my LinkedIn profile or my resume. Good! Let me help you and save us both some time:

I'm currently interested in opportunities where my work would have a direct impact in driving forward more than just one particular company.

Positions I'm interested in would offer an opportunity to set the security strategy and vision, guide the various teams through implementation, and carry forward the rest of the company. Think "Consigliere to the CISO".

I'm not a one-trick pony. I have an extensive background in System Administration and Operations, and despite being labelled an Information Security professional, my focus remains on the intersection of security and large scale operations. I need not report into the security organization and am comfortable within any engineering team.

I'm not willing to relocate, but I'm very experienced in working remotely having done so 100% for over ten years at different companies.

When contacting me, please include the name of the company you're recruiting for. Without this information, I will not reply to your mail. Ideally, you'd have the hiring manager reach out directly.

I'm looking for:

I'm looking for organizations that are privacy conscious and striving to contribute to the improvement of all people's lives. I'm sympathetic to non-profits, the public sector, academia, and research.

I'm sympathetic to non-profits, the public sector, academia, and research, interested large scale internet operations, and organizations with significant international impact which support and contribute to the internet community, and which support, encourage, and practice independent research without "monetization" concerns.

I am particularly not interested in organizations that are singularly profit driven, exclusively advertizing supported, or which utilize e.g., stack ranking. I favor mature organizations that value a healthy work-life balance; the start-up hustle is not for me.

Organizations with ties to military, tobacco, fossil fuels, or government intelligence are not a good fit for me.


Things I care about (in no particular order):

I don't care whether or not you have:

Companies/organizations I might find interesting:

Some examples of the places that I'm sympathetic to or might find interesting are listed below. If you are reaching out behalf of similar organizations, I will be happy to begin a dialog.


I hate interviewing. Seriously, it's an entirely un-enjoyable experience, often involving needlessly adversarial interactions. I have to be really excited about a job opportunity to engage in this process, and I'd prefer to keep it as quick and painless as possible.

You can find out a lot about me on the internet. I give talks on the work I do, I have a blog, and I teach graduate level university classes on System Administration and Unix Programming. Some of the code I've written is available on GitHub. With all that, I prefer interviews to be focused on strategic details and interpersonal aspects rather than skill assessment.

I do very much consider the interview process to offer me an opportunity to evaluate the company.

I don't mind:

I do not like (and consider as big honking warnings signs):

Salary Negotiations

Please do not press me for "salary requirements". We both know what the industry average is for senior and principal candidates with 20 years of experience, so you should be able to make me a fair offer. Please do include the salary range for any positions you'd like to engage me for.

If the organization you represent or the job you have previously matched me for aligns with the above, then please feel free to contact me. When doing so, tell me you've read this page.