// OPERATOR AUTHENTICATED — PORTFOLIO INITIALIZED //
MATT KEITH
TECHNOLOGY SERVICES MANAGER  ·  SECURITY ENGINEER
PENETRATION TESTING DETECTION ENGINEERING AZURE / M365 FULL-STACK DEV HOME LAB OPS
VIEW PROJECTS GET IN TOUCH
▼   SCROLL   ▼
// 01
ABOUT
MK

I'm a Technology Services Manager at the North Carolina Association of County Commissioners — primary helpdesk resource, internal developer, and the person who built the security awareness infrastructure from scratch.

My work lives at the intersection of systems engineering, cybersecurity, and automation. I build tools that actually get used: production Azure portals with Entra ID auth, MITRE ATT&CK-mapped detection engines, secrets scanners, and raw-socket recon tooling.

Outside of work I run a Dell PowerEdge T430 / Proxmox home lab and am actively building toward a cybersecurity engineering career.

5+
YRS EXPERIENCE
35+
TOOLS SHIPPED
2
CERTS EARNED
TICKETS CLOSED
// 02
SKILLS & CERTS
CYBERSECURITY
  • Penetration Testing
  • Detection Engineering
  • Security Awareness Training
  • Phishing Simulation Design
  • Log Analysis & SIEM
  • Vulnerability Assessment
AAS — CYBERSECURITY · WAKE TECH

CERT — PENETRATION TESTING

CERT — PYTHON
CLOUD & INFRASTRUCTURE
  • Microsoft Azure
  • Microsoft 365 / SharePoint
  • Power Apps / Power Automate
  • Entra ID / SSO / OAuth
  • Azure App Service
  • Barracuda Email Security
DEVELOPMENT
  • Python / FastAPI
  • HTML / CSS / JavaScript
  • SQLite / REST APIs
  • GitHub Actions CI/CD
  • APScheduler / Webhooks
  • pytest / ruff
HOME LAB & SYSTEMS
  • Proxmox VE
  • Linux (Ubuntu / Debian)
  • Windows Server
  • Pi-hole / Cloudflare Tunnel
  • Ollama (Local AI)
  • NSSM / Systemd Services
// 03
PROJECTS
EVTXPLORER
● LIVE
YAML-driven MITRE ATT&CK log analyzer — 21 rules, threshold detection, brute force/spray/Kerberoasting
PythonMITREYAML
⟶ GitHub
PORTCULLIS
● LIVE
Secrets scanner — entropy analysis, git history audit, AWS/JWT/PEM/env coverage. MITRE T1552
PythonEntropyGit
⟶ GitHub
NETRECON
● LIVE
Raw-socket recon CLI — TCP scanner, banner grab, DNS enum, WHOIS. No nmap wrappers.
PythonSocketsDNS
⟶ GitHub
BLACKSITE
● LIVE
Red/Blue war room, ransomware sim, OSINT terminal, CTF arena
JSCanvas
⟶ Launch
PHANTOM::RESPONSE
● LIVE
IR command center, NIST playbook, malware sandbox, MITRE mapping
JSCanvas
⟶ Launch
NEXUS::SENTINEL
● LIVE
Threat intel workstation — IP, hash, password, subnet tools
JSCanvas
⟶ Launch
PHISHCRAFT
◈ WIP
10 templates, Graph API mailer, campaign analytics, Entra integration
FastAPIGraph APIAzure
VOIDTERM CTF TOOLKIT
● LIVE
Base64/Hex/ROT13, hash cracking, JWT inspector, cipher tools
PythonFastAPIJS
NCACC COUNTY CONNECT
● PROD
Production CRM — Entra ID SSO, county map, Teams digest, Mailchimp sync
FastAPIAzureSQLite
FLOWSTATE
● LIVE
Visual automation workflow builder — 16 nodes, conditional logic, 4 exports
JSCanvas
⟶ Launch
NETFORGE
● LIVE
Network topology mapper — 20 devices, VLANs, 4 exports
JSCanvas
⟶ Launch
CLOUDCRAFT
● LIVE
Azure architecture planner — 21 resources, cost estimation, Terraform export
JSCanvas
⟶ Launch
RUNBOOK
● LIVE
IT runbook builder — checklists, code blocks, 6 templates
JSlocalStorage
⟶ Launch
PASSIVE RECON TOOLKIT
● LIVE
WHOIS/RDAP, DNS enumeration, CT subdomains, headers
JSRDAPDoH
⟶ Launch
IP INTELLIGENCE LOOKUP
● LIVE
GeoIP, ASN, reverse DNS, BGP, risk scoring, DNSBL
JSipapiBGPView
⟶ Launch
CVE EXPLORER
● LIVE
NVD API vulnerability lookup — CVSS gauges, severity filters
JSNVD API
⟶ Launch
LIVE THREAT FEED
◈ WIP
AbuseIPDB dashboard — confidence tiers, country stats
JSNetlifyAbuseIPDB
RETROWAVE THREAT MAP
◈ WIP
3D globe with live attack arcs via Three.js
Three.jsWebGLNetlify
NEONCAST
● LIVE
Broadcast control — SSE overlays, Stream Deck, OBS
FastAPISSEOBS
JARVIS SITUATION MONITOR
● LIVE
Real-time events dashboard — RSS, voting, CF Tunnel
FastAPIRSSSSE
SYNTHWAVE RESUME TERMINAL
● LIVE
Interactive retro terminal resume — boot sequence, 15+ Easter eggs
JSCanvas
⟶ Launch
SYNTHSTRIKE
● SHIPPED
Guitar Hero-style rhythm game — procedural synthwave chiptune
CanvasWeb Audio
CONTROLLER OFFICE
● LIVE
Windows productivity via Scuf controller — radial menu, Ollama AI
PythonOllama
SQUAD::STATS
● LIVE
3-player Fortnite stats dashboard — real Ch7 S2 data, trend charts
JSCanvas
⟶ Launch
LOOT::ROULETTE
● LIVE
Loadout randomizer — 5 maps, BR/Reload loot pools, squad roles
JSCanvas
⟶ Launch
DROP::ZONE
● LIVE
Squad drop planner — 5 real maps, POI ratings, custom markers
JSCanvas
⟶ Launch
TRASH::TALK
● LIVE
AI squad roast generator — Claude-powered stat-specific burns and awards
JSAnthropic API
⟶ Launch
BOUNTY::BOARD
● LIVE
Squad challenge tracker — post bounties, claim completions, leaderboard
JSHTML5
⟶ Launch
CLUTCH::REPLAY
● LIVE
Match storyteller — animated timeline, kill feed, hype commentary
JSCanvas
⟶ Launch
GLITCH::TYPE
● LIVE
Cyberpunk text effects — 7 animated modes, PNG export
JSCanvas
⟶ Launch
VIBE::CHECK
● LIVE
Ambient mood visualizer — 6 particle presets, click-to-burst
JSCanvas
⟶ Launch
FNLOG
● LIVE
Fortnite session tracker — CLI + vaporwave dashboard, K/D trends
FastAPIFortnite API
// 04
EXPERIENCE
2025 — PRESENT
Technology Services Manager
NC ASSOCIATION OF COUNTY COMMISSIONERS · RALEIGH, NC

Primary helpdesk resource and internal developer for a statewide government association. Built and maintain multiple internal platforms on Azure. Architected a security awareness program including a custom phishing simulation platform, Barracuda email security policies, and staff training materials. Manage M365, SharePoint, Power Apps, and Azure infrastructure.

AzureM365PythonFastAPISecurity Awareness
PRIOR ROLE
Customer Success Manager
MSP / MANAGED SERVICES

Client-facing technical account management for SMB and mid-market customers. Transitioned into engineering and infrastructure work during tenure, accelerating the pivot to a full technical career path.

Client MgmtIT SupportMSP
AUGUST 2025
AAS — Cybersecurity
WAKE TECHNICAL COMMUNITY COLLEGE

Associate of Applied Science in Cybersecurity alongside a Penetration Testing certificate program. Foundations in ethical hacking, network security, vulnerability assessment, and security operations. Additional Python certification.

Ethical HackingNetwork SecurityPen TestingPython
// 05
CONTACT

Open to cybersecurity engineering, detection engineering, and senior technical roles. Always down to talk home lab setups, tooling, or weird side projects.

// TRY THE KONAMI CODE //

MK:// NEXUS TERMINAL · v2.5
operator@nexus:~/portfolio $
// SYNTHSTRIKE MINI //