Build in Public
Documenting the build process — from zero to enterprise-grade IAM and GRC infrastructure. Real problems, real solutions, real compliance evidence.
Starting from a broken VirtualBox hypervisor conflict on RHEL 10, this is the full story of how the ReneeBuilds Identity & Compliance Platform came together — Keycloak, HashiCorp Vault, AWS SIEM, and AI-assisted GRC tooling mapped to 95+ compliance controls across PCI DSS, NIST 800-53, SOX, ISO 27001, and HIPAA.
The python-keycloak 7.x breaking changes, why you must separate the auth realm from the target realm, and every workaround that saved this project.
How to migrate a HashiCorp Vault deployment from hardcoded root tokens to scoped AppRole machine identity without breaking existing Ansible automation.
The methodology behind the compliance documentation in this portfolio — how to map a single technical control to multiple frameworks without double-counting or overstating coverage.
Implementing non-repudiation for rotation logs using Python's hashlib. What it proves, what it doesn't, and how auditors will interpret it under PCI DSS AU-9.
The non-linear career path, the transferable skills nobody talks about, and why compliance expertise from high-stakes asset management maps directly to GRC engineering.