Ethan Troy
Available for: open-sourcecollaborationspeaking

About Me

Builder at the intersection of security engineering, compliance automation, and AI. I work on tooling that makes GRC less painful — from MCP servers for FedRAMP documentation to Claude-powered compliance agents.

Currently focused on bringing software engineering practices to GRC: policy as code, continuous compliance, and AI-assisted assessments. I believe the future of GRC is programmable.

Experience Highlights

  • Building open-source GRC tooling and curated resource collections
  • Developing AI agents for compliance workflows using Claude Agent SDK
  • Creating MCP servers for compliance documentation and OSCAL packages
  • Research and development at hackIDLE

Get in Touch

Happy to chat about GRC automation, compliance engineering, AI agents for security, or anything at the intersection of code and compliance.

Specializations

Compliance AutomationCloud SecuritySecurity ArchitectureOffensive Security

Languages & Tools

GoRustPythonBashTerraform

Frameworks

FedRAMPNIST 800-53NIST CSFSOC 2CMMC

Certifications

CISSPCISAOSCPSecurity+CCSKCEHAWS Solutions Architect AssociateCRTOCRTLPNPTCRTPISO 27001 Lead AuditorISO 42001 Lead AuditorGCP Cloud Security EngineerKCNA

Projects

fedramp-docs-mcp

MCP server for FedRAMP documentation

claude-grc-agent-demo

Domain-specific GRC agent built with the Claude Agent SDK

nmap-GPT

AI-powered Nmap scanner that provides security insights on open ports

DamnVulnerableTrustCenter

Intentionally vulnerable trust center for security awareness

hackidle-nist-coder

Fine-tuned model for NIST security and compliance coding tasks

Open Source Security & Compliance

Curated Hugging Face collection of open-source security and compliance models