Casey Cresswell

CISSP-certified Cyber Security Engineer — Privileged Access Management, Zero Trust, and accreditation-ready architectures for federal and defense CIS.

casey@cresswell.io LinkedIn

Projects

Agent Source Code

GitOps agents that run on AWS Bedrock and answer slash commands in GitHub. A comment like /hirobot on an issue or pull request sends a webhook through API Gateway to a Python Lambda. The Lambda asks a Bedrock model and posts the answer back as a comment.

The Lambda’s IAM role is scoped to a single Bedrock model and to its own secrets and logs. A GitHub Actions workflow can deploy it through OIDC, so no AWS keys are stored in GitHub. The first agent, hirobot, proved the full loop and has since been retired.

  • Python
  • AWS Lambda
  • API Gateway
  • AWS Bedrock (Nova Micro)
  • Secrets Manager
  • IAM
  • GitHub webhooks
  • GitHub Actions (OIDC)

View the source on GitHub →

Agent Target Project

The repo the agents work in. Slash commands go in its issues and the agent replies there, so issue #1 shows the round trip. It will also hold the schemas, policies and code for the agents to analyze.

View the repo on GitHub →

Overview

CISSP (ISC²), 2025

I work on privileged identity and zero trust. My personal projects are in agentic security.

I’ve built compliance frameworks on NIST for FISMA systems and aligned them with COSO.

Key Technologies

Focus Areas