IT Manager · Systems Architect · CISSP · 25+ years

I run identity, endpoints, and security — and I still do the hands-on work.

I manage IT for an organization and I am the person who gets called when something breaks. My week splits between governance and the terminal: audit evidence and access reviews on one side, directory changes, firewall rules, and scripts that remove manual tickets on the other. Twenty-five years in, that split is deliberate.

See the case studies Contact me

What I do

Four areas I own

Day-to-day scope, named by the systems involved.

Identity and endpoint

Microsoft 365 and Entra ID — Conditional Access, RBAC, MFA — with Intune and MDM across Windows, macOS, Android, and iOS. I also run Azure Virtual Desktop and Windows 365.

Security and compliance

SOC 2 and HIPAA evidence, access reviews, and sign-in investigations when an account takes a credential-stuffing hit, using OPNsense, WatchGuard, and Arista firewalls, Wazuh as the SIEM, and Cloudflare Zero Trust. I have written and executed incident response and DR plans, including restoring operations after a physical disruption.

Cloud and automation

AWS — EC2, S3, RDS, CloudFront, Route 53, IAM, CloudWatch — plus Python, PowerShell, and the Graph API, with Zendesk and Dialpad in the loop. Most of it goes into onboarding, offboarding, and license reclamation, with approval gates so nothing runs unattended that shouldn't.

Data engineering and local AI

Python ETL that turns public datasets — regulatory standards, DOT hazmat, FDA medical device, engineering materials specs — into structured, static, search-optimized sites. Locally I run multi-agent setups with OpenClaw and Ollama to query ticket corpora and prototype scripts, with a human checking every output.

Case studies

Four systems I built

Described by architecture, not by client or domain.

Regulatory and compliance data directory engine

Problem
Public regulatory datasets (hazmat shipping records, FDA device clearances, standards) each arrive in their own format and are slow to search.
Built
Python ETL that normalizes every source into one typed schema, then generates static pages with structured data.
Constraint
No runtime database; the whole thing ships as static files.

Engineering materials specification pipeline

Problem
Material property sheets arrive as PDFs and spreadsheet exports with no shared format.
Built
An extraction pipeline that pulls specs into a single schema and renders comparative tables.
Constraint
Numbers must be exact; the parser rejects any value it can't validate instead of guessing.

Threat intelligence ingestion feed

Problem
Vulnerability feeds publish in different formats on different schedules.
Built
A scheduled pipeline that collects, normalizes, and de-duplicates them into one stream for downstream use.
Constraint
Unattended; it runs on a timer with no manual step.

Private telemetry and monitoring pipeline

Problem
I wanted one view of operational metrics across several systems without exposing them publicly.
Built
Python and boto3 pipelines that run on a schedule, write to CloudWatch, and surface behind Cloudflare Zero Trust.
Constraint
Access requires an authenticated identity; nothing is public by default.

Credentials

Certifications and education

Ten active certifications, two lapsed, two degrees.

Security
(ISC)² CISSP
CompTIA
Security+ · Network+ · Linux+ · Server+ · A+
Microsoft
Microsoft Certified Professional (MCP)
Service and delivery
ITIL 4 Foundation · PMI CAPM · Professional Scrum Master I (PSM I)
Lapsed
AWS Certified Solutions Architect – Associate · AWS Cloud Practitioner
Education
MS, Information Technology Management — Western Governors University. BS, Information Technology — Western Governors University.

Experience

Twenty-five years, most recent first

  1. IT Manager and Systems Architect current

    I own identity and endpoint operations, security and compliance work, and the automation behind them. Data-engineering and local-AI projects run alongside.

  2. Head of IT

    Ran hybrid Linux and Windows infrastructure — Active Directory, GPO, and DNS/BIND — along with the technology behind a global call center.

  3. Network and ISP engineering

    Cisco routing and switching, T1 circuits and colocation, and early SIP-based VoIP deployments.

  4. Systems and network engineering earliest

    Servers, networking, and virtualization. This is where the 25+ years start and the groundwork for everything above.

Contact

Get in touch

Open to IT leadership roles and consulting engagements.

LinkedIn or email both reach me; I reply to both.

LinkedIn [email protected]