Brandon Donaly

Wireless Engineer III — AAA Development & Platform Automation · Charter Communications (Spectrum)

Nov 2024 – Aug 2026 · Previous role

• Built and deployed a TypeScript Webex assistant for engineering knowledge lookup, with access configured for 12 teammates, separate read-only tool gateways, and conversation isolation by caller and privilege tier; verified lookup and refusal behavior through live messaging.
• Built reusable AI-workflow tools for engineering evidence retrieval, outbound sanitization, and document consistency, with 193 passing assertions and negative tests; corrected repository-counting errors caused by duplicate counting of repository history and uninitialized submodules.
• Operationalized a 935-note engineering knowledge base as team documentation, publishing a curated 229-note subset behind an explicit per-note publication gate.
• Prototyped a per-engineer status ledger using two weeks of real work, identified conflicts in hand-maintained reporting, and designed a refreshable contribution model around existing Jira fields; recurring automation and broader adoption remained next steps. (prototype)
• Built and maintained a library of roughly 54 reusable AI agent skills across three engineering workspaces, codifying workflows for infrastructure operations, investigation and evidence gathering, security remediation, documentation, configuration management and telecom policy work, and authored an audit that reconciles all three workspace roots in a single run to flag duplicated skills, dead bundled-file references, one-sided skill boundaries, and colliding trigger phrases that would otherwise make agent dispatch nondeterministic.
• Removed a data-integrity footgun in backup naming by adding fail-fast validation and then autodiscovery.
• Rehearsed a high-risk multi-node topology change against an isolated replica before executing the live change successfully.
• Remediated tracked vulnerability findings to closure, introduced safer package-manager-native maintenance operations, and delivered a certified upgrade path for legacy Linux hosts.

Founder / Principal Engineer · Duvall WiFi

Aug 2022 – Nov 2024 · Previous role

Founded and ran a technology and ISP services company, owning customer discovery through implementation, operations, billing, and support.

Technology & Growth Consultant · Pacific Northwest Plumbing

Jun 2023 – Nov 2024 · Previous role

• Technology and growth consulting for a trades business. I brought customer acquisition cost down from roughly $150 to $5.10 and shifted 83.67% of inbound calls onto unpaid channels, working across the website, analytics, advertising, reviews, and conversion paths.

Network & Systems Consultant · Wilderness Awareness School

Nov 2022 – Nov 2024 · Previous role

• Designed, quoted, installed, and operated a resilient enterprise network across three forested properties using roughly 700 meters of aerial and buried cabling plus point-to-point wireless links. The design avoided the cost of an additional internet circuit and improved outage resilience.

Technical Consultant · Beyond Grey Skies, LLC

Mar 2016 – Jun 2021 · Earlier chapter

Provided enterprise network, server, and technical operations consulting.

AI Integration & Security Engineering · Independent project

2026 · Independent project

• Built a Cloudflare Worker MCP gateway with OAuth 2.1 and per-client capability tokens, authenticated origin access, and a constrained API to a private CRM.
• Implemented review-first ingestion controls, dry-run/commit binding, rate caps, auditing, and independent kill switches; live read access is verified and write execution remains disabled.
• Documented 198 passing service tests and drilled kill switches at the edge, reverse proxy, and application layers, with observed shutdown times of approximately 7, 10, and 19 seconds respectively.

Secure Compute & Network Automation · Independent project

2026 · Independent project

• Built a broker issuing short-lived, single-use Tailscale enrollment keys while keeping privileged OAuth credentials off rented hardware, with independent JWT validation for administrative access.
• Automated deterministic virtual-address allocation, constrained gateway routing, and cleanup of expired nodes; verified the full join, permitted-access, blocked-port, and teardown path using a disposable container.
• Validated the implementation with 34 unit tests and 20 gateway ruleset assertions, including fail-closed behavior when configuration is absent.

Multi-Agent Engineering System Design · Independent project

2026 · Independent project

• Designed and maintain a 13-agent engineering crew on a multi-agent harness, with a canonical YAML roster, agent definitions, architecture decision records, least-privilege command and tool scopes, must-allow/must-deny tests, deterministic policy gates, and resource-guard analysis.
• Reverse-engineered the harness's provider architecture across provider factories, backend capability sets, spawn paths, model mapping, environment injection, and tool delivery to design credible extension paths for additional model providers, including self-hosted inference. (analysis)
• Documented a governance limitation where global permissive settings could bypass agent-level command scopes, separating static scope validation from actual runtime enforcement rather than overstating isolation.