Brandon Donaly

Wireless Engineer III — AAA Development & Platform Automation · Charter Communications (Spectrum)

Nov 2024 – Aug 2026 · Previous role

• Designed the shared cross-language contract layer (four gRPC services, eight RPC methods, 13 messages, and eight enums) consumed by Java and Python tools for session control, provisioning-cache operations, SIEM queries, and supplicant configuration.
• Built and deployed a TypeScript Webex assistant for engineering knowledge lookup, with access configured for 12 teammates, separate read-only tool gateways, and conversation isolation by caller and privilege tier; verified lookup and refusal behavior through live messaging.
• Automated directory-backed SSO across engineering tools using SAML, OIDC, and OAuth, including group-driven account provisioning and role mapping, tested allow/deny behavior, and preserved local recovery access.
• Piloted a Kubernetes operator deployment model for a carrier subscriber-authentication database tier and released a dedicated collection for it, with the pilot still open at the end of the evidence window. (in-progress)

Founder / Principal Engineer · Duvall WiFi

Aug 2022 – Nov 2024 · Previous role

• Built a communications single pane of glass integrating the VoIP PBX, CRM, missed calls, voicemail, text, and email, with call flows and customer pop-ups that cut spam and sped up resolution.
• Operated a GenieACS TR-069/CWMP platform managing 58 MikroTik and Yealink devices through 15 presets and 15 provisions, documented its tag-driven idempotent configuration state machine, and identified security, permissions, provisioning, and device-health defects through live read-only analysis.

Technology & Growth Consultant · Pacific Northwest Plumbing

Jun 2023 – Nov 2024 · Previous role

Delivered technology and growth consulting for a trades business across software, analytics, customer acquisition, and support.

Network & Systems Consultant · Wilderness Awareness School

Nov 2022 – Nov 2024 · Previous role

Delivered network and systems consulting for a multi-property school in challenging rural terrain.

Technical Consultant · Beyond Grey Skies, LLC

Mar 2016 – Jun 2021 · Earlier chapter

Provided enterprise network, server, and technical operations consulting.

Website Factory & Edge Delivery · Independent project

2026 · Independent project

• Integrated a performer's Astro booking site with their hosted CRM: build-time fetch of upcoming shows with a default-deny public filter, a small proxy that creates contacts and events through the authenticated API after live testing disproved the assumed public form endpoint, UTM lead-attribution passthrough, and a testimonials feed, verified end to end in production.
• Built a caching Cloudflare Worker API for live photo galleries with a route allowlist, upstream and browser compatibility controls, edge caching, static-build isolation, and navigation-lifecycle handling, integrating third-party feeds without exposing a general-purpose proxy.

Device & Systems Integration · Independent project

2023 · Earlier project

• Bridged a USB serial tag scanner into a home-automation platform by implementing its MQTT discovery and scan contract directly instead of installing an add-on: a service that selects the device by USB descriptor, publishes its own discovery configuration on connect, republishes each scan as a structured event, and re-establishes the broker session before every publish, paired with udev rules that rebuild the container against the current device node whenever the scanner is plugged in or removed.
• Built a Home Assistant custom component for infrared device control that registers its own service and writes vendor control frames to a networked gateway over TCP, with a per-call device override so one integration drives more than one gateway.
• Prototyped a Java service that rendered CRM contacts as the vendor-native XML directory the deployed SIP handsets fetch, so the handset directory tracked the CRM instead of being maintained by hand, structured as a multi-module project separating the CRM client, the directory renderer, and the web tier. (prototype)

Game Platform, Identity & Reverse Engineering · Independent project

2015 – 2018 · Earlier project

• Extended a large open-source game-server base with roughly 18,000 to 35,000 lines of defensible original change across 127 new files, including Netty/TLS administration, AMQP integration, a 15-region grid content system, developer editors, and operational hooks, while preserving honest attribution of the base code.
• Built an original 23,000-line Java lobby and authentication tier for a three-tier game platform: Netty protocol handling, RSA/XTEA/ISAAC session flow, pluggable MySQL and REST authentication, typed failure mapping, world discovery and handoff, social systems, and RabbitMQ cross-service messaging.