Brandon Donaly

Wireless Engineer III — AAA Development & Platform Automation · Charter Communications (Spectrum)

Nov 2024 – Aug 2026 · Previous role

• Built an end-to-end AAA testing platform spanning a typed Python library, operator CLIs, Android and iOS Appium automation, Docker, and gRPC; it collapsed repeated manual SIEM queries into a single call across 120+ tests and saved an estimated 6–10 engineer-hours in one certification cycle.
• Automated 11 previously manual integration tests, reclaiming about 3.7 engineer-hours per full pass, and built a containerized pre-deployment policy validation gate across seven repositories, where policy bundles must boot in the AAA runtime and clear a 13-pattern fatal-error screen before publication.
• Defined and executed a roughly 30-case release regression suite spanning multiple EAP methods, mobile platforms, roaming scenarios, Passpoint, and negative cases.
• Produced the certification evidence package for a carrier AAA platform release, assembling roughly 90 attachments of policy logs, packet captures, encryption and decryption traces, protocol replay files and device captures across three months.
• Shipped PowerShell automation for reconfiguring wireless settings on Android test devices three weeks into the engagement, extracting profile selection, device serial handling and address validation into a reusable module across nine merged merge requests.
• Built the team's first collection release pipeline and test strategy, including 403 automated tests and 96 property-based tests in the earlier suite snapshot, parallel pytest execution, automatic versioning, artifact publication, and shared CI templates. Later deployment safeguards were challenged at 16 injected failure points and with 13 deliberate role mutations, checking preservation of a startable previous release.
• Built a systemd-enabled Docker test harness so role changes could be validated locally instead of consuming shared lab capacity.
• Root-caused recurring release blockers across build images, registry routing, and artifact authentication, then replaced repository-local workarounds with shared templates. Reconciled three policy-bundle packaging paths and added checks against overwriting vendor runtime files, resolving inconsistent branch and merge-request validation.

Founder / Principal Engineer · Duvall WiFi

Aug 2022 – Nov 2024 · Previous role

Founded and ran a technology and ISP services company, owning customer discovery through implementation, operations, billing, and support.

Technology & Growth Consultant · Pacific Northwest Plumbing

Jun 2023 – Nov 2024 · Previous role

Delivered technology and growth consulting for a trades business across software, analytics, customer acquisition, and support.

Network & Systems Consultant · Wilderness Awareness School

Nov 2022 – Nov 2024 · Previous role

Delivered network and systems consulting for a multi-property school in challenging rural terrain.

Technical Consultant · Beyond Grey Skies, LLC

Mar 2016 – Jun 2021 · Earlier chapter

Provided enterprise network, server, and technical operations consulting.

AI Integration & Security Engineering · Independent project

2026 · Independent project

• Documented 198 passing service tests and drilled kill switches at the edge, reverse proxy, and application layers, with observed shutdown times of approximately 7, 10, and 19 seconds respectively.

Secure Compute & Network Automation · Independent project

2026 · Independent project

• Validated the implementation with 34 unit tests and 20 gateway ruleset assertions, including fail-closed behavior when configuration is absent.

Game Platform, Identity & Reverse Engineering · Independent project

2015 – 2018 · Earlier project

• Operated a software-company-grade toolchain for a two-person project: self-hosted Bitbucket Server, Jira smart commits, Bamboo CI/CD, private Nexus artifacts, Confluence, chat-ops, RabbitMQ, DNS service discovery, and shared Maven parent POMs.
• Replaced hard-coded client hosts with DNS SRV service discovery and liveness probing, added environment-selectable launch modes and private-CA TLS, and built Maven shaded-JAR delivery through Bamboo CI and a CDN.