For recruiters & hiring teams
I work across platform automation, infrastructure, security, networking, and AI-assisted development, with 20+ years of hands-on software, networking, systems, and security experience. Most recently I spent 21 months as a Wireless Engineer III on the AAA/RADIUS authentication platform behind a national carrier's WiFi offload service.
Senior to principal individual-contributor roles with architectural ownership
Denver metro, Colorado · Employment and independent project work
What I can do for your team
Every statement below links to the delivered work that backs it. Nothing here is aspirational.
I turn hand-run deployment procedures into tested, versioned collections with dry-run reports, verification, and rollback paths, and build configuration tooling that keeps environment selection explicit.
Evidence Charter Communications (Spectrum)
Verified backups, rehearsed restores, topology and upgrade planning, and performance work measured against compatibility constraints—including a development UDF benchmark reduced from 12.47 ms to 0.70 ms.
Evidence Charter Communications (Spectrum) Operational Tooling & Agent Skills
When the specification is missing I derive it from logs and packet captures, establish a parity baseline, and rebuild against it with replay tooling so the rewrite can be proven, not argued.
Evidence Charter Communications (Spectrum)
Web and CLI platforms, mobile automation, gRPC contracts, and fleet-scale executors that replace repeated manual passes with repeatable evidence.
Evidence Charter Communications (Spectrum)
Endpoint controls, audit-event forwarding, hardening, service identities, and native SSO with group-driven provisioning and tested allow/deny behavior.
Evidence Charter Communications (Spectrum) Identity Platform Engineering
Founder-grade network engineering: multi-frequency wireless plant, captive-portal AAA, TR-069 fleet provisioning, hardened core routers, and identity-gated ingress for everything behind them.
Evidence Duvall WiFi Wilderness Awareness School Private Cloud & Homelab Platform Engineering Charter Communications (Spectrum)
Lead-generation platforms, identity providers, protocol servers, integrations against third-party APIs, and static-site pipelines, each with tests and a delivery path.
Evidence Pacific Northwest Plumbing Game Platform, Identity & Reverse Engineering Website Factory & Edge Delivery Additional Engineering Projects
A deployed engineering chat assistant with separate read-only tool gateways and caller/tier isolation, plus constrained MCP APIs, explicit change controls, and evidence tools challenged with negative tests.
Evidence Charter Communications (Spectrum) AI Integration & Security Engineering Multi-Agent Engineering System Design Operational Tooling & Agent Skills
I trace incidents across application, database, storage, and infrastructure boundaries, verify service recovery, and keep unfinished prevention work visible.
Evidence Private Cloud & Homelab Platform Engineering Charter Communications (Spectrum)
Customer discovery, architecture, delivery, field installation, support, billing, and growth analytics, with measured outcomes such as a customer-acquisition cost cut from roughly $150 to $5.10.
Evidence Duvall WiFi Pacific Northwest Plumbing
Certified installation guides, onboarding suites for undocumented languages, mentoring, IDE tooling, and a curated engineering knowledge base published behind a per-note gate.
Evidence Charter Communications (Spectrum)
Find the relevant experience
Share a focused résumé with your hiring team, or print a copy for review.
Infrastructure automation, database operations, release engineering, and reliable developer environments.
View focused résumé →Security controls, identity integration, remediation, and reviewable automation across platform and independent engineering.
View focused résumé →Subscriber authentication, RADIUS accounting, wireless infrastructure, and repeatable protocol validation.
View focused résumé →Production applications, typed libraries, protocol integrations, and automation that removes repetitive engineering work.
View focused résumé →Useful AI integrations built around constrained tools, explicit authorization, testing, and maintained engineering knowledge.
View focused résumé →Making separate systems, devices and vendors work as one: service contracts, identity federation, message transport, and device protocols implemented against the real specification.
View focused résumé →Proving a change is safe before it ships: automated test platforms, regression suites, reproducible build and release pipelines, and evidence that the tests actually ran.
View focused résumé →Headline numbers
Selected evidence from the completed Charter engagement. Output counts reflect an early-August 2026 snapshot of the project tracker, GitLab, git history, and internal wiki; later work is described in the experience record.
Nov 2024 – Aug 2026, start to end of the engagement.
Deployment automation, Cassandra, AAA policy, security remediation, and the lab supply chain.
Shipped and verified across those 5 areas.
Across 31 repositories; sole author in 21 of them.
Replacing hand-run runbook deployment. Sole commit author on all 6.
Shipped across those 6 collections.
Selected evidence
One concrete result per focus, each from a different role or project. The full record is on the experience page.
Platform & infrastructure
Charter Communications (Spectrum) · Nov 2024 – Aug 2026
Designed deployment-time configuration and secrets tooling that separates reusable policy artifacts from environment values and versioned encrypted secrets; released the deployment component with environment validation, provenance tracking, and compatibility checks while broader rollout remained in progress.
Read the experience →Security & identity
Independent project · 2026
Deployed an Authentik identity platform using Ansible, Docker Compose, declarative Blueprints, and Terraform-managed Cloudflare Access, with OIDC group claims for application authorization.
Read the experience →Network & telecom
Duvall WiFi · Aug 2022 – Nov 2024
Built a redundant multi-frequency wireless network capable of serving 160 homes with symmetric gigabit, backed by custom captive-portal and RADIUS software plus virtualized infrastructure, PKI, segmentation, monitoring, VPN connectivity, PBX/CRM integrations, and production Laravel and Spring applications.
Read the experience →Software & test platforms
Independent project · 2026
Built a Cloudflare Worker MCP gateway with OAuth 2.1 and per-client capability tokens, authenticated origin access, and a constrained API to a private CRM.
Read the experience →AI & workflow automation
Independent project · 2026
Built a broker issuing short-lived, single-use Tailscale enrollment keys while keeping privileged OAuth credentials off rented hardware, with independent JWT validation for administrative access.
Read the experience →Integration & interoperability
Independent project · 2026
Integrated a performer's Astro booking site with their hosted CRM: build-time fetch of upcoming shows with a default-deny public filter, a small proxy that creates contacts and events through the authenticated API after live testing disproved the assumed public form endpoint, UTM lead-attribution passthrough, and a testimonials feed, verified end to end in production.
Read the experience →Test & release engineering
Independent project · 2015 – 2018
Operated a software-company-grade toolchain for a two-person project: self-hosted Bitbucket Server, Jira smart commits, Bamboo CI/CD, private Nexus artifacts, Confluence, chat-ops, RabbitMQ, DNS service discovery, and shared Maven parent POMs.
Read the experience →