Engineering portfolio · Organized for depth
The work.
Choose the depth.
Start with a compact directory. Open a brief when a system is relevant, or go deeper into a flagship journey for the architecture, decisions, evidence, and operating story.
Actual work, public-safe evidenceVisuals use the actual running interface whenever it can be shown safely. Where a private enterprise surface cannot be published, the treatment is clearly labeled as a faithful public-safe reconstruction of the real behavior—never a fabricated substitute dashboard.
Project library
One directory.
Clear categories.
Flagship Systems
The clearest through-lines across endpoint engineering, enterprise AI, and independently operated product architecture.
- 01Flagship case study
Enterprise Endpoint Engineering Platform
I turned Tanium, Intune, Jamf Pro, and ConfigMgr into one endpoint reliability practice: observe fleet health, collect evidence, choose the channel that can still act, remediate safely, and verify recovery before closing the loop.
- 02Flagship case study
Governed Employee-Support Agent
As primary architect and developer, I built a governed employee-support challenger and the regression, evaluation, automation, source, and release infrastructure needed to engineer it seriously. A structured leadership evaluation selected it after comparison with a longer-running Microsoft-supported incumbent.
- 03Flagship case study
AEGIS Autonomous SIEM and Monitoring
I designed and built AEGIS, growing it from centralized logs into a custom SIEM and autonomous infrastructure-monitoring system: service health, custom pollers, event ingestion, deterministic triage, local-agent analysis, delivery through PULSE, and human-controlled automated remediation through ntfy.
Enterprise Engineering
Platforms and architectures that change how endpoint operations, employee service, identity lifecycle, and governed automation work across the business.
- 01Actual product · Motion walkthrough
MEDUSA Orchestration Platform
A shared enterprise control plane that turns typed actions into policy-aware workflows, holds consequential steps at human gates, executes through constrained handlers, and preserves a correlated history of what ran and why.
- 02Actual product · Motion walkthrough
PowerShell Operations Portal
A governed operations broker that turns a broad PowerShell capability library into searchable, typed, tier-aware support and identity actions—with ticket context, WhatIf validation, human gates, rate limits, recovery behavior, and correlated audit evidence.
- 03Project brief
Discovery and CMDB Reconciliation
Differential reconciliation, automatic classification, protected ownership, distributed scanning, and operational controls that keep infrastructure context usable as source systems change.
- 04Project brief
Endpoint Evidence and Recovery Tooling
Cross-platform collection, connectivity diagnostics, secure-state evidence, driver recovery, and guarded remote-support paths.
- 05Featured architecture brief
Identity Lifecycle and Service Automation
A governed automation architecture that modernizes onboarding and offboarding through tested PowerShell, Microsoft Graph, certificate-based authentication, recovery tooling, and an auditable ServiceNow, Tanium, and Jamf Pro device-offboarding operating model.
- 06Project brief
Agent Evaluation and Benchmark Tooling
Test-set lifecycle, rubric-based grading, headless execution, response evidence, and comparison methods for enterprise agents.
Local Operations Ecosystem
Connected systems built to operate the lab: discovery, evidence, delivery, access, automation, observability, and resilient service exposure.
- 01Actual product · Motion walkthrough
NEXUS Command Center
A searchable mission-control surface for applications, hosts, service health, and recent operational activity, backed by the same catalog that drives AEGIS health.
- 02Actual product · Motion walkthrough
PULSE Notification Command
A unified notification control plane for composing, scheduling, templating, routing, and tracking multi-channel delivery—so applications do not each reinvent alerting or lose the evidence that a message arrived.
- 03Actual product · Motion walkthrough
INTAKE Evidence Receiver
A resilient evidence platform that receives endpoint artifacts, verifies them while streaming, correlates them by host and campaign, detects duplicates, manages retention, and makes the result usable for investigation and controlled follow-on action.
- 04Actual product · Motion walkthrough
Ansible Fleet Automation
A custom command center over an idempotent Ansible fleet practice for querying scope, inspecting playbooks, reviewing compliance, and operating configuration, deployment, diagnostics, backup, LXC, and application lifecycles.
- 05Architecture brief · No custom management UI
Caddy High-Availability Edge
A redundant internal edge with automated certificate handling, service routing, health-aware failover, configuration validation, and synchronized recovery paths.
- 06Project brief
HORIZON Authenticated Execution
Isolated and observable browser-origin operations for systems where the owner's existing session is the only safe authentication surface.
- 07Actual report artifact · Sanitized real round
Local-Agent and Nightwatch Runtime
A workload-aware local inference and agent runtime with bounded delegation, evidence-grounded memory, deterministic remediation gates, and unattended infrastructure rounds.
Personal Products and Experiments
Products where the full lifecycle can be explored directly—from a human need to the interface, data model, deployment, and daily operation.
- 01Actual archived product · Privacy-safe capture
SENTINEL Recognition and Presence
An archived local-AI system that turned discrete camera observations into reviewable identity decisions and room-level last-seen state. Visual description stayed separate from deterministic identity matching; low-confidence or unknown observations remained human-review evidence instead of trusted presence. The camera pipeline was retired in August 2026, and its work-activity subsystem evolved into CHRONOS.
- 02Actual product · Motion walkthrough
CHRONOS Activity Intelligence
A verifiable activity-evidence platform with resilient collection, local spooling, human-versus-agent classification, and reviewable time narratives.
- 03Actual product · Motion walkthrough
TALLY Household Accountability
A household planning and accountability product with recurring work, commitments, fair credit, member-specific experiences, notifications, and an operational history.
- 04Actual product · Motion walkthrough
Work Calendar Bridge
Keeps a work calendar usable in a separate planning calendar without relying on the destination provider’s slow subscribed-calendar polling. The bridge reads an Outlook-published ICS feed, applies field and attendee policy, previews creates, updates, and removals, writes normal events to a dedicated Google Calendar, and retains source-to-destination mapping, freshness, repair, and change evidence.
- 05Working relay prototype · Public-safe interaction
BREEZE Voice Bridge
A prototype relay for carrying a completed Claude Code terminal turn to a mobile voice interaction: buffer the actual turn, notify only while armed, speak a concise summary, capture a visible reply transcript, and return that text to the selected tmux session. The terminal agent—not the voice client—retains execution authority.
- 06Derivative product contribution · Interactive product simulation
WisprDuck Audio Control
A focused macOS systems contribution that ducks selected music, browser, or media-player audio while a chosen desktop AI app is audibly speaking, holds through short pauses, and restores smoothly. The implementation adds a local output-audio trigger to the Apache-2.0 WisprDuck project using measurement-only Core Audio process taps; the verified default is the ChatGPT desktop app output, not a generic claim about every ChatGPT mode.
- 07Actual product · Public-safe recorded workflow
WAND Mobile Agent Workbench
A private, mobile-first control surface for real Codex and Claude CLI sessions: stream changed tmux pane output, compose and stage prompts or attachments, switch and resume native sessions, manage side lanes, and keep long-running work usable from a Fold-class phone. This public-safe recording uses the real WAND interface and a synthetic workspace while withholding private transcripts, profiles, usage data, paths, history, and control endpoints.
- 08Actual product · Motion walkthrough
Reno's Day Calendar Kiosk
A resilient remote household calendar experience that combines a purpose-built display, kiosk supervision, and a supported external access path.
- 09Visual essay
Private Engineering Lab
A production-like environment for virtualization, networking, storage, monitoring, backup, recovery, local AI, and agent orchestration.
Looking for the through-line?