Work History

Promoted into the engineering seat in January 2026. The job shifted from keeping things running to building the systems IT runs on: an integration platform, an internal app sandbox, a private AI environment, and the VM estate behind the lab.

• In a two-person IT team I am the final escalation for every endpoint in the company: macOS, Windows, and Ubuntu, for a staff of engineers and researchers who need elevated permissions and unusual configurations. I also own onboarding and offboarding end to end: hardware selection and purchase, configuration, access control, and inventory.
• Own the virtualization layer: ESXi and Hyper-V hosts running lab and business workloads with strict uptime and connectivity requirements. That includes patch windows that don't interrupt experiments, capacity planning as the VM count grew, and the networking between VMs and lab equipment.
• Created the company's inventory and asset management system: IT hardware, lab equipment, and spares, tied to the people and locations that hold them.
• Designed and built the integration platform the IT team works from: one app that connects more than twenty services (identity, device management, ticketing, asset data, vendor portals) and shows them as a single pane of glass. Each connector is an API integration with its own permissions and audit trail.
• As coworkers started building their own small apps with AI assistance, the question became where those could safely run. I built an internal sandbox: isolated from production, authenticated with company identity, reviewable by IT, and simple enough that a non-engineer can deploy to it.
• Brought the Claude/Anthropic, OpenAI, and OpenRouter APIs into day-to-day IT tooling: summarization and triage helpers, agent-driven scripts, and a model-routing layer so a tool is not tied to one vendor.
• Set up a private AWS environment for AI work on sensitive code: repositories are cloned and updated inside a controlled instance, agents run there rather than on laptops, and nothing sensitive is pasted into a public chat window.
• Coordinated remote networking at prospective-customer sites in China so hardware evaluations could run with the connectivity, access, and support they needed from Denver.

Promoted in January 2025. The year was about integrations and identity: connecting the admin and IT systems to each other, automating what the help desk had been doing by hand, and getting the company's security frameworks written down and enforced.

• Designed and implemented integrations between the Admin and IT systems, with extensive API automation on Decisions and Power Platform: onboarding and offboarding flows, access requests, and the hand-offs between HR, IT, and the help desk.
• Owned Entra application management: app registrations, API access and permissions, and SSO integrations for the SaaS stack. Wrote the company's security frameworks and the enforcement behind them (conditional access, device compliance, least-privilege access).
• Wrote the custom Linux and macOS scripting that enrolls devices in RMM, MDM, and Defender, including Entra sign-in on Ubuntu, and administered Apple Business Manager and Iru MDM for the macOS fleet.
• Built purpose-specific Windows and Linux deployments for lab devices and test equipment: machines that need vendor software, odd drivers, or network isolation, and still have to meet the security baseline.

Hired in May 2024 to run the help desk for a growing company. The first year was support, device management, and getting the IT fundamentals (assets, enrollment, compliance) onto a system instead of a spreadsheet.

• Managed the day-to-day help desk infrastructure and user queries for the whole company, and designed and implemented the asset management and tracking system that the IT team still runs on.
• Administered Microsoft Entra and Intune for user onboarding and offboarding and device assignment, and wrote and maintained the configuration and compliance profiles for Intune devices.
• Deployed and monitored mobile device management and remote management software across the fleet, and handled Confluence and Jira user management and administration.

• Lead macOS technician on a large enterprise desk: Tier II/III support for onsite and remote users on a JAMF-managed fleet, with most of the work done in Terminal, Bash, and SSH rather than a GUI.
• The job required working knowledge of JAMF, Microsoft 365, and a long list of proprietary enterprise tools for imaging, inventory, and access, and I became the desk's reference for the macOS side of them.
• HP Certified Repair Technician and the desk's primary break/fix technician for HP hardware: triage, diagnosis, and repair of the backlog.

• Short-term engagement for the deployment and integration of new computers and hardware across 25 clinics that had just joined the organization through acquisition.
• Provided Tier II/III support for end users on-site and remotely on the newly deployed hardware, during and after each clinic's cutover.
• Daily exposure to Azure, a large Active Directory, Citrix, Cisco networking and telephony, Microsoft 365, and ServiceNow.

• Shift leader and closer at a Cherry Creek fine-dining restaurant: responsible for the floor each night, led pre-shift briefings, and ran the training program for new servers.
• The list ran past 200 bottles. Knowing it well enough to guide a table through it was the job, and it is where a lasting interest in wine comes from.

• Managed and scheduled a staff of 25 across the hotel restaurant and the banquet department: hiring, scheduling, service standards, and the daily running of both.
• Served as hotel Manager on Duty during shifts: the escalation point for every department and every guest problem on the property.
• Ordered dry goods and supplies, coordinated the wine and spirits vendors, and handled the property's digital guest relations through its review platform.