Profile
- IT Solutions Architect with 20+ years spanning MSP service delivery, infrastructure operations, small-business leadership, and U.S. Army service.
- Designs and delivers Zero Trust, hybrid identity, endpoint defense, network security, backup, and Microsoft 365 improvements for small and midsized organizations.
- Blue Team practitioner experienced in security monitoring, alert triage, investigation, endpoint containment, remediation, and post-incident response.
Technical Skills
Cybersecurity and Blue Team
- security monitoring
- detection and investigation
- incident classification
- endpoint containment
- eradication and remediation
- recovery coordination
- post-incident review
- vulnerability management
- incident-response playbooks
Identity and Zero Trust
- Microsoft Entra ID
- Azure AD Connect
- Conditional Access
- identity protection
- hybrid identity
- Microsoft 365
- Active Directory
Endpoint and network defense
- Datto EDR
- Microsoft Intune
- endpoint hardening
- patch automation
- secure imaging
- SD-WAN
- VPN
- VLAN segmentation
- DNS filtering
- firewall hardening
- traffic forwarding
Infrastructure and MSP delivery
- Windows Server
- VMware ESXi
- Hyper-V
- Proxmox VE
- Linux
- Docker
- backup and disaster recovery
- monitoring and alerting
- Autotask PSA
- IT Glue
- Datto RMM
- ticket triage and escalation
- SLA management
- vendor escalation
- technician mentoring
AI engineering
- local model inference
- edge AI deployment
- Ollama
- multi-provider model APIs
- AI agents
- Model Context Protocol (MCP) server development
- workflow automation
- prompt and context design
Automation and web
- PowerShell
- Bash
- REST APIs
- JSON/YAML
- Git
- GitHub Actions
- CI/CD workflows
- HTML
- CSS
- JavaScript
- Cloudflare
Professional Experience
IT Solutions Architect
Collett Systems LLC · West Bend, WI
Jul 2021 – Present
- Lead infrastructure and cybersecurity delivery across Microsoft 365, Windows Server, hybrid identity, endpoint defense, networking, and backup for several hundred users across multiple clients and sites.
- Modernize legacy Active Directory into synchronized Entra ID / Azure AD hybrid identity and implement Zero Trust architecture with Conditional Access and identity-protection strategies.
- Lead Datto EDR deployments and develop automated incident-response and remediation playbooks to improve threat containment and response consistency.
- Triage security alerts, investigate suspicious activity, contain affected endpoints, coordinate remediation, and document recovery actions and lessons learned.
- Administer Microsoft Intune endpoint management, including hardening, patch automation, secure imaging, and remediation.
- Design and implement SD-WAN, VPN, VLAN segmentation, DNS filtering, firewall, and wired and wireless multi-site network improvements.
- Deploy Microsoft Global Secure Access (Entra Private Access and traffic forwarding) for policy-based remote access and inspection, alongside Tailscale and ZeroTier overlays.
- Build operational runbooks, knowledge bases, and measurable SOPs for onboarding, training, and audit readiness; administer Autotask PSA workflows and IT Glue standards to improve escalation context and knowledge reuse.
- Automate repetitive operations with PowerShell, Bash, REST APIs, and JSON/YAML configuration.
- Deploy edge AI with locally hosted models, integrate multiple model providers through APIs, and build agent workflows and MCP servers that connect AI systems to operational tools and data.
- Develop and maintain content-driven websites with HTML, CSS, JavaScript, Git, GitHub Actions, and Cloudflare for automated, edge-hosted delivery.
Manager and Lead Technician
Dan Frank Upholstery Inc. · Oconomowoc, WI
2000 – Jul 2021, excluding active-duty service
- Directed daily operations, scheduling, customer work, vendor coordination, inventory, and quality control.
- Progressed from apprentice to upholsterer, lead technician, and manager; trained staff and kept work moving from intake through completion.
- Digitized work-order tracking and safeguarded customer specifications through disciplined process and information management.
Infantryman and Assistant Company Armorer
United States Army · Fort Carson, CO
Oct 2005 – Jul 2009
- Maintained 100 percent accountability for approximately $2 million in armory assets during redeployment and routine operations, keeping inventory and accountability records audit-ready.
- Supported mission planning, vehicle mobilization, and missions including Operation Murfreesboro.
- Completed 40 hours of Combat Lifesaver training and provided first-response support capability.
Education
Associate of Applied Science, Information Technology – Cybersecurity Specialist
Moraine Park Technical College · West Bend, WI
High Honors · May 2024
Focused on network defense and secure infrastructure design.
Certifications and Licenses
- Certified 5G LAN Specialist · Certified Wireless Network Professionals · Apr 2025
- Dropbox Certified Administrator · Dropbox · May 2025
- Amateur Radio Technician License · Federal Communications Commission · KD0FKE
- Certified ICT Protege GX Installer, Level 1 · Integrated Control Technology · 2023
Speaking
Cyphercon 9 · 2026
Netscape, Dial-Up, and Data Breaches: Browser Risk Then vs. Now
Military Recognition
Army Commendation Medal · Army Achievement Medal · Army Good Conduct Medal · Combat Infantryman Badge
Community Leadership
- Cub Scouts: Den Leader, Assistant Cubmaster, Committee Member, and Pinewood Derby Coordinator · 2023–present
- Memorial Go Carts: Team Glitch Owner and Marketing Committee Member · 2025–present