01 — 16 projects · 2015–2026
Work
Selected projects from two decades of enterprise architecture — identity, PKI, cloud migrations, and the platforms that hold it all together.
PRJ · 2026
Ad hoc CMDB queries to Governed console
EA Console: A Governed Workbench for the CMDB
A self-hosted console and MCP server for querying and safely updating a ServiceNow CMDB, with a grounded local AI assistant.
- ServiceNow
- CMDB
- AI
PRJ · 2026
Spreadsheet dispositions to Ratified decisions
Application Portfolio Rationalization
A ServiceNow and CSDM practice that turns an application inventory into a portfolio you can actually make decisions about.
- APM
- ServiceNow
- CSDM
PRJ · 2024
Scattered EA docs to AI-maintained graph
AI-Maintained Architecture Second-Brain Repository
A governed, AI-maintained knowledge base for an EA practice: raw sources in, cross-linked wiki out, under a written contract.
- AI
- Claude
- Enterprise Architecture
PRJ · 2023
WS2012 to WS2022
Key Management Services Upgrade
Moved a client's KMS activation host off end-of-support Windows Server 2012 onto 2022, right after the PKI upgrade.
- KMS
- PKI
- Volume License
PRJ · 2023
Citrix VDI to AVD
Migration of Citrix to Azure Virtual Desktop
Led the move of a client's Citrix estate out of a third-party datacenter and into Azure, then supported it after go-live.
- VDI
- Azure
- Citrix
PRJ · 2023
CA 2012 to CA 2022
Windows 2012 PKI Upgrade to 2022
Migrated an offline root CA and two intermediates from Windows Server 2012 to 2022, keeping every CA's name and key.
- PKI
- Security
PRJ · 2022
Creative Social NFT Marketplace
A now-closed NFT marketplace for creators' art, music and digital assets, built so buyers never had to understand wallets.
- Crypto
- NFT
- Marketplace
PRJ · 2022
NFT Challenge
A demo NFT drop built for Creative Social: a Web3 decentralized application on Next.js.
- NFT
- Web3
- Smart Contracts
PRJ · 2022
In-house IAM to B2C + Okta
Refactoring of Legacy Access Management Solution
Replaced homegrown access management with Azure AD B2C and Okta: 22% lower overhead, $250k a year off cyber insurance.
- IAM
- Access
PRJ · 2020
On-prem DC to Azure + M365
Digital Transformation Journey to The Cloud
Led a healthcare organization from a legacy on-prem datacenter to Azure and Microsoft 365, within strict regulation.
- Cloud
- Digital Transformation
PRJ · 2020
Mashery to Azure APIM
Replaced Mashery With Azure API Management
Replaced a client's on-premises TIBCO Mashery API gateway with Azure API Management.
- API
- Azure
- APIM
PRJ · 2020
Organized Company Hackathon
Organized the company's first hackathon (70+ people, 10 teams); its pipeline put two ideas into revenue-generating production.
- Hackathon
- Innovation
PRJ · 2019
Cyber Security and Vulnerability Implementation
Built an access-certification governance process and a continuous vulnerability management program for a healthcare client.
- Security
- Vulnerability
PRJ · 2019
Smart Garage Hack
A Sonoff SV garage-door controller on Home Assistant, MQTT and Alexa: monitored as well as controlled. Design later sold.
- IoT
- Home Assistant
- Sonoff
PRJ · 2018
Azure Multi-Factor Authentication (MFA)
Introduced Office 365 and put multi-factor authentication in front of it, as part of a wider push to protect business data.
- MFA
- Security
- Azure
PRJ · 2015
Integrated Alexa Voice Assistant in ServiceNow
Connected Amazon Alexa to ServiceNow so people could ask about their application portfolio or a ticket's status by voice.
- Voice
- Alexa
- AWS