I run IT the way an engineer would: secure by default, automated, and measured.
25+ years running enterprise IT for finance, legal, media and SaaS organizations. I have led help desk, systems and development teams across four continents, standardized identity and access, moved whole estates to the cloud, and led the recovery from a ransomware attack with zero data loss. Today I build governed AI automation in production.
What I lead.
The parts of IT that everyone depends on and nobody should have to think about.
Identity and access
SSO and MFA across the estate on Okta, Entra ID, Google Workspace and Active Directory, and an SSO-protected HR self-service portal that provisions email and directory accounts automatically from joiner to leaver.
Endpoint and workplace
Microsoft 365 and Google Workspace, Intune and Jamf device management, and the help desk that keeps a remote workforce productive, with ITIL-aligned incident, problem and change management.
Cloud and resilience
Moved a full on-premises estate and an acquired company's large AWS environment into Microsoft Azure with a team working in Terraform. Redesigned backup and DR for 15-minute VM restores with cloud failover.
Security and compliance
Technical lead for three consecutive ISO 27001 audits. Kept hedge-fund environments SEC and SOX compliant across six global offices. Least privilege, encryption and audit evidence as everyday practice.
Incident response
When a newly acquired company was hit by ransomware the day the deal closed, I contained it, preserved clean data, rebuilt in Azure with zero data loss, coordinated FBI reporting and kept executives and customers informed.
AI-enabled operations
I build production AI agents, MCP servers and an LLM layer pinned to US-only providers with zero data retention, behind gated specifications and independent verification. In IT, that means automation that removes real toil.
From the server room to the AI stack.
A changelog of the work.
- Oct 2025 – nowFounding CTO → Board Director, stealth-stage data-privacy startup
Built the platform, its AWS infrastructure and security model: least privilege, row-level tenant isolation, encrypted secrets, zero government-ID retention, and 140+ releases through signed, gated CI/CD. Now serve on the Board of Directors.
- Jul 2023 – Sep 2025Independent consultant, AI and infrastructure
Modified Llama and other open-weight LLMs into products that generated millions of dollars in revenue for their parent companies.
- Nov 2020 – Jun 2023IT Manager, Xytech Systems
Reported to the CFO and led the development, server and help desk teams. Azure migration, remote workforce, SSO and MFA, three ISO 27001 audits, $400k+ a month in savings and a ransomware recovery with zero data loss.
- Jan 2015 – Nov 2020Senior Systems Engineer, Bernards
Led the IT function for 300+ users across multiple sites: roadmap, budget input and Tier 3 escalation. MPLS/BGP WAN, Citrix, VMware and a multi-stage Exchange migration.
- Sep 2007 – Dec 2014Senior Systems Engineer, Eze Castle Integration
24/7 operations for hedge funds including Evercore Partners, kept SEC and SOX compliant across Los Angeles, New York, London, Berlin, Shanghai and Tokyo.
- Nov 2009 – Dec 2010Senior Systems Administrator, Activision Blizzard
VMware private clouds across two data centers and the change control that protected forest integrity during global Active Directory cutovers.
- 2001 – 2007Morgan Stanley Home Loans · Prosum · GoldPocket Interactive
200+ servers, a 1,000+ node LAN across two continents, a Network Operations Center and help desk built from scratch.
What I reach for.
Identity & workplace
Cloud & infrastructure
Security & automation
Let's talk.
Remote from Los Angeles. Authorized to work in the United States and the European Union.