Get up and keep moving. Raise the floor. Check your values. Adopt what you learn.
Forward Deployed Engineer · Automation & AI Agents · Claude Certified Architect (Professional) · MSP-forged Infrastructure & Operations
Remote since 2018 · Bilingual EN/ES · Available for FTE across all US time-zones.
Get up and keep moving. Raise the floor. Check your values. Adopt what you learn.
Be kind, compassionate, and true. Live a life worthy of Grandma Braun's respect.
Take the initiative. Don't make others do what you can do for yourself.
Feel the fear and do it anyway. Have the guts to explore the uncomfortable.
Get the stick. Don't ever stop getting the stick. Do it or die trying.
Also holds Anthropic Academy Completion, Rewst Foundations, Rewst Clean Automation, and CompTIA A+ / Network+.
When I was little, my mom called me Mr. Fix-It.
I was always running around taking things apart to see how they worked. Many years later, I learned to put them back together again. I've spent my life and career not just preparing for, but becoming the engineer and entrepreneur I am today.
When I first took the Anthropic AI Fluency course, it put names to things I'd understood as common sense. Maybe it's the Millennial in me, but I have an inherent sensitivity to the workings of technology. In first grade, I was the only one in the room who knew how to turn on the computer. Now, it's second-nature. I wanted to be early, and I was. My AI-dabbling origins go back to 2019. It was a natural pivot from Infrastructure and Operations to building the complete solutions myself.
Since mid-2025, I've been running solo at Eudai Gestalt Integrations: a live estate across six domains. The work I do now is not detached from the work I was doing at the help desk in 2009, leading a team in 2021, or running migrations in 2025. It is the same work, just orchestrated on exciting new layers and with a more powerful toolkit: OpenAPI, Claude Agent SDK, MCP, agent swarms, and endlessly growing libraries of skills, hooks, harnesses, and helpers to do the heavy lifting.
I am capable because I am fire-forged. I have seen...things, and those things have led to a type of forward-thinking, people-first, and systems-aware mindset that no AI can replicate. Yet.
With Gratitude. Thank you for visiting.
-DGB
| Domain | Era | Years | Basis |
|---|---|---|---|
| Infrastructure & systems ops | 2009 | 17 | 2009 to today. Sr. Systems Administrator and Systems Operations Lead at LightPoint. Today: Docker, nginx, systemd and Cloudflare on Linux, a private WireGuard mesh across a workstation, two VPS hosts and a NAS, and self-hosted GitHub Actions runners. |
| MSP & Microsoft platforms | 2009 | 17 | 2009 to today. 90+ clients and 5,500+ endpoints at LightPoint: Entra ID, Active Directory, Intune, Microsoft 365, ConnectWise, Halo, ServiceNow, Nexthink DEX, Threatlocker, N-Able, Auvik, Veeam. Today: an active Entra ID tenant with app registrations, and the msp-automation-api PowerShell library published publicly. |
| Delivery & enablement | 2009 | 17 | 2009 to today. Technical Account Manager at Heartland Payment Systems, a customer-success-heavy role; led an 11-person systems operations team at LightPoint. At ZAG, managed and mentored a team of up to six engineers, with performance reviews and training plans that produced multiple internal promotions, ran hiring and structured training, built ZAG Edu and ZAG Forms for onboarding and training tracking, and trained the certified administrator on a greenfield ServiceNow ITSM deployment. |
| Security & access control | 2018 | 8 | 2018 to today. Endpoint hardening, patching standardization, Threatlocker, and recovery from live ransomware events. Today: IAM/RBAC guards in FastAPI dependencies, pydantic v2 validation at every boundary, HMAC-SHA256 webhook signature verification, and TruffleHog secret scanning in the CI template every managed repo bootstraps from. |
| Pre-sales & solutions engineering | 2014 | 12 | 2014 to today. Scoping and pre-sales work from the earlier consulting roles onward; at ZAG owned the deliverables end to end: live demo environments, scenario packs and proof-of-concept builds. |
| Workflow automation | 2024 | 2 | 2022 to today. At ZAG, Rewst (certified) integrated with Entra ID and Intune over their APIs automated client onboarding. From 2024, low-code and AI-assisted builds at ZAG; since 2026, n8n, Python and PowerShell, and a separate PowerShell automation library published as msp-automation-api. |
| Testing & QA | 2024 | 1.7 | End of 2024 to today. Quality Operations Engineer at ZAG through Dec 2025. Today: pytest with pytest-asyncio and pytest-xdist, httpx AsyncClient driving the real ASGI app, coverage failing the CI run below 87%, Vitest on the Next.js side, and a PyMuPDF artifact gate that checks generated PDFs by rendered pixels. |
| Architecture & integration | 2024 | 2 | 2024 to today. Built ZAG Edu and ZAG Forms with low-code and AI tooling. Today: FastAPI with async SQLAlchemy 2 and Alembic migrations, Next.js and TypeScript, REST and SSE, MCP servers, SCORM 1.2 and xAPI 1.0.3 export, and Entra ID SSO over an OIDC authorization-code flow. |
| Generative AI & agentic engineering | 2022 | 3.7 | 2019: an applied AI engagement with Microsoft and OpenAI at LightPoint, toward a predictive health bot that ended when the insurers would not release the data. Daily use from ChatGPT's release in November 2022; AI-assisted building on the job at ZAG from 2024; own commit history from August 2025. Today: the Claude API (the Anthropic SDK in EGI_bot, a hand-written Messages-API client over httpx in the flagship), MCP servers, Claude Code, a self-hosted LiteLLM key broker, and retrieval built both ways: hand-written BM25 (Robertson, k1=1.5, b=0.75) with citation-integrity checks in the flagship, and a LangChain pipeline with sentence-transformer embeddings and a Chroma vector store behind a custom MCP server. Three Anthropic certifications plus the Partner Badge. |
Self-hosted modular LMS that generates source-cited curricula end to end: intake, research corpus, generation, model-grading, preview, publish, billing. Built to slot into the LMS and identity a company already runs.
Paid bilingual (EN/ES) fitness and lifestyle product at 4vida.club, built as pure YAML configuration on the EDU engine: zero product-specific runtime code. Stripe checkout, freemium entitlement gating. The proof the engine is domain-agnostic.
Bilingual real-time multiplayer AI party game at roflcopter.cloud: LLM comedy bots with distinct voices and an AI judge panel that learns taste from real human votes. Runs on a deterministic engine that keeps the game going when the model or the database is out.
Multi-mode chatbot embedded in workflowtech.ai: capability-based model routing across a live OpenRouter catalogue, MCP servers, and a cited automation CODEX. A per-PR Claude code-review Action reports model, token usage, and estimated cost on every pull request.
The single source of truth every EGI repo runs on: coding standards, agent definitions, skills, and hooks kept in one place and installed into every project, with a CI drift guard that fails a build the moment a repo diverges. It dispatches bounded tasks to coding agents, gates merges behind a reviewer chain, and brokers every model call through self-hosted LiteLLM.
The public upstream at WorkflowtechAI/GestaltWorkframe: a brandable multi-mode chatbot framework with persona routing, retrieval-grounded answers, operator-controlled cloud spillover budgets, and route-aware tool loops that quarantine retrieved context when no reliable tool-calling route exists.
Also built: Cerca, a relationship app built on the 36-Questions research (repo: closer); Capaz, a worker-capability tool that feeds the platform; and msp-automation-api, an open PowerShell library of MSP automations with observability and tests.
All of it built and run by one engineer: an education platform that writes its own curricula, the paid product on top of it, a live multiplayer game, client sites, and the infrastructure underneath. This is the record of the craft and the judgment behind it, with the portfolio figures pulled live from the GitHub API.
Founded April 1, 2025 and built alongside the ZAG job for its first eight months; full-time since December 2025. One person, six domains live: workflowtech.ai, 4vida.club, roflcopter.cloud, benesseremedestetica.com, closer.quest, and iambraun.com, with GestaltWorkframeEDU and llm-builder-kit doing the work underneath. Nothing ships without a branch, a pull request, green CI, and a review; that gate has passed 749+ merged pull requests so far.
Promoted twice. Support Engineer → Major Client Team Lead → Operations & Automation. Cut client onboarding effort 80%+ with secure Rewst workflows, cut proof-of-concept prep time 50%+ by streamlining pre-sales builds, and mentored engineers into their own promotions. Building production applications with AI began here.
Promoted three times. Led an 11-person systems operations team across 90+ clients and 5,500+ endpoints: endpoint hardening, patching standardization, a backup overhaul, and repeated ransomware recovery.
Systems engineering, application support, and technical account management across SMB and enterprise, including a first run at founding an MSP (Alternation LLC). Before any of it: contract administration at Ricoh and advertising sales with customer support at BBL Media.
I sit with a customer, turn an ambiguous problem into a system that runs in production, and stay through go-live instead of handing off a demo.
Claude Certified Architect: Professional. Ships production agents, skills, MCP servers, and evaluation harnesses.
90+ clients and 5,500+ endpoints at LightPoint, ransomware recovery included. ConnectWise, Halo, ServiceNow, Entra ID, Intune, Microsoft 365, and Rewst (certified).
Rewst (certified), n8n, Python, and PowerShell across Microsoft Cloud integration bundles, plus msp-automation-api, an openly published PowerShell library.
The proudest outcome of 17 years is mentoring engineers into senior roles. Everything I hand off is built to be read, run, and extended by the team that inherits it.
The commercial layer behind 4vida: Stripe checkout with webhook signature verification, freemium entitlement gating, and a pipeline that reuses content before paying to generate more.
A private WireGuard mesh across a workstation, two VPS hosts, and a NAS; self-hosted CI runners, nginx, Docker, Cloudflare, and deploys gated on green CI.
Finished work gets exercised against real API endpoints before it counts as done; a coverage number does not prove correctness.
A domain-agnostic engine with content modules that carry all domain config and no engine code: .gwmodule bundles, a modulectl CLI, and a framework compatibility gate.
Owned pre-sales end to end at ZAG: discovery with the prospect, technical demo design, live demo environments and scenario packs, and proof-of-concept builds run through to a working result.
Every endpoint that changes data sits behind IAM/RBAC, input is schema-validated, retrieved content is treated as untrusted, and webhooks verify HMAC-SHA256 with a replay window. On the MSP side: endpoint hardening, patching standards, and walking clients back from live ransomware.
Complete resume: AI and automation engineering, MSP operations, pre-sales, and team leadership.
Versión completa en español. Automatización, MSP, preventa e ingeniería de soluciones.
Available now for remote full-time engagements across all US time-zones, in English or Spanish.
If you are hiring for a forward deployed or solutions engineering role, I would like to hear about the problem you need solved.
Email [email protected]