Forward Deployed Engineer · Anthropic Claude Certified Architect: Professional · 17+ years spanning customer success, pre-sales, quality operations, and infrastructure engineering.
Remote (US Wyoming LLC) · Bilingual EN/ES · Available for full-time or contract engagements. Works US Pacific through Eastern hours.
Also holds Anthropic Academy Completion, Rewst Foundations, Rewst Clean Automation, and CompTIA A+ / Network+.
Forward Deployed Engineer. 17+ years spanning customer success, pre-sales, quality operations, and infrastructure engineering, most of it inside MSPs running thousands of endpoints.
When I was a little kid, my mom called me Mr. Fix-It. I was always running around taking things apart to see how they worked. Many years later, I learned to put them back together again. I've spent my life and career not just preparing for, but becoming the engineer and entrepreneur I am today.
When I first took the Anthropic AI Fluency course, it put names to things I'd understood as common sense. Maybe it's the Millennial in me, but I have an inherent sensitivity to the workings of technology. In first grade, I was the only kid who knew how to turn on the computer. Now, after so much study and practice going back to 2019 with my first applied AI engagement, these new-fangled tools are demystified and laid bare to my meddling and machinations.
The work I do now is not so different from the work I was doing at the help desk in 2009, just at different layers and with a more powerful toolkit, the Claude Agent SDK, MCP tooling, REST APIs, and endlessly growing libraries of extensions and helpers to do the heavy lifting.
Every build doubles as teaching. The system has to still work in eighteen months. I've made that handoff for real many times as technical consult on dozens of projects over a long career. From training your ServiceNow administrator to providing the leadership, guidance, and AI tooling your junior engineers will build on for years, I am capable precisely because I am dumpster-fire forged. I have seen...things, and those things have led to a type of forward-thinking and people-first, systems-aware mindset that no AI can replicate. Yet.
Since mid-2025, I've been running solo at Eudai Gestalt Integrations: a live estate across six domains: workflowtech.ai (the EGI platform, its assistant, and the automation CODEX), 4vida.club, roflcopter.cloud, benesseremedestetica.com, closer.quest, and iambraun.com with its subdomains, from a Foundry VTT server to self-hosted D&D tools. Underneath: GestaltWorkframeEDU powering 4vida, llm-builder-kit running delivery as a live agent factory, and the openly published msp-automation-api library, plus a monetization layer, the infrastructure, and the operations.
| Domain | Era | Years | Basis |
|---|---|---|---|
| Infrastructure & systems ops | 2009 | 17 | 2009 to today. Sr. Systems Administrator and Systems Operations Lead at LightPoint. Today: Docker, nginx, systemd and Cloudflare on Linux, a private WireGuard mesh across a workstation, two VPS hosts and a NAS, and self-hosted GitHub Actions runners. |
| MSP & Microsoft platforms | 2009 | 17 | 2009 to today. 90+ clients and 5,500+ endpoints at LightPoint: Entra ID, Active Directory, Intune, Microsoft 365, ConnectWise, Halo, ServiceNow, Nexthink DEX, Threatlocker, N-Able, Auvik, Veeam. Today: an active Entra ID tenant with app registrations, and the msp-automation-api PowerShell library published publicly. |
| Delivery & enablement | 2009 | 17 | 2009 to today. Technical Account Manager at Heartland Payment Systems, a customer-success-heavy role; led an 11-person systems operations team at LightPoint. At ZAG, managed and mentored a team of up to six engineers, with performance reviews and training plans that produced multiple internal promotions, ran hiring and structured training, built ZAG Edu and ZAG Forms for onboarding and training tracking, and trained the certified administrator on a greenfield ServiceNow ITSM deployment. |
| Security & access control | 2018 | 8 | 2018 to today. Endpoint hardening, patching standardization, Threatlocker, and recovery from live ransomware events. Today: IAM/RBAC guards in FastAPI dependencies, pydantic v2 validation at every boundary, HMAC-SHA256 webhook signature verification, and TruffleHog secret scanning in the CI template every managed repo bootstraps from. |
| Pre-sales & solutions engineering | 2014 | 12 | 2014 to today. Scoping and pre-sales work from the earlier consulting roles onward; at ZAG owned the deliverables end to end: live demo environments, scenario packs and proof-of-concept builds. Cut POC prep time 50%+ with reusable scaffolding. |
| Workflow automation | 2024 | 2 | 2022 to today. At ZAG, Rewst (certified) integrated with Entra ID and Intune over their APIs cut manual client onboarding effort 80%+. From 2024, low-code and AI-assisted builds at ZAG; since 2026, n8n, Python and PowerShell, and a separate PowerShell automation library published as msp-automation-api. |
| Testing & QA | 2024 | 1.7 | End of 2024 to today. Quality Operations Engineer at ZAG through Dec 2025. Today: pytest with pytest-asyncio and pytest-xdist, httpx AsyncClient driving the real ASGI app, coverage failing the CI run below 87%, Vitest on the Next.js side, and a PyMuPDF artifact gate that checks generated PDFs by rendered pixels. |
| Architecture & integration | 2024 | 2 | 2024 to today. Built ZAG Edu and ZAG Forms with low-code and AI tooling. Today: FastAPI with async SQLAlchemy 2 and Alembic migrations, Next.js and TypeScript, REST and SSE, MCP servers, SCORM 1.2 and xAPI 1.0.3 export, and Entra ID SSO over an OIDC authorization-code flow. |
| Generative AI & agentic engineering | 2022 | 3.7 | 2019: an applied AI engagement with Microsoft and OpenAI at LightPoint, toward a predictive health bot that ended when the insurers would not release the data. Daily use from ChatGPT's release in November 2022; AI-assisted building on the job at ZAG from 2024; own commit history from August 2025. Today: the Claude API (the Anthropic SDK in EGI_bot, a hand-written Messages-API client over httpx in the flagship), MCP servers, Claude Code, a self-hosted LiteLLM key broker, and retrieval built both ways: hand-written BM25 (Robertson, k1=1.5, b=0.75) with citation-integrity checks in the flagship, and a LangChain pipeline with sentence-transformer embeddings and a Chroma vector store behind a custom MCP server. Three Anthropic certifications plus the Partner Badge. |
Self-hosted modular LMS that generates source-cited curricula end to end: intake, research corpus, generation, model-grading, preview, publish, billing. Corpus-locked BM25 retrieval over an ~80-source corpus with zero fabricated citation identifiers observed in production; grounding is measured and stamped rather than hard-gated. Shipped SCORM 1.2 export, xAPI 1.0.3 statements, and Entra ID SSO integration.
Paid bilingual (EN/ES) fitness and lifestyle product at 4vida.club, built as pure YAML configuration on the EDU engine: zero product-specific runtime code. Stripe checkout, freemium entitlement gating. The proof the engine is domain-agnostic.
Bilingual real-time multiplayer AI party game at roflcopter.cloud: LLM comedy bots with distinct voices and an AI judge panel that learns taste from real human votes. Deterministic engine with over 200 tests; degrades gracefully with no LLM key and no database; a load harness against the live server measures the real capacity ceiling.
Multi-mode chatbot embedded in workflowtech.ai: capability-based model routing across a live OpenRouter catalogue, MCP servers, and a cited automation CODEX. A per-PR Claude code-review Action reports model, token usage, and estimated cost on every pull request.
The agent factory the rest is built with: a dispatcher handing bounded tasks to coding agents, a reviewer chain gating merges, a token-gated control-plane panel with a background worker fleet, an Avalonia desktop cockpit, and a self-hosted LiteLLM key broker every model call routes through. Engineering standards vendored across every managed repo with a CI drift guard.
The public upstream at WorkflowtechAI/GestaltWorkframe: a brandable multi-mode chatbot framework with persona routing, retrieval-grounded answers, operator-controlled cloud spillover budgets, and route-aware tool loops that quarantine retrieved context when no reliable tool-calling route exists.
Also built: Cerca, a relationship app built on the 36-Questions research (repo: closer); Capaz, a worker-capability tool that feeds the platform; and msp-automation-api, an open PowerShell library of MSP automations with observability and tests.
All of it built and run by one engineer: an education platform that writes its own curricula, the paid product on top of it, a live multiplayer game, client sites, and the infrastructure underneath. This is the record of the craft and the judgment behind it, with the portfolio figures pulled live from the GitHub API.
Founded April 1, 2025 and built alongside the ZAG role for its first eight months; full-time since December 2025. A live estate built and operated solo: workflowtech.ai, 4vida.club, roflcopter.cloud, benesseremedestetica.com, closer.quest, and iambraun.com with its subdomains; GestaltWorkframeEDU and llm-builder-kit run underneath; the CODEX serves publicly and msp-automation-api is published openly. 749+ merged pull requests through a self-imposed gate of branch, PR, CI green, and review. Holds the Claude Partner Badge: Claude Code.
Promoted twice. Cut client onboarding effort 80%+ with secure Rewst automation, cut proof-of-concept prep time 50%+ and owned the pre-sales builds, and mentored engineers into their own promotions. The final year ran as pure quality-operations work, and it is where building code with AI started on the job.
Promoted three times. Led an 11-person systems operations team across 90+ clients and 5,500+ endpoints: endpoint hardening, patching standardization, a backup overhaul, and repeated ransomware recovery - one of them onsite, directing the client's own staff through wiping and rebuilding 90 machines and recovering critical data off workstations.
Systems engineering, application support, and technical account management across SMB and enterprise, including a first run at founding an MSP (Alternation LLC).
I sit with a customer, turn an ambiguous problem into a system that runs in production, and stay through go-live instead of handing off a demo. The loop runs end to end: diagnose a layer down, build, deploy, verify on the live system, then hand the keys over. At ZAG, reusable scaffolding cut proof-of-concept prep time 50%+.
Claude Certified Architect: Professional. Ships production agents, skills, MCP servers, and evaluation harnesses. Routing runs in two layers: a written policy governs when to spend, and capability-based selection with benchmark floors governs what runs. Tokens are treated as a unit of economics: program generation cost cut ~70% ($3.40 to under $1) on the EDU platform. The router itself is measured rather than assumed: a scheduled cost-weighted eval scores the classifier against labeled task briefs, prices over- and under-routing asymmetrically as a lower bound, and treats safety-critical routing floors as categorical failures that gate the run.
FDE work is deployment into messy customer environments; MSP work is nothing but customer environments. 90+ clients and 5,500+ endpoints at LightPoint, ransomware recovery included. ConnectWise, Halo, ServiceNow, N-Able, Auvik, Threatlocker, Nexthink DEX; Entra ID, Intune, Microsoft 365, Power Platform; Rewst (certified) and n8n.
Automation that deletes recurring work and keeps running after handoff. Rewst (certified), n8n, Python, and PowerShell across Microsoft Cloud integration bundles; manual client onboarding effort cut 80%+ at ZAG. A separate PowerShell library, msp-automation-api, is published openly with observability and tests.
The flagship product is a pedagogy engine, and the proudest outcome of 17 years is mentoring engineers into senior roles. Everything I hand off is built to be read, run, and extended by the team that inherits it.
The commercial layer behind 4vida: Stripe checkout with webhook signature verification, freemium entitlement gating, and a generation pipeline that reuses existing content before paying to generate new content.
A private WireGuard mesh across a workstation, two VPS hosts, and a NAS; self-hosted CI runners, nginx, systemd, Docker, Cloudflare, and continuous deployment gated on green CI.
Finished work gets exercised against real API endpoints before it counts as done. A coverage number does not prove correctness, and the habit catches the crashes a passing suite hides.
A domain-agnostic engine with content modules that carry all domain config and no engine code: .gwmodule bundles, a modulectl CLI, and a framework compatibility gate.
Twelve years of scoping and pre-sales, owned end to end at ZAG: discovery with the prospect, technical demo design, live demo environments and scenario packs, and proof-of-concept builds run through to a working result. Cut POC preparation time 50%+ with reusable scaffolding.
IAM/RBAC guards on every mutated endpoint, schema-validated input at every boundary, session eviction on password change, HMAC-SHA256 webhook signature verification, and a committed secrets policy. MSP side: endpoint hardening, Threatlocker, patching standardization, and recovery from live ransomware events.
Complete resume: AI and automation engineering, MSP operations, pre-sales, and team leadership.
Versión completa en español. Automatización, MSP, preventa e ingeniería de soluciones.
Available now for remote full-time or contract engagements. Contracts run through a US Wyoming LLC; hours run US Pacific through Eastern; engagements run in English or Spanish.
If you are hiring for a forward deployed or solutions engineering role, I would like to hear about the problem you need solved.
Email [email protected]