Claude Certified Architect - Professional

David G. Braun

IT & Automation Leader · MSP Operations and Service Delivery · Anthropic Claude Certified Architect, Professional

Remote since 2018 · US citizen · Bilingual EN/ES · EST to CST

[email protected]
+1 541 413 5001
iambraun.com/cv
linkedin.com/in/david-george-braun
github.com/WorkflowtechAI
+57 314 871 3624

Resume

English · Versión en español a continuación

Summary

With 17+ years of MSP experience across IT operations, infrastructure, and automation, I bring a deeply analytical "systems brain" to IT leadership and responsible AI engineering. Today I build multi-agent AI systems, RAG pipelines with cited outputs, and rigorous evaluation harnesses, on the same systems instinct seventeen years of MSP work built. See my website for the full story.

Selected Highlights

  • At LightPoint: hired and trained new technicians, trained the incoming manager, and grew junior engineers into senior roles; rebuilt client onboarding and offboarding.
  • At LightPoint: delivered systems engineering and systems administration alongside the leadership role.
  • Built ZAG Edu and ZAG Forms, internal enablement and intake platforms supporting hundreds of users across onboarding, training tracking, and operations, using low code and AI tooling.
  • At ZAG: cut manual onboarding 80%+ with secure Rewst automation and unified client portals.

Experience

Founder & Executive Engineer

Apr 2025 to present

Eudai Gestalt Integrations LLC (EGI) · workflowtech.ai

  • Anthropic Claude Certified Architect (Professional), shipping multi-agent workflows, RAG, and evaluation harnesses in production. (https://workflowtech.ai/press/portfolio.html)
  • Built llm-builder-kit, the operator control plane that runs a one-person studio at multi-team throughput: a dispatcher hands bounded tasks to coding agents and a reviewer chain signs off before anything merges.
  • Procured and provisioned Ionos VPS infrastructure with nginx, Cloudflare, and token-backed SSH
  • 10 products and growing, built and shipped under EGI: https://workflowtech.ai/press/portfolio.html

Client Services Engineer → Lead Client Services Engineer → Quality Operations Engineer

2022 to 2025

ZAG Technical Services · San Jose, CA · Remote · MSP · Promoted twice, the first inside 90 days

  • Incident Manager: ran incident command on major incidents across all clients, coordinating SOC, NOC, and client teams.
  • Led support engineering for ZAG's single largest client, 73% of the business at a ~100-client MSP: a 25,000-employee enterprise with 50,000 endpoints under multi-site support.
  • Co-stood up a Quality Operations department from charter to operational in its first year, implementing an Automation Center of Excellence.
  • Endorsed by former Director of Operations (Ananya Ridenour) & Service Delivery Manager (Jeff Gaspard).
  • Worked side by side with the Director of Operations to create new SOPs, KPIs, and SLAs that measured service delivery improvements MSP wide.
  • Spearheaded MSP service delivery in a greenfield ServiceNow ITSM platform for a $7B enterprise (Scrum captain, requirement gathering, Agile DevOps)

Systems Support Engineer I → II → Team Lead → SysOps Team Lead

2018 to 2022

LightPoint NW · Portland, OR · MSP · 90+ clients, 5,500+ endpoints · Promoted three times

  • Rose from Systems Support Engineer I to SysOps Team Lead over four years.
  • Created and led an 11-person systems-operations department serving 90+ clients and 5,500+ endpoints across OR and WA.
  • Ran full-spectrum MSP delivery, on-site and remote: high-volume ticket queues, Microsoft 365 and Google Workspace administration, systems engineering, patching and backup standardization, endpoint and network security (EDR/MDR, firewalls, DNS filtering), and repeated ransomware recovery and high-pressure security response.
  • Lead escalation engineer for complex cross-tenant issues, with direct stakeholder communication during outages.
  • Endorsed by former CEO (David Boxberger).

Systems Engineer II · Technical Support Engineer · Founder · Contractor

2013 to 2018

Tier Two Consulting / New West Technologies / Alternation LLC / Robert Half · Portland, OR

  • MSP systems engineering, POS and payment support, and contracting across small-MSP environments.

Technical Account Manager, and earlier roles

2005 to 2012

Heartland Payment Systems / Ricoh USA / BBL Media · Remote and Portland, OR

  • Field support, multi-site support, customer success, and technical account management for a global payment processor. (HPS)

Primary Skills

  • AI & automation · Rewst, PowerShell, n8n, agent orchestration, AI enablement, AI governance, API integration, CIPP, citation integrity
  • Leadership & delivery · quality operations, client onboarding, discovery and scoping, continuous improvement, documentation, endpoint management, escalation management, executive-to-engineering translation, quarterly business reviews
  • MSP & IT operations · Intune, Microsoft 365, SLA reporting, Docker, Active Directory, AWS, Azure, backup, disaster recovery

Credentials

  • Claude Certified Architect, Professional (CCAR-P), Anthropic, 2026 · verify
  • Claude Certified Architect, Foundations (CCAR-F), Anthropic, 2026 · verify
  • Claude Certified Developer, Foundations (CCDV-F), Anthropic, 2026 · verify
  • Claude Partner Badge, Claude Code, Anthropic, 2026 · verify
  • Anthropic Academy Completion, Anthropic, 2026
  • Rewst Foundations; Rewst Clean Automation
  • CompTIA A+; CompTIA Network+ (2014)

Education

  • AAS, Computer Information Systems, Portland Community College, 2015
  • BS, Computer Science (incomplete), Hartwick College, 2000 to 2002
  • BS, Communications (incomplete), Greensboro College, 2002 to 2004
  • Post-graduate year, Bridgton Academy, 2000

Skills index

Keyword-dense for ATS and AI : See the knowledge graph here: https://iambraun.com/cv/skills-graph.html

  • AI & agentic engineering · quality operations; API; MCP server; root cause analysis; AI governance; AI orchestration; automated testing; information retrieval; LLM-as-a-Judge; model catalog; model routing; privacy by design; technical whitepaper; technical writing · via GenAI: Python
  • Automation & scripting · PowerShell; CI pipeline; data redaction; test automation; Rewst; MSP automation; client portal; n8n; nightly backups; API contract design; API integration; API-driven automation; automated policy checks; automated reporting
  • Data, APIs & platforms · access gating; API / SDK / MCP integration; API client development; API design; authorization model; CI security; client reporting; data modeling; database migrations; enterprise integration; HR enablement; knowledge graph; KPI reporting; learning management system · via GenAI: event-driven webhook architectures; Server-Sent Events; SQLite with migrations
  • Client success & commercial · Content Security Policy; Permissions-Policy; security headers; proof of concept builds; technical account management; escalation management; pre-sales engineering; vendor management; account management; client onboarding; contract administration; customer success; stakeholder communication; client confidentiality
  • Leadership & people · building a department from zero; executive reporting; performance reviews; training tracking; business training program; documentation; employee enablement; escalation and incident management; ITIL alignment & Change Advisory Board (CAB) governance; ITSM process design; M&A support; mentoring to promotion; mentoring, hiring, and technical interviewing; process optimization
  • ITSM & process · service delivery management; greenfield deployment; ticket queue management; ServiceNow; PSA ticket metrics; approval workflow; department charter; ITIL and change advisory board; ITSM; offboarding process; onboarding process; preventive process change; problem management; process design
  • Security · Microsoft Defender; API key management; IAM / RBAC; per-tenant identity scoping; secrets management; security awareness training; security incident response; vulnerability management; Zero Trust; SentinelOne; EDR; Sophos; email security and phishing defense; KnowBe4
  • Service delivery & quality ops · VoIP platforms; service delivery reporting; automation adoption; continuous improvement; CSAT programs; delivery velocity; LLM-as-a-Judge evaluation pipelines; quality assurance program; quality gate; Avaya; acceptance testing; adversarial and security-focused test design; artifact integrity verification; automated regression suites as a merge gate
  • Pre-sales & solutions · solution architecture; demo environments; discovery and scoping; pre-sales; scenario packs; solutions engineering; customer success management; discovery to go-live; executive-to-engineering translation; Ingram Micro; pre-sales efficiency; technical demo design; technical demonstrations; requirements validation
  • Compliance & risk · audit support; credential management; data minimization; data residency; data sovereignty; environment variables; healthcare data; policy authoring; policy enforcement in code; remediation; risk-based security; cyber insurance questionnaires; HIPAA; PCI-DSS
  • Cloud & infrastructure · Linux; Docker; automated review gates; AWS; Azure; billing operations; CI/CD pipelines; client systems deployment; cloud cost governance; domain management; hostname-based routing; multi-tenant architecture; production incident response; REST API design
  • Backup, BCDR & recovery · patch management; Microsoft 365; backup integrity; ransomware recovery; backup standardization; automated failover; backup; backup and disaster recovery; backup management; backup remediation; BCDR operations; disaster recovery; onsite remediation; RPO and RTO design
  • Endpoint & RMM · Intune; endpoint hardening; Microsoft Entra ID; N-able; access control; endpoint standardization; endpoint testing; network monitoring; RMM agent deployment; RMM and endpoint management at scale; RMM platform ownership; security baseline; ConnectWise; LogMeIn
  • Documentation & knowledge · automated documentation; code documentation; configuration documentation; documentation accuracy; documentation audit; knowledge base authoring; network diagrams; onboarding and enablement; pre-sales enablement; runbooks and playbooks; technical documentation; training program development; ITGlue; README
  • Identity & access · Active Directory; role-based access control; access control design; multi-tenant; multi-tenant identity scoping; passwordless sign-in; server-side authorization; tenant administration; joiner mover leaver process; MFA rollout; OAuth; OIDC; SAML; SSO
  • Incident & escalation management · escalation tier design; incident response; incident command; cross-team coordination; data recovery; directing client staff; escalation criteria; outage communication; production incident remediation; on-call rotation; workstation rebuild
  • Networking · Firewalla; CompTIA Network+; firewall management; ISP and circuit management; networking; routing and switching; VPN; wireless design and deployment; Fortinet; SonicWall; DNS filtering; MDR
  • Monitoring & observability (MSP) · SLA reporting; capacity monitoring; capacity planning; health endpoint; phone system reporting; MSPBots; Nexthink DEX; KPI dashboards; alert tuning; observability
  • Servers & virtualization · Group Policy; Hyper-V; server hardware builds; VMware; Windows Server; DHCP; file and print servers; SAN and RAID storage
  • Service desk & end-user support · end-user training and enablement; executive support; phone support; remote support tooling
  • Migrations & projects · cutover planning; domain migration; Exchange migration; project management; server migration; Agile; DevOps; file share migration; Scrum; Special Automation Projects
  • Microsoft 365 & collaboration · Microsoft 365 administration; Power Automate; Teams; Google Workspace; Exchange Online; SharePoint
  • Payments & POS · loyalty programs; merchant services; point-of-sale support; Dynamics RMS; payment gateway integration; payment terminals

Hoja de Vida

Español · English version above

Resumen

Con más de 17 años de experiencia en MSP en operaciones de TI, infraestructura y automatización, aporto un «cerebro de sistemas» profundamente analítico al liderazgo de TI y a la ingeniería de IA responsable. En 2026 pasé de la arquitectura de procesos y los flujos de trabajo no-code a construir sistemas de IA multiagente, pipelines RAG sofisticados y frameworks de evaluación rigurosos.

Aspectos destacados

  • En ZAG: lideré la ingeniería de soporte del cliente más grande de la firma, una empresa de 25.000 empleados, 50.000 endpoints, el 73% del negocio, coordinando los equipos de SOC, NOC y del cliente.
  • En LightPoint: creé y dirigí un departamento de operaciones de sistemas de 11 personas para más de 90 clientes y más de 5.500 endpoints.
  • En ZAG: reduje el onboarding manual de usuarios en más del 80% con automatización en Rewst.
  • En ZAG: reduje la preparación de pruebas de concepto de preventa en más del 50% con soluciones plantilla construidas con IA generativa.
  • En ZAG: puse en marcha un departamento de Operaciones de Calidad, de la carta fundacional a operativo en su primer año.
  • En ZAG: encabecé la entrega de una plataforma greenfield de ServiceNow ITSM para una empresa de $7 mil millones.
  • En ZAG: construí una matriz de habilidades de IA generativa para toda la empresa en una revisión de fusión y adquisición; adoptada por 100 empleados.
  • En EGI: fundé y opero en solitario una plataforma de IA en producción (seis productos en vivo) como Claude Certified Architect.

Experiencia

Founder & Executive Engineer

Eudai Gestalt Integrations LLC · workflowtech.ai · Abr 2025 al presente

  • Opero seis sistemas en producción en solitario con seguridad incorporada en la entrega: verificación HMAC-SHA256 de webhooks con ventana de repetición, identidad delimitada por tenant, entrada validada por esquema, escaneo automático de secretos y topes de gasto que se cierran ante fallos.
  • Entrego con disciplina: 2.902 commits, 1.176 pull requests fusionados y 4.648 pruebas automatizadas ejecutadas como compuertas de merge en 14 repositorios (registro público de GitHub, sep 2026).
  • Anthropic Claude Certified Architect (Professional), llevando a producción flujos de trabajo multiagente, RAG y frameworks de evaluación. (https://workflowtech.ai/portfolio.html)
  • Built the 4vida money layer: Stripe checkout across four billing durations with webhook reconciliation, plus PayPal with real webhook signature verification, freemium gating, a regeneration credit ledger, and referral anti-abuse.

Client Services Engineer → Lead Client Services Engineer → Quality Operations Engineer

ZAG Technical Services · San Jose, CA · Remoto · MSP · 2022 a 2025 · Ascendido dos veces, la primera en menos de 90 días

  • Incident Manager: ejercí el mando de incidentes mayores en todos los clientes, coordinando los equipos de SOC, NOC y del cliente.
  • Lideré la ingeniería de soporte del cliente más grande de ZAG, el 73% del negocio en un MSP de unos 100 clientes: una empresa de 25.000 empleados con 50.000 endpoints.
  • Fui responsable de la preventa de punta a punta (descubrimiento, entornos de demo en vivo, paquetes de escenarios, construcción de POC) y reduje la preparación de POC en más del 50%;
  • Reduje el onboarding manual en más del 80% con automatización segura en Rewst y portales de cliente unificados.
  • Construí desde cero los reportes de entrega de servicio; aprendí por mi cuenta MSPBots y Nexthink DEX para diseñar y construir los reportes de KPI y SLA con los que operaba el equipo ejecutivo.

Systems Support Engineer I → II → Team Lead → SysOps Team Lead

LightPoint NW · Portland, OR · MSP · 2018 a 2022 · 90+ clientes, 5.500+ endpoints · Ascendido tres veces

  • Ascendí de Systems Support Engineer I a SysOps Team Lead en cuatro años
  • Creé y dirigí un departamento de operaciones de sistemas de 11 personas para más de 90 clientes y más de 5.500 endpoints en OR y WA.
  • Ejecuté la entrega MSP de espectro completo, presencial y remota: colas de tickets de alto volumen, administración de Microsoft 365 y Google Workspace, ingeniería de sistemas, estandarización de parcheo y respaldos, seguridad de endpoints y de red (EDR/MDR, firewalls, filtrado DNS), y recuperación repetida de ransomware y respuesta de seguridad bajo alta presión.
  • Ingeniero principal de escalamiento para incidencias complejas entre tenants, con comunicación directa con las partes interesadas durante las caídas.

Systems Engineer II · Technical Support Engineer · Founder · Contractor

Tier Two Consulting / New West Technologies / Alternation LLC / Robert Half · Portland, OR · 2013 a 2018

  • Ingeniería de sistemas MSP, soporte de POS y pagos, y trabajo por contrato en entornos de MSP pequeños.

Technical Account Manager, y cargos anteriores

Heartland Payment Systems / Ricoh USA / BBL Media · Remoto y Portland, OR · 2005 a 2012

  • Soporte de campo, éxito del cliente y gestión de cuentas.

Habilidades principales

  • El inventario completo está en el Índice de habilidades legible por máquina, en la página 3.
  • IA y automatización · Claude (API / MCP / Claude Code), Rewst (certificado), n8n, RAG
  • Liderazgo y entrega · liderazgo de equipos y departamentos, entrega de servicio, operaciones de calidad, preventa y soluciones
  • MSP y operaciones de TI · RMM y gestión de endpoints a escala, ITSM (ServiceNow), Microsoft 365 y Google Workspace, Entra / Intune, seguridad de endpoints (EDR/MDR), recuperación de ransomware

Credenciales

  • Claude Certified Architect, Professional (CCAR-P), Anthropic, 2026 · verificar
  • Claude Certified Architect, Foundations (CCAR-F), Anthropic, 2026 · verificar
  • Claude Certified Developer, Foundations (CCDV-F), Anthropic, 2026 · verificar
  • Claude Partner Badge, Claude Code, Anthropic, 2026 · verificar
  • Anthropic Academy Completion, Anthropic, 2026
  • Rewst Foundations; Rewst Clean Automation
  • CompTIA A+; CompTIA Network+ (2014)

Educación

  • AAS, Sistemas de Información Computacional, Portland Community College, 2015
  • BS, Ciencias de la Computación (incompleto), Hartwick College, 2000 a 2002
  • BS, Comunicaciones (incompleto), Greensboro College, 2002 a 2004
  • Año preparatorio previo a la universidad, Bridgton Academy, 2000

Índice de habilidades

Denso en palabras clave para ATS e IA : Ver aquí el grafo de conocimiento: https://iambraun.com/cv/skills-graph.html

  • IA y ingeniería agéntica · quality operations; API; MCP server; root cause analysis; AI governance; AI orchestration; automated testing; information retrieval; LLM-as-a-Judge; model catalog; model routing; privacy by design; technical whitepaper; technical writing · via GenAI: Python
  • Automatización y scripting · PowerShell; CI pipeline; data redaction; test automation; Rewst; MSP automation; client portal; n8n; nightly backups; API contract design; API integration; API-driven automation; automated policy checks; automated reporting
  • Datos, APIs y plataformas · access gating; API / SDK / MCP integration; API client development; API design; authorization model; CI security; client reporting; data modeling; database migrations; enterprise integration; HR enablement; knowledge graph; KPI reporting; learning management system · via GenAI: event-driven webhook architectures; Server-Sent Events; SQLite with migrations
  • Éxito del cliente y comercial · Content Security Policy; Permissions-Policy; security headers; proof of concept builds; technical account management; escalation management; pre-sales engineering; vendor management; account management; client onboarding; contract administration; customer success; stakeholder communication; client confidentiality
  • Liderazgo y personas · building a department from zero; executive reporting; performance reviews; training tracking; business training program; documentation; employee enablement; escalation and incident management; ITIL alignment & Change Advisory Board (CAB) governance; ITSM process design; M&A support; mentoring to promotion; mentoring, hiring, and technical interviewing; process optimization
  • ITSM y procesos · service delivery management; greenfield deployment; ticket queue management; ServiceNow; PSA ticket metrics; approval workflow; department charter; ITIL and change advisory board; ITSM; offboarding process; onboarding process; preventive process change; problem management; process design
  • Seguridad · Microsoft Defender; API key management; IAM / RBAC; per-tenant identity scoping; secrets management; security awareness training; security incident response; vulnerability management; Zero Trust; SentinelOne; EDR; Sophos; email security and phishing defense; KnowBe4
  • Entrega de servicio y operaciones de calidad · VoIP platforms; service delivery reporting; automation adoption; continuous improvement; CSAT programs; delivery velocity; LLM-as-a-Judge evaluation pipelines; quality assurance program; quality gate; Avaya; acceptance testing; adversarial and security-focused test design; artifact integrity verification; automated regression suites as a merge gate
  • Preventa y soluciones · solution architecture; demo environments; discovery and scoping; pre-sales; scenario packs; solutions engineering; customer success management; discovery to go-live; executive-to-engineering translation; Ingram Micro; pre-sales efficiency; technical demo design; technical demonstrations; requirements validation
  • Cumplimiento y riesgo · audit support; credential management; data minimization; data residency; data sovereignty; environment variables; healthcare data; policy authoring; policy enforcement in code; remediation; risk-based security; cyber insurance questionnaires; HIPAA; PCI-DSS
  • Nube e infraestructura · Linux; Docker; automated review gates; AWS; Azure; billing operations; CI/CD pipelines; client systems deployment; cloud cost governance; domain management; hostname-based routing; multi-tenant architecture; production incident response; REST API design
  • Respaldo, BCDR y recuperación · patch management; Microsoft 365; backup integrity; ransomware recovery; backup standardization; automated failover; backup; backup and disaster recovery; backup management; backup remediation; BCDR operations; disaster recovery; onsite remediation; RPO and RTO design
  • Endpoints y RMM · Intune; endpoint hardening; Microsoft Entra ID; N-able; access control; endpoint standardization; endpoint testing; network monitoring; RMM agent deployment; RMM and endpoint management at scale; RMM platform ownership; security baseline; ConnectWise; LogMeIn
  • Documentación y conocimiento · automated documentation; code documentation; configuration documentation; documentation accuracy; documentation audit; knowledge base authoring; network diagrams; onboarding and enablement; pre-sales enablement; runbooks and playbooks; technical documentation; training program development; ITGlue; README
  • Identidad y acceso · Active Directory; role-based access control; access control design; multi-tenant; multi-tenant identity scoping; passwordless sign-in; server-side authorization; tenant administration; joiner mover leaver process; MFA rollout; OAuth; OIDC; SAML; SSO
  • Gestión de incidentes y escalamiento · escalation tier design; incident response; incident command; cross-team coordination; data recovery; directing client staff; escalation criteria; outage communication; production incident remediation; on-call rotation; workstation rebuild
  • Redes · Firewalla; CompTIA Network+; firewall management; ISP and circuit management; networking; routing and switching; VPN; wireless design and deployment; Fortinet; SonicWall; DNS filtering; MDR
  • Monitoreo y observabilidad (MSP) · SLA reporting; capacity monitoring; capacity planning; health endpoint; phone system reporting; MSPBots; Nexthink DEX; KPI dashboards; alert tuning; observability
  • Servidores y virtualización · Group Policy; Hyper-V; server hardware builds; VMware; Windows Server; DHCP; file and print servers; SAN and RAID storage
  • Mesa de servicio y soporte a usuarios · end-user training and enablement; executive support; phone support; remote support tooling
  • Migraciones y proyectos · cutover planning; domain migration; Exchange migration; project management; server migration; Agile; DevOps; file share migration; Scrum; Special Automation Projects
  • Microsoft 365 y colaboración · Microsoft 365 administration; Power Automate; Teams; Google Workspace; Exchange Online; SharePoint
  • Pagos y punto de venta · loyalty programs; merchant services; point-of-sale support; Dynamics RMS; payment gateway integration; payment terminals