Systems Administrator · Infrastructure Engineer · Automation-Driven IT
I fix things before people know they're broken.
Eight years in IT taught me that the best technicians aren't the ones who close the most tickets — they're the ones who build systems so the tickets stop coming. That's the work I care about.
At Enable Resource Group I helped run a 300+ ticket/week multi-market service desk covering 100+ clients and 10,000+ managed endpoints — maintaining 80–90% billable utilization the entire time by automating the repetitive work out of existence, building the knowledge base other engineers actually used, and mentoring junior techs so the team improved as a unit.
I automate in PowerShell and Python. I've scripted endpoint compliance workflows, built M365 onboarding automation, and used ConnectWise Automate to push entire routine processes off human plates entirely. I also built Budgetry — a self-hosted personal finance app with Plaid integration, OAuth 2.0, Docker, and an AI layer — because the best way to understand a technology is to build something real with it.
I'm not chasing a developer title. I want to be in environments where someone has to own the implementation, figure out what should be automated, and help the team around them get sharper. That's where I do my best work.
Zero-touch PowerShell framework to programmatically provision TPM and enforce BitLocker encryption on Dell enterprise hardware. Integrated into ConnectWise Automate for mass-remediation across thousands of managed endpoints. Automated 48-digit recovery key generation and escrow. Reduced manual security configuration time by ~90% per machine.
Custom PowerShell utility to identify "Add Shortcut to OneDrive" folders that standard file-system queries fail to distinguish from physical directories. Developed a detection algorithm parsing hidden desktop.ini metadata for specific IconResource index values. Supports silent execution and automated reporting. Audits 100GB+ user profiles in under 60 seconds.
Local-first iOS password manager built with Swift and SwiftUI. Features encrypted vault storage, master password authentication, Face ID / Touch ID unlock, Bitwarden JSON import, encrypted .ssvault export, TOTP/2FA, password generator, vault health analysis, credit card storage, and optional iCloud sync.
Self-hosted personal finance application with Plaid API integration for transaction ingestion, OAuth 2.0 authentication, Docker deployment, and an AI layer for categorization and insight generation. Built to solve a real personal need and as a hands-on production exploration of modern backend technologies.
PowerShell and Bash scripts to standardize Microsoft Teams deployment and removal across Windows and macOS endpoints. Detects existing installs and broken-install states, removes legacy components cleanly, and supports repeatable execution through ConnectWise Automate without user interaction.
Exams passed where the associated certification has since expired or the program has been retired. The knowledge and hands-on experience behind each one remains active in daily practice.
Covered the full Microsoft Entra ID identity platform — Conditional Access policy design, identity governance, PIM, entitlement management, and multi-tenant identity federation. Directly applied in production work configuring MFA enforcement, geo-blocking, and automated user lifecycle management across M365 environments.
The exam that earned the Microsoft Certified Professional designation. Covered Windows 7 deployment, configuration, and management — including answer files, WDS, disk management, networking, security, and remote access. Directly preceded hands-on WDS and endpoint deployment work at DWK Lifesciences.
A rigorous, self-paced bachelor's program focused on practical IT skills and industry-aligned certifications. Coursework spans networking, cybersecurity, cloud computing, systems administration, and IT project management — with each competency validated through proctored examinations and performance assessments.
