Intro
Colorado-based systems engineer and Python developer working at the intersection of infrastructure, data, and regulatory compliance. I build, migrate, and operate systems in regulated environments where data handling, access control, and auditability are non-negotiable.
Currently, I am leading the migration of on-premise Exchange 2016 and Proofpoint from Jeppesen/Boeing to cloud-based IAM and email security services as part of the divestiture of Jeppesen from Boeing. That work runs under a defense-contractor compliance posture, so I maintain cybersecurity operations and data-handling controls throughout the migration.
Compliance & Security
- CMMC — working knowledge of the practice domains and how they map to day-to-day system administration and change control.
- NIST SP 800-171 & DFARS 252.204-7012 — implementing and maintaining the required safeguards for Controlled Unclassified Information on covered contractor information systems.
- CUI / ITAR — export-controlled and controlled unclassified data handling: identifying what is in scope, keeping it inside authorized boundaries, and ensuring only U.S. persons with a need-to-know have access.
- Microsoft GCC High — operating in and migrating into the sovereign U.S. government cloud (Exchange Online, Entra ID) where ITAR/CUI workloads are required to live.
- Proofpoint — email security, mail-flow routing, and data-loss prevention during a cross-tenant migration, keeping mailboxes protected and reportable at every stage.
- Exchange & PowerShell — built an extensive PowerShell module from the ground up to report on and move mailboxes between destinations with a full audit trail.
- Identity & Access — automated account provisioning on Microsoft Entra ID via serverless functions and webhooks, so joiner/mover/leaver events are enforced rather than remembered.
Before this, I built regulatory reporting pipelines in financial technology at American Express (TeraData, Hive, and Python, producing regulator-mandated reports for FR, MX, IT, and NL) and served as an IT Systems Administrator and Compliance Officer in Colorado's regulated cannabis industry, automating "seed-to-sale" state reporting against METRC. Compliance has been a thread through most of my career, not a recent add-on.
My main focus is on the "backend and systems-side" of development. Please see my resume under experience for more information.
Outside of working in technology, I train dogs for protection and off-leash obedience at Mountain Canine College in Evergreen, CO.
