Showing 13 of 13 projects.
Cybersecurity
An authored reference security architecture and HIPAA assessment method for an AI-assisted nursing documentation platform — where protected health information actually comes to rest across mobile, cloud, database and generative AI services, how many organizations have to be trusted with it, what transient processing removes that encryption cannot, and why the decisive question is not how to secure the PHI you store but why you are storing it at all.
- HIPAA Security Rule (45 CFR Part 164, Subpart C)
- HIPAA Privacy Rule minimum necessary and de-identification standards
- HIPAA Breach Notification Rule (45 CFR Part 164, Subpart D)
- Business associate and subcontractor contracting
Enterprise ArchitectureSanitized case study
A pre-acquisition technical assessment of an AI-powered LegalTech SaaS platform serving UK law firms, covering whether the application can be rebuilt and deployed from the repository alone, its architecture and customer-data flows, security controls, software dependencies and licences, the third-party LLM layer, the measured cost of generating a report, backups and recovery, and a prioritized remediation plan split across pre-close, first thirty days and first ninety days.
- DigitalOcean
- Third-party large language model APIs
- PDF text extraction and document parsing libraries
- Microsoft Word and Excel document generation
Enterprise Architecture
An authored reference architecture and operating-model analysis for the delivery pattern now being funded at scale across enterprise AI — what forward deployment actually is, the architecture that supports it, what changes when the product is probabilistic, where the model fails, and why most of its published claims do not survive verification.
- Forward deployed engineering operating model
- Reference architecture and architecture decision records
- Deployment topology design
- Zero Trust architecture (NIST SP 800-207)
Cybersecurity
An authored reference architecture and threat model for governing AI tool access at enterprise scale — treating an MCP estate as what it becomes in practice, a control plane with a non-deterministic caller, and placing the enforceable controls where determinism still exists.
- Model Context Protocol (revision 2026-07-28)
- JSON-RPC 2.0
- Streamable HTTP transport
- OAuth 2.0 Token Exchange (RFC 8693)
Enterprise ArchitectureSanitized case study
Architecture and delivery of a dedicated token-resilience control plane for an automated trading platform — one safe refresh owner per brokerage connection across multiple regions, with leases, fencing and versioned atomic commits replacing an in-process refresher that lost credentials under concurrency.
- OAuth 2.0 authorization code flow
- PKCE (RFC 7636)
- Refresh token rotation and replay detection
- OAuth 2.0 Security Best Current Practice (RFC 9700)
MicrosoftSanitized case study
Designed and configured a Microsoft Teams Phone deployment for a growing professional-services organization — PSTN connectivity, number plan, Auto Attendants, Call Queues, dial plans, emergency calling, and the network readiness work that makes the calls sound right.
- Microsoft Teams Phone
- Microsoft 365
- Microsoft Entra ID
- Teams admin center
GovernanceSanitized case study
Independent readiness and gap assessment of a New York-licensed financial institution against 23 NYCRR Part 500, extended to cover the institution's own use of AI and the AI-enabled threats directed at it.
- Microsoft Entra ID
- Conditional Access
- Privileged Identity Management
- Microsoft Purview
Data CenterSanitized case study
Led the architecture and migration planning for consolidating aging data center environments onto a modern, resilient platform for a large regulated enterprise.
- Cisco data center switching
- Virtualization platforms
- Enterprise storage
- Structured cabling and facilities
CybersecuritySanitized case study
Designed an identity-centered Zero Trust architecture — conditional access, device trust, and privileged access — replacing implicit network trust for a distributed workforce.
- Microsoft Entra ID
- Conditional Access
- Privileged Identity Management
- Multifactor authentication
NetworkingSanitized case study
Architected the migration from legacy MPLS-centric branch connectivity to a secure SD-WAN design with centralized policy, segmentation, and direct cloud access.
- SD-WAN platform
- Cisco routing and switching
- Next-generation firewalls
- Cloud security services
CloudSanitized case study
Designed an Azure landing zone with subscription structure, identity integration, policy guardrails, and network topology enabling teams to deploy quickly within safe boundaries.
- Microsoft Azure
- Azure Policy and Management Groups
- Microsoft Entra ID
- Hub-and-spoke virtual networking
CybersecuritySanitized case study
Assessed and redesigned logging coverage, detection use cases, and response readiness — turning fragmented telemetry into an operable monitoring capability.
- Microsoft Sentinel
- Microsoft Defender XDR
- Log collection pipelines
- Automation rules and playbooks
MicrosoftSanitized case study
Designed and implemented a Microsoft 365 security baseline — identity protection, email security, data protection, and device compliance — aligned to recognized benchmarks.
- Microsoft Entra ID
- Microsoft Defender for Office 365
- Microsoft Purview
- Microsoft Intune