Projects

Selected initiatives

Platforms, programs, and systems I've designed, built, or led. Client details are kept abstract on purpose.

Engineering leadership

Live-experience platform and engineering

  • Architecture
  • DevOps
  • Reliability
  • Security

Leading engineering for Speakeasy's live-experience platform, owning architecture, production reliability, engineering process, and security while staying hands-on in the code.

Speakeasy runs ticketing, table reservations, guest management at the door, and customer marketing for venues, festivals, and event organizers.

  • Own the platform’s architecture and technical direction.
  • Run day-to-day DevOps across infrastructure, deployments, monitoring, and incident response.
  • Set engineering process across planning, code review, and releases.
  • Build security and compliance into the platform rather than around it.
  • Stay hands-on in the codebase alongside the team.

Infrastructure

Multi-tenant web hosting platform

  • Linux
  • Containers
  • nginx
  • PHP-FPM
  • MySQL
  • Redis
  • WordPress

Architected and operate a high-security, containerized Linux hosting platform for about 300 customer WordPress sites, with every tenant isolated, redundancy and failover built in, and performance tuned from nginx down to MySQL.

  • About 300 customer WordPress sites on containerized Linux infrastructure.
  • Every site runs as its own Linux user with chrooted SFTP and a dedicated PHP-FPM pool, so one compromised or busy site can’t reach or starve its neighbors.
  • Redundancy and failover, so a single failure doesn’t take sites down.
  • MySQL optimization and performance tuning across nginx, PHP-FPM, and Redis object caching.
  • Hardened for high security, with TLS certificates issued and renewed automatically.
  • Provisioning, patching, and upgrades are automated and happen without disrupting customers.

Business systems

Custom-built CRM, operations tools and dashboard, recurring billing and financial systems

  • Custom CRM
  • Operations dashboard
  • Stripe Billing
  • QuickBooks Online
  • Webhooks

Built and integrated a custom CRM, operations tools and dashboard, and recurring billing and financial systems, with the CRM as the single source of truth and the heart that drives every other internal and external system.

I built every piece and integrated them into one system, with the CRM at the center.

  • The CRM is the single source of truth for customers, products, services, and quantities, and it drives every other internal and external system.
  • Operations tools and a dashboard run day-to-day work from that same data.
  • Stripe Billing handles subscriptions, invoice generation, and autopay, driven by the CRM.
  • Invoice and payment data syncs into QuickBooks Online automatically, so nobody re-keys invoices or payments.
  • Event-driven integrations keep every system current, with verified webhooks and idempotent handlers so retries and duplicates are harmless.

Cloud

AWS infrastructure modernization

  • EC2
  • RDS MySQL
  • CloudFormation
  • IAM
  • Savings Plans
  • Graviton

Modernized production AWS infrastructure through right-sizing, cost optimization, security hardening, and automation with CloudFormation, while keeping production disruption to a minimum.

  • Right-sized EC2 and RDS MySQL to real workloads, with performance and storage tuning.
  • Cut costs with Savings Plans and ongoing cost optimization.
  • Hardened security with least-privilege IAM and secure-by-default configuration.
  • Automated infrastructure as code with CloudFormation, so environments are reproducible and every change is reviewable.
  • Put observability and a backup strategy in place.
  • Moved suitable workloads to AWS Graviton (arm64) for better price-performance, one service at a time.

Security & compliance

Security and SOC 2 readiness program

  • Vanta
  • CIS Controls v8
  • NIST CSF 2.0
  • Endpoint security
  • SOC 2

Led an organization-wide security and compliance program built on CIS Controls v8 and NIST CSF 2.0, using Vanta to reach SOC 2 control readiness with evidence that comes from how the systems actually run.

  • Built the program on CIS Controls v8 and NIST CSF 2.0.
  • Used Vanta for continuous control monitoring, so compliance evidence comes from the systems themselves instead of a binder.
  • Rolled out endpoint detection, password management, and security-awareness training across the organization.
  • Wrote the policies and implemented the controls for SOC 2 readiness.

Product engineering

Custom client platforms

  • Web apps
  • Mobile apps
  • Client portals
  • Integrations
  • SMS/MMS
  • E-commerce

Built and keep running custom platforms for Ryse Software clients, from a career-exploration platform used in two states to a lending LMS, SMS shift broadcasting, and a unified CRM.

Built for Ryse Software clients:

  • ITP Virtual Career Expo and your_path: a career-exploration platform that introduces high-school students to 18 career pathways, with a student web app, native iOS and Android apps, an admin console, and YouScience aptitude matching. It serves 17 Northeast Mississippi counties and was redeployed statewide in North Carolina as the your_path Career Accelerator.
  • Compass: an LMS and business-planning platform (cash flow, P&L, loan prep) for a CDFI, built to automate the technical-assistance tracking lenders have to report.
  • Staffing communication platform: broadcasts open shifts to thousands of workers over SMS/MMS, removing the bottleneck that capped the client’s growth.
  • Survey operations platform: a unified CRM, project manager, and client portal that replaced a fragmented, email-driven process with a single source of truth.
  • MagFabrics B2B storefront: an online catalog and storefront for a performance-fabrics supplier, with fabrics, trim, and hardware in one place.

IT operations

Microsoft 365 tenant consolidation

  • Microsoft 365
  • Entra ID
  • Exchange Online
  • OneDrive
  • PowerShell
  • Microsoft Graph

Consolidated Microsoft 365 tenants, moving identities, Exchange mailboxes, OneDrive data, and DNS with migration tooling plus PowerShell and Microsoft Graph automation, planned around the business to keep interruption to a minimum.

  • Planned the identity, Exchange, OneDrive, and DNS changes together.
  • Combined migration tooling with PowerShell and Microsoft Graph automation.
  • Scheduled user cutover around the business to keep interruption to a minimum.

Also

  • Custom Debian routers and networking
  • Bitwarden deployment
  • Cloudflare security
  • MySQL migrations