Projects
146 entries, most recent first. Clients are described by sector rather than named, and nothing here reproduces customer-specific configuration or documentation.
- Modernizing Legacy Industrial Systems with AIAn unsupported industrial application whose analysis was still right and whose reference data was not — rebuilt from its inputs, without altering a line of its code.
- Career Reference Record — Design, Build and Publishing PlatformA cross-linked reference work built as a derived graph: edges declared once, every index, backlink and chart generated from them, published static with per-document access control.
- Enterprise Networking Practice LabThree repurposed servers being rebuilt into a 2.3 TB virtualized network emulation cluster, funded on a cost-per-month argument against a six-month procurement lead time — and the end of a practice running on engineers' own hardware.
- Commercial Site Rebuild and Live Domain MigrationTwenty pages moved off a hosted page builder onto a static build, and a live domain repointed to a new host without touching any of the six records carrying its mail.
- Enterprise Agreement Pursuit — Global AutomotiveCisco services subject-matter expert on a bid for a global automotive manufacturer's North American arm — a two-day clarification window, an affiliate's engineering bench as the differentiator, a loss, and a headquarters meeting four weeks later.
- Diversified Industrial ManufacturerBusiness-unit and data center assessments, automated discovery and network assurance, an enterprise architecture review, and integration across two acquisitions.
- Network Orchestration Proof of ConceptItential and Gluware assessed against traditional automation for the group's parent company — built out on virtualized topologies rather than judged on datasheets, under a signed statement of work, closing with a master services agreement.
- Post-Quantum Cryptography ProgramA thirty-six-month joint research engagement with the group's parent company, originated rather than assigned — proposed December 2025, accepted January 2026, transacted at CFO level between two companies.
- SD-WAN Portfolio — Banking and State LegislatureThree concurrent SD-WAN engagements in regulated and public environments, with the low-level design at revision 2.0 and every configuration passing a routing review before production.
- State and Local Government DeliveryA state transportation department data center relocation inside a single summer window, and county switching, firewall and platform replacement alongside it.
- Enterprise Architecture Practice BuildAn architecture practice of up to fourteen, built and run to a design review gate and a weekly rhythm — so engagements were delivered against one design language rather than individual preference.
- Casino Surveillance Network Design and SegmentationSurveillance refresh and segmentation for a metropolitan casino property — designed as Principal Architect and governed as Director, through a phased implementation and a mid-program re-scope.
- Client Architecture Portfolio88 numbered engagements across two years, twenty-plus live at any moment, across healthcare, manufacturing, financial services and the public sector — the inverse of nineteen years inside one estate, and a different problem.
- E-Rate Funded Network ProgramsRoughly fifteen engagements across school districts, a regional education service agency and a public library consortium — every design constrained by federal funding eligibility and the funding-year window.
- Multi-Property Gaming GroupFour properties for a regional casino group — security and segmentation, core refresh, wireless, surveillance separation and firewall consolidation.
- Healthcare EstatesFive providers — firewall and intrusion-prevention upgrades against an active vendor advisory, a multi-site data center fabric on standing retainer, and segmentation with virtual desktop.
- Vendor and Partner ProgramSeven technology and service partners brought in across two years for capability the practice did not have or could not scale, with a formal manufacturer specialization track behind it.
- Utility OT/IT EngagementA natural gas and electric utility, carried from review of the SCADA statement of work through firewall and switch delivery.
- Firewall Refresh and Intrusion ResponseA multi-site next-generation firewall refresh for a nonprofit health provider — and an intrusion the night after cutover, met with geo-fencing and containment run alongside day-one support.
- Municipal Infrastructure Assessment to RFPAn infrastructure assessment for a town government, scoped from the start to become the foundation of its own procurement rather than a proposal for follow-on work.
- UAV Sensor Payload DevelopmentCustom LIDAR and Raspberry Pi sensor payloads designed and built in-house for infrastructure inspection.
- Fourteen Weeks on the ToolsThe densest hands-on stretch of the NRI tenure — seven client engagements worked personally, in the configuration and the peer reviews and the customer calls, while taking over a team from the second day.
- Citywide Network Total Cost of Ownership StudyA weighted scoring instrument for a manufacturer standard ahead of a refresh — which earned itself within three weeks, when a reseller's savings claim turned out to be priced against the wrong baseline.
- Gunshot Detection and Active-Shooter Tracking Feasibility PilotShotSpotter acoustic detection tied to Bosch camera estates and Genetec video management, tested against a seconds-not-minutes requirement.
- New River and Kanawha Falls Site Assessment and Carrier Coverage AnalysisSite assessment and carrier coverage analysis for treatment and pumping facilities on the New River and at Kanawha Falls, paired with the communications design each site needed.
- Enterprise AI Readiness AssessmentTwo years of technology review and systems analysis on where AI could fit a consolidated city-county government — and, as often, where it could not yet be defended.
- Ed Ball Hearing Room — Backup Council ChambersA committee room specified to run a City Council meeting if the Chamber were unavailable — which makes it a continuity facility for the legislative body, not a meeting room.
- Architecture Review BoardThe successor governance body, and the first with a budget attached — a five-to-ten year capital plan rather than a rolling list of purchases.
- Enterprise Multi-Tenant Firewall ArchitectureSix independently governed agencies on shared infrastructure, none able to reach, disrupt or inherit the regulatory exposure of any other.
- Infrastructure and Integration AutomationRecurring infrastructure and integration work automated on orchestration platforms, governed on the principle that automation multiplies the blast radius of a mistake.
- Consolidated CAD/911 Dispatch SystemTwo agencies with separate commands onto one dispatch platform, cutting response times from five to ten minutes down to one to two.
- Data Center Estate and Colocation ProgramSix tiered sites for the city and five external agencies — and a municipal IT department selling colocation against commercial carriers, and winning on engineering.
- Medical Examiner's Office Enterprise IntegrationNine subsystems federated through one bus across three sites, with the integration layer itself made redundant.
- CBM Cost Model and Customer Billing SystemA full technology budget allocated across every agency by measured consumption rather than negotiation — designed in 2012, first implemented in 2013, owned for eleven budget cycles.
- Security Posture, Incidents and Federal LiaisonWorking directly with the City's Chief Security Officer on posture, governance, attacks and breaches — and alongside Homeland Security and the FBI when an incident reached that far.
- Enterprise Fortinet IPS DeploymentVDOM-separated inline intrusion prevention at the enterprise core, with separate policy per internet path.
- JaxReady — Public Emergency Preparedness PlatformThe City's evacuation and flood zone lookup, on mobile and the public web — carried into the emergency public information chain, and tested as critical infrastructure rather than as a website.
- Enterprise Technology Budget ProgramA $48M to $62M annual technology budget, built and defended in public across thirteen cycles for a consolidated city-county government.
- Architecture by InfluenceA CIO's instruction — manage by influence rather than by headcount — and the fourteen years of practice built on it, in an estate where nothing could be mandated anyway.
- Proving Products Before Recommending ThemA standing part of the architecture function rather than an occasional exercise — pilot against the estate's own conditions, then hand it over with the operators trained.
- Main Data Center Physical Connection LayoutThe as-built record of every port, patch and strand in the main data center — a naming convention where the identifier is the location, carried to revision 21 over fifteen years.
- Enterprise Architecture ProgramThe EA practice itself — business, information, technical and solution viewpoints, with strategy, assessments and multi-year capability roadmaps for a platform shared by agencies that answered to different elected officers.
- Enterprise Asset and Work Management PlatformFifteen years and two titles on a platform carrying several lines of business and two outside agencies — stood up as a governed project, fed from the systems that knew the truth, and split in the chargeback model.
- Jacksonville Intelligent Transportation SystemCommunications and network infrastructure across more than one thousand signalized intersections for a consolidated city-county.
- Enterprise Core NetworkThe city's core network across nineteen years — architecture, standards and, when it mattered, hands on the equipment.
- City Council Chamber AV and IT ArchitectureAudio, video, voting and broadcast systems for a chamber where proceedings are a public record — owned for twenty-one years.
- First Coast Radio SystemRegional shared public safety radio across three system generations — original, retrofit, and full P25 replacement.
- The Utility Relationship: Twenty-Five Years, Two EmployersSubject-matter expert to the same municipal utility from October 1999 to January 2024 — first as its consultant, then as the City's counterpart to it, because JEA is an authority under the city charter.
- Holographic Display EvaluationEmerging display technology assessed on a borrow-before-buy basis, closed as a zero-dollar equipment evaluation award.
- ISP Cutover, Public IP Renumbering and WAN ModernizationAn estate moved to a new provider and a new public address space, then modernized for remote and hosted working without dropping the applications the business ran on.
- PLC Alarm Notification over Cellular AssessmentHow a controller raises an alarm that reaches a human when the site has no operator in front of it and no network worth the name.
- NFL Stadium Cybersecurity ReviewA league Internal Audit assessment of the city-owned stadium against the Department of Homeland Security's stadium cybersecurity guidelines, reaching the building's control systems as much as its enterprise IT.
- Union Rome Water Treatment Plant Inspection and System DesignDrone-assisted survey, thermal imaging and coverage assessment across 32 sites along the Ohio River, ending in a design package specified down to the part.
- Vistakon Manufacturing Line IT/OT IntegrationLegacy production systems on a medical device manufacturing floor brought into one interconnected environment.
- Electronic Paper Tablet Assessment and RolloutA personal device that became a supported city endpoint — after the enterprise web filtering estate I had built turned out to be the thing breaking it.
- Clerk of the Court Filtering and DMZ ArchitectureA separate filtering estate and demilitarized zone for an independently governed constitutional officer sharing City facilities.
- Cecil Disaster Recovery Data CenterFacility and network design for the recovery site — power, cooling and carrier entry as well as what ran inside.
- Nine Years to an Integration PlatformA platform question carried across two evaluations and nine years — lost in 2014 to a vendor who could discount faster than a migration could be justified, and answered in 2023 by attaching it to a building.
- Solid Waste Systems ModernizationLegacy route, fleet and scalehouse systems replaced and integrated to cloud, sequenced around an operation with no slow season.
- Fire & Rescue Mobile Gateway and SD-WAN OverlayThree hundred apparatus turned into routed nodes on the enterprise network — dual carriers on private APNs, head-ends behind two providers, and a zero-trust overlay behind a firewall virtual system built for the fleet.
- Oracle ERP Program — RFP to Cloud Go-LiveTwelve years from the 2011 request for proposal to a 2020 cloud go-live — the cost model that had to exist first, and a cutover instrumented so neither side could blame the other.
- The Virtual Desktop PositionA decade of evaluation whose deliverable was a refusal — two platforms piloted and closed by change order, and an objection that held for eight years.
- Downtown Campus Distributed Antenna SystemA neutral-host DAS carrying four commercial carriers, public safety radio and Wi-Fi — owned across two full platform generations.
- The Capital Project Evaluation MatrixThe weighted scoring instrument behind the City's technology capital funding — and the single workbook built in March 2009 that was still deciding a security product purchase fourteen years later.
- Enterprise GIS PlatformSeventeen years of architecture authority over the City's geospatial estate — and the record of it is a capacity and availability record rather than a mapping one.
- Port-Level Authentication: The 2006 PositionAn argument made in 2006 that securing ports by MAC address was not the answer — held across four platform generations, and in production fifteen years later by a route other than the one proposed.
- JTA and Downtown Transit ConnectivitySeventeen years on the boundary between two public agencies that could not direct one another — first as the city's architecture review on transit proposals, then as owner of the interconnect itself.
- Library Wireless ProgramFrom reported dead spots to an engineered coverage program, on an estate where the wireless carried staff safety devices.
- Enterprise Audiovisual-over-IP FabricFive sites on one fabric across eighteen years — Council, the Emergency Operations Center, the Ed Ball backup rooms, the Cecil Field backup 911 facility and a youth services agency — so a room stopped being a closed system.
- Citrix Published Application EstateEighteen years, five platform generations and roughly 4,000 billed seats — with a per-seat price an agency could argue with.
- Enterprise Web Filtering and Content SecurityEighteen years and five vendor generations, split two ways between a government workplace and a public library on the same infrastructure.
- Jacksonville Public Library NetworkEighteen years and two full redesigns of a central library and its branches, from the Main Library's opening to the carrier handoff.
- Reliability Engineering PracticeA reliability toolchain bought for one utility engagement in 2000, carried into a city estate, and still running twenty-three years later — availability as a computed number rather than a drawn assertion.
- Fayette County RF Propagation and Municipal Backhaul EvaluationPropagation and tower analysis for a West Virginia county, with backhaul evaluation for the municipal infrastructure that had to report over it.
- Building Automation and PoE Lighting Feasibility PilotWhether a building could move to PoE lighting without stranding the legacy lighting already installed.
- Enterprise Network Access ControlSeven years from vendor evaluation to a control that could quarantine a port anywhere in the city — and the federated exception handling that made enforcement survivable in a building shared with four other agencies.
- Council Chamber ModernizationFour requisitions across eight years to rebuild one chamber — with the vote decoupled from the broadcast, verification moved before the session, and acceptance proven in live proceedings.
- Enterprise Packet Capture and Network Forensics PlatformFull packet capture on eight critical-path points, owned across thirteen years and two platform generations, with retention pushed past thirty days.
- Requirements or Findings: When Architecture Gets CalledThe same function with the same authority produces requirements on one capital program and findings on another — and the only variable is whether the project called it before or after the build.
- Administrative Identity for the Network EstateSixteen years and three platform generations of who may type a command on a city switch and what is recorded when they do — begun as a procurement condition in 2006, closed with multi-factor and a duty-separated account standard.
- Enterprise Traffic Management PlatformSixteen years on a platform chosen for what it could be programmed to do rather than what it did on the day — bought as a server proxy in 2006 and ending as continuity infrastructure.
- E911 Caller Location and Backup Answering PointMaking the dispatcher see a room instead of a phone number — then building a second answering point so the dispatch center was not a single point of failure.
- FLGISA Cost Model ProgramTaking the City of Jacksonville's IT cost modeling, chargeback and allocation approach to peer jurisdictions across multiple conference years.
- Juniper Enterprise Security SuiteA security platform rather than a firewall — selected on an instrument written before anyone knew who would win, operated for twelve years, and retired in stages on a plan the same team wrote.
- Architecture Technology Governance CommitteeThe second governance body, and the one where architecture decisions were actually worked — with the operations and delivery teams in the room rather than only architects.
- Emergency Operations Center ActivationsSeven activations keeping public-safety and EOC systems available under hurricane conditions — in Logistics from 2006 and as the division's Emergency Coordination Officer from 2008 — with each after-action review fed back into the architecture.
- Disaster Recovery Validation and Application TieringCriticality bound to recovery objectives in an instrument rather than a narrative, and a definition of "tested" that the estate could not yet meet — reported rather than softened.
- Republican National Convention — National Special Security EventCritical Infrastructure Subcommittee for a national special security event relocated to the city eight weeks into planning — first-responder mobility, venue design, carrier redundancy, and federal sensors landed on a municipal estate.
- Florida LambdaRail Regional ConsortiumFive independently governed public bodies onto the state research and education network, over fiber paths that could be proven separate.
- Parking Meter InfrastructureCommunications and back-end connectivity for street-level metering, with the traffic enforcement division.
- Public Access Wireless ProgramFourteen years and four program names — JaxWiz, municipal Wi-Fi, public wireless, Downtown Wi-Fi — from inheriting somebody else's pilot to a signed, mapped downtown build still being extended four years later.
- Annex to Main Data Center ConsolidationMoving one data center into another with the estate live throughout, on three design documents at revisions ten, twelve and ten.
- Public Records Request MethodologyThe workflow by which a citizen's request becomes produced records under Florida statute.
- Records Retention and Disposition StandardsClassification, retention and defensible disposition under Florida public records law, across an estate where criminal justice records, patient information, court records and elections data shared one platform.
- Digital Divide Broadband PilotsHome internet for the lowest-income neighborhoods of Jacksonville, sited by demographic need rather than engineering convenience.
- Ed Austin State Attorney's OfficeNetwork infrastructure, VoIP telephony and building automation for the State Attorney's building.
- Enterprise Firewall Policy and OperationsEight years running the rule base directly across two platform generations — every rule, change and upgrade — then handing it down to a dedicated post rather than holding it.
- Comprehensive Performance Management — JaxOps, JaxAnalytics, JaxScoreThe division's flagship analytics program in three layers, ending in a public dashboard — where disclosed numbers constrain the model underneath rather than the presentation on top.
- Enterprise Business Intelligence Platform and CapabilityArchitecture authority over the City's analytics platform, held deliberately apart from the group that built the reports — with the capability hired and taught to a published standard.
- Fiber Proximity Web ApplicationA mapping tool answering which municipal fiber ran near a given address across a 220-location plant — where the engineering was straightforward and the data was not.
- ITD Continuity of Operations PlanA two-hundred-page all-hazards continuity plan whose first instruction is to skip the plan and go straight to the appendices.
- Automated Asset Tracking ProgramNine years carrying the asset tracking agenda across two titles, argued on billing accuracy rather than loss prevention — and ending in a position and a scoped proof of concept rather than a deployment.
- Automatic Vehicle Location ProgramA transit and traffic system that became a public works and code enforcement fleet estate — 167 units across thirteen divisions, owned from the transport underneath it to the strategy on top.
- Municipal Fiber PlantCitywide outside plant built as interlocking rings, designed down to conduit, manhole, slack and splice.
- St. James Building WirelessBuilding-wide wireless for City Hall, specified as a measurable coverage floor with heat maps as acceptance and the remediation cost carried by whoever promised the number.
- Telemedicine Program with Hospital PartnersDuval County Jail to UF Health — fifteen months from vendor presentation to completed pilot, opened with a business case rather than with equipment.
- One Spark Festival WirelessForty-two access points in downtown traffic signal cabinets, backhauled over the fiber that runs the lights, with Ubiquiti mesh between intersections as the fallback and a tenfold internet burst for the week.
- Emergency Vehicle Signal PreemptionITS integrated with vehicle location so responding apparatus could clear the route ahead of them.
- The SHA-2 Migration That Reached DispatchA routine certificate renewal that broke a live estate through its oldest endpoints, stopped station alerting in seventy-plus fire stations, and was resolved by deliberately keeping one service weak.
- Courthouse Trial BroadcastA controlled pooled broadcast out of a courtroom for high-profile trials — four cameras, coax to fiber through four floors, and a request to block cellular data on one antenna node while leaving voice alone.
- Student Capstone Security Engagement and College PartnershipsA student team given scoped authorization to penetration test the live city estate — and a written response to their findings, taken to a second revision, rather than a thank-you note.
- Biochemical Manufacturer Converged NetworkHeadquarters, an affiliated business and a plant site joined over encrypted tunnels on consumer DSL — where the reliability had to come from the design, because it was not coming from the circuits.
- Enterprise Security Committee and Governance ProgramThe city's enterprise architecture review board, chaired and chartered — and, in the years before the City had a Chief Security Officer, the body where security policy was set.
- Duval County Courthouse Technology ProgramA $12M IT program inside a $350M, 800,000 square foot capital facility, cut over live to a fixed date.
- Enterprise Change Management StandardA change process designed for a utility in 1999, carried into the City as its enterprise standard, and handed to operations in 2012 — after which it outlasted both commercial platforms bought to run it.
- Internet Perimeter Firewall ReplacementAn unsupported, undocumented Check Point estate replaced with firewall blades in the core — held as a stated performance objective, carried from written justification to floor-by-floor cutover, with no vendor producing a design at any point.
- Cisco DOCSIS Residential Cable BuildoutsGreenfield residential cable plant, headend policy, address management and voice — and one public address pool carrying thousands of residents.
- Super Bowl XXXIX Surveillance Network and Command CenterThe transport and command center behind the video surveillance estate for the 2005 Super Bowl — evaluated, architected and overseen by the same person, deliberately.
- Super Bowl XXXIX Stadium WirelessTicketing and access control across seven stadium gates for the 2005 Super Bowl, backhauled over six point-to-point bridge pairs, in the most hostile radio environment there is.
- Fort Stewart Mobile Disaster Recovery FleetA fleet of vehicles able to deploy across Georgia during disasters and operate where fixed infrastructure was gone.
- JSOC Content Distribution CapabilityCisco Content Engines placing data locally at each site to cut lag between the United States and locations outside it.
- SOCOM Transportable Wireless KitA two-site voice, video and data package over a point-to-point link where no fixed infrastructure existed.
- GE International Power Generation Monitoring NetworkReal-time plant telemetry from generating facilities in China and Australia back to a monitoring center in Florida.
- Georgia-Pacific IT/OT ConvergenceProcess control and SCADA alongside HVAC, access control and video on the enterprise network — before the industry had words for it.
- Duval County Substation NetworkEvery electrical substation in the county connected for centralized management and monitoring.
- Nissan and Georgia-Pacific Industrial WirelessPlant-floor, material handling, yard and warehouse coverage surveyed on site with the lines running.
- JEA Power Quality Metering NetworkVoltage sags, swells and harmonics measured at ten substations — one template design, an addressing plan built for it, and fiber off the ground grid, before the data was aggregated into the PIE SCADA platform.
- Kerzner International Resort PMS IntegrationGuest internet and marina shore power authenticated, metered and posted to a room account across resort properties.
- Hospital Network and Clinical WirelessFacility-wide clinical wireless under HIPAA across hospital systems in New York, Florida, Delaware and North Carolina.
- JEA Utility SCADA and Redundant Control SitesSCADA across 24 treatment plant sites on a SONET and ATM core — water and wastewater engineered as separate systems, with the control network separated from the corporate one two decades before the industry had a name for it.
- Statewide Florida Wireless InstallationsTower, antenna and LMR feed line work across the state, alongside the RF design.
- Rosen Hotels BBSM Custom DevelopmentGuest transaction, port hopping and cross-property rates built in the Cisco BBSM SDK — and closed by telling the customer to wait for the next release.
- Florida Rock Facilities Technology AssessmentEstate-wide survey establishing what could be connected, what it would cost, and what had to be built first.
- Florida National Guard Continuity of Operations PlanThe first COOP of the career — the discipline carried forward into the City of Jacksonville plan a decade later.
- Insurance Carrier E-Commerce PlatformMainframe to public web in 2001, across a colocation tunnel and two firewalls — where the deliverable was the boundary, not the website, and the documentation reached revision 243.
- Nassau County Sheriff's Office Countywide WirelessMulti-tower public safety wireless across a large rural county, surveyed by driving it and plotting the readings by hand.
- E-Commerce Site ArchitecturePIX firewalls, content switches and SSL accelerators for early commercial web estates.
- Emergency Operations Center Wireless NetworkA fault-tolerant Motorola wireless network built specifically for EOC use during natural disasters.
- JEA Change Management SystemA web-based change management process and system designed from first principles, later carried to the City as the enterprise standard.
- Vystar Credit Union Windows 2000 DomainA complete Windows 2000 domain design for a regional credit union.
- Water Treatment Facilities WAN/LANWAN and LAN design for water treatment facilities, with PIX firewall and web monitoring.
- National Insurance Carrier Enterprise WANFive sites joined over an AT&T frame relay cloud at committed rates from 32K to 320K — an era when the design had to decide what mattered, because not everything could.
- StorComm PACS PlatformChief system designer of a clinical picture archiving and communication platform for hospital customers.
- StorComm Teleradiology PlatformDiagnostic imaging delivered to radiologists at home over ISDN and dial-up — telemedicine fifteen years before the market used the word.
- Prudential Scanning, Imaging and Workflow ProgramSpecialized support for a two-year imaging and workflow program, as one of three on the imaging team.
- CSX Railroad Map DigitizationDigitizing CSX property maps dating back to the 1800s, with MDL application development against MicroStation.