1993–present
Technology
What was picked up, when, and what grew out of it.
Left to right is time. Each row is one of the 20 domains, ordered so kindred disciplines sit next to each other rather than alphabetically — a landscape only means anything if neighboring rows belong together. Height is the work running in that domain in that year, weighted by what failure would have cost — life-safety ×3, a statutory obligation ×2.2, the estate itself ×1.5, an evaluation ×1. Every project declares which of those it was, so each ridge traces to an entry you can open and disagree with. The yellow markers are five-year meridians.
101 entries across 20 domains. Each one lists the projects that used it, so the index doubles as a map of where the experience actually sits.
The terrain above is where the work was. This is what was held — every discipline stacked in the order it first appeared, which only ever grows.
Aerial Systems
- Aerial Survey & InspectionCondition assessment of assets that are expensive, unsafe or simply slow to inspect from the ground.
- Part 107 OperationsThe regulatory and command discipline of commercial flight — certification, airspace authorization, risk assessment and go/no-go judgment.
- Sensor Payload DesignCustom LIDAR and Raspberry Pi payloads designed and built in-house — the sensor package built to the inspection rather than bought off the shelf.
- Unmanned Aircraft SystemsSmall unmanned aircraft operated commercially — airframes, sensors and the data products that come off them.
Artificial Intelligence
- Applied AIAssessment from 2022 at the City of Jacksonville, then daily use from 2023 across four model families — and Claude APIs integrated into the Itential orchestration platform alongside the vendors.
- Video Analytics & SurveillanceDeep-learning detection, classification and alerting — evaluated against a real requirement rather than a brochure.
Audiovisual & Broadcast
- Audiovisual ArchitectureWhat happens to an audiovisual estate when video becomes network traffic — rooms stop being closed systems, and a purchase becomes a network design question.
Automation & Change Governance
- Change ManagementA process designed from first principles, proven, and only then fitted with a commercial product — which is the right order.
- Endpoint & Device ManagementManaging machines nobody is going to walk to — from Systems Management Server pushed to remote hospital sites in 1997 to Intune across a 6,500-endpoint municipal estate.
- Orchestration & AutomationItential, webMethods, Terraform and Kubernetes — governed on the principle that automation multiplies the blast radius of a mistake.
- Published Application DeliveryDelivering an application to a desk without putting it on the desk — eighteen years and five platform generations, and the mechanism that kept dead software alive on a supported endpoint.
Business & Commercial
- IT Cost Modeling & ChargebackA full technology budget allocated across every agency by measured consumption rather than negotiation — designed in 2012, first implemented in 2013, owned for eleven budget cycles.
- Portfolio Planning & CommercialA $48M–$62M annual budget built, allocated and defended in public — plus TCO, ROI, build-versus-buy and vendor management.
Cloud & Hybrid
- Cloud & Hybrid ArchitectureWorkload placement, tenancy and the segmentation that ties cloud back to the enterprise — evaluated against recovery objectives and what they cost.
- Cloud MigrationA $42M move off mainframe onto Oracle ERP in AWS, with isolated environments and controlled promotion between them.
Community Broadband & Digital Equity
- Community Broadband & Digital EquityHome internet for the lowest-income areas of Jacksonville — sited by demographic need rather than engineering convenience.
Data & Records
- Asset and Work ManagementThe register an organization bills from, schedules from and recovers from — and the feeds that decide whether any of those are true.
- Business Intelligence & Performance AnalyticsArchitecture direction and standards over an enterprise analytics platform, held separately from the group that built the reports on it.
- Data Classification & RetentionClassification schemes that had to survive a court rather than an audit.
- Geospatial PlatformsAn enterprise map estate judged as a public service rather than as cartography — where the interesting record is capacity, availability and whose data the layers belong to.
- Legacy Data & Format RecoveryKeeping a correct but frozen application alive by rebuilding what it reads rather than what it does — undocumented formats recovered, and every conversion proved by exact round trip.
- Legislative SystemsThe systems a legislative body's own process runs on — where the thing that stops when they fail is a vote, and the fallback for a roll call is paper.
- Public Records LawThe workflow by which a citizen's request becomes produced records under Florida statute — designed to make production repeatable rather than heroic.
Design & Engineering
- AutoCAD & MicroStationWhere the career began — and the tool used decades later to plot wireless coverage heat maps by hand.
- Reliability EngineeringComputing whether a design will meet its availability target before it is built — and treating drawn redundancy as a claim rather than a result.
- SQL & Data PlatformsSQL Server administration and database design from 6.5 onward — and object database work that predates it.
- Windows Server EstatesNT 3.51 through Windows 2000 — directory, messaging, proxy and systems management, at the depth of a twenty-five-exam MCSE.
Education & Outreach
- Architect DevelopmentBuilding an architecture practice of up to fourteen, on a weekly rhythm and a design review gate, and moving engineers into senior and lead roles.
- STEM Education & MentoringRobotics mentoring, curriculum and hands-on instruction — including First Lego League coaching going back decades.
Enterprise Architecture & Governance
- Application RationalizationReducing a portfolio assembled independently over decades — platform consolidation, technology lifecycle planning and technical debt reduction.
- Architecture GovernanceReview boards, charters and the design of decision-making bodies — including one written so its chair could be outvoted.
- Capability RoadmappingCurrent, interim and target-state design, multi-year capability roadmaps, and enterprise architecture assessments across a federated estate.
- Design DocumentationThe discipline of writing a design down, revising it under review, and stating its own risk plainly — carried to revision 16, 26 and 35 on the largest programs.
- Enterprise ArchitectureThe discipline of placing technology correctly in a business's data flows, risk posture and cost structure — the through-line of the last two decades.
Healthcare & Clinical Technology
- Clinical Imaging SystemsPACS, DICOM and hospital information management — the subject of the first architecture role, in 1997.
- Regulatory Compliance ArchitectureHIPAA, CJIS, NIST 800-53, PCI and Florida public records law — often on the same record at the same time.
- TelemedicineRemote clinical encounters with live diagnostic imaging — and, fifteen years earlier and under a different name, diagnostic studies delivered to radiologists at home over dial-up.
- WORM & Immutable ArchivalWrite-once optical archival for regulated medical records in 1997 — the first of many systems whose retention rule was a law rather than a policy.
Integration & Operational Technology
- Asset Modeling & Naming StandardsOne hierarchy that supervisory control, historian and reporting all refer back to — the cheapest governance available, and the hardest thing on an estate to retrofit.
- Building Automation & Physical SecurityHVAC, access control, video and fire panels converged with the enterprise estate — and a PoE lighting question most pilots never ask.
- Energy Management SystemsReal-time telemetry from generating plants in China and Australia back to a monitoring center in Florida.
- Gunshot Detection & Active-Shooter TrackingAcoustic detection tied to camera estates so a detected round could be correlated with video and a subject followed rather than merely located.
- Hospitality PMS IntegrationGuest networks as a revenue line — walled-garden entry, metering, and posting marina shore power to a room account.
- IT/OT ConvergenceBridging plant networks and business networks — at a point when the industry still assumed they were separate problems for separate departments.
- Manufacturing Line IntegrationMachine-level visibility across legacy production islands on a medical device manufacturing floor.
- SCADA & Utility Control SystemsWater treatment and wastewater control across a utility estate, with redundant control sites — where the stakes are physical rather than informational.
- webMethods IntegrationEnterprise service bus and API gateway architecture — designed so the integration layer itself was not a single point of failure.
Intelligent Transportation
- Automatic Vehicle LocationFleet telemetry that starts as a traffic problem, becomes an operations tool nobody planned for, and splits along agency lines because the vehicles that matter most are on something else.
- Emergency Vehicle Signal PreemptionWhere ITS stops being a traffic-efficiency program and becomes a life-safety system.
- Intelligent Transportation SystemsCommunications and network infrastructure across more than a thousand signalized intersections.
- Roadside DetectionCounting vehicles and the people inside them — the two questions that decide whether ITS data is worth acting on.
Network Architecture
- Cellular and Carrier ConnectivityCarrier-borne connectivity for sites with no wireline option — coverage measured at the site rather than read off a carrier's map, and a gateway and antenna chosen to what was measured.
- Content DistributionEdge caching to defeat latency on long, constrained links — moving the data closer to whoever is asking for it rather than buying more bandwidth.
- Data Center ArchitectureData center network design, consolidation and live migration — including moving one data center into another with the estate running throughout.
- Enterprise NetworkingDesign, build and operation of routed and switched networks at enterprise scale — the discipline the CCIE attests to and the spine of the career.
- Legacy TransportATM, Frame Relay, Token Ring and multilink serial — the transport generation the career started on, retained here because the record should show what the work actually was.
- Load Balancing & Application DeliveryF5 LTM and GTM, content switching and SSL acceleration, from early e-commerce builds onward.
- Network SegmentationSeparating traffic that must not mix — done for regulatory reasons years before the industry settled on micro-segmentation and zero trust as words for it.
- Quality of ServiceEngineering head-end bandwidth explicitly rather than buying more of it — weighted random early detection, class-based weighted fair queuing and policing.
- Research & Education NetworksFlorida LambdaRail connectivity for a five-agency regional consortium — a governance problem wearing a network's clothes.
- Routing ProtocolsBGP, OSPF, EIGRP and HSRP in production — including metric and delay-based path control across links of deliberately unequal capacity.
- SD-WANOverlay wide-area networking where path selection becomes a policy decision — and where a policy mistake expresses itself at every site at once.
- Subscriber Edge & Carrier-Grade NATThe plane where a residential subscriber is terminated, addressed, rate-limited and accounted for — and where thousands of households share one public address pool.
- VoIP & Enterprise TelephonyVoice as a designed service — including survivable local call processing so a building keeps dial tone when the path to the central platform fails.
- WAN ArchitectureWide-area transport, carrier strategy and circuit design — from bonded serial links to intercontinental telemetry and diverse carrier entry.
Physical Infrastructure
- Data Center Facility DesignThe power and cooling underneath the architecture — floor plans, rack elevations, containment, dual UPS and independent A/B electrical paths.
- DOCSIS & HFC Cable PlantGreenfield residential cable buildout — plant layout, feeding fiber and headend-side design, laid before the streets were finished.
- In-Building DistributionRiser and horizontal distribution designed for resilience — diverse A and B paths to every closet rather than a single run per floor.
- Outside Plant FiberMunicipal fiber plant designed down to conduit, manhole, slack and splice — built as interlocking rings so a cut takes out a path and not a building.
- Physical Path DiversityProving that two paths are actually separate — by routing them over infrastructure you own rather than trusting a carrier's map.
- Tower & Antenna WorkClimbing the tower, mounting the antenna, running and terminating the feed line — and never designing a wireless site the same way afterwards.
Public Safety Radio
- Land Mobile RadioRegional shared public safety radio across three system generations and two decades — a rare thing to be able to say about infrastructure replaced once a generation.
- Multi-Agency InteroperabilityA utility, law enforcement, fire and rescue and emergency management operating over infrastructure none of them individually owned.
- Project 25 Trunked RadioThe Motorola P25 platform the regional system was ultimately replaced on, carrying a 10,500-radio fleet.
- Radio Site & Tower DesignTower and site design, coverage validated in the field, and redundancy that had to be proven before a storm rather than during one.
Resilience & Emergency Operations
- Continuity of OperationsA two-hundred-page all-hazards plan whose first instruction is to skip the plan and go straight to the appendices.
- Deployable InfrastructureKits built for reproducibility — because a capability has to work in the hands of whoever draws it, not only the person who built it.
- Disaster RecoveryRecovery architecture across multiple data centers, with out-of-region standby and a formal separation between backup and archive.
- Emergency OperationsSeven hurricane activations as Emergency Coordination Officer, each producing an after-action review that fed back into the architecture.
- Public Emergency Information PlatformsThe public side of emergency management — where a citizen-facing service is the channel residents are told to use, and its availability stops being a web operations concern.
Security Architecture
- Criminal Justice Information BoundarySeparating CJI-bearing paths from general traffic end to end, reviewed with the state's CJIS authority and carried through thirty-five revisions.
- Device Administration & IdentityWho may type a command on production infrastructure, and what is recorded when they do — seventeen years across three platform generations, ending in multi-factor and duty-separated accounts.
- FortinetVDOM-separated inline intrusion prevention at the enterprise core, with separate inspection policy per internet path.
- Intrusion Prevention & DetectionInline inspection at the core designed to fail open rather than down, with monitoring segments planned in from the start.
- Juniper NetworksThe city's security estate for a period, and a deliberate second vendor track twelve years into holding a CCIE.
- Link & Platform CryptographyMACsec at the link layer and FIPS 140-2 validated platforms, where the standard is a compliance obligation rather than a preference.
- Multi-Tenant IsolationSix independently governed agencies on shared infrastructure, none able to reach, disrupt or inherit the regulatory exposure of any other.
- Network Access ControlDeciding what may join a network and proving it — from arguing against MAC-based port security in 2006 to operating citywide enforcement across agencies that could each stand it down.
- Packet Capture & Network ForensicsFull packet capture on the critical path, retained long enough to reconstruct an event rather than merely notice one.
- Palo Alto NetworksThe platform underneath the city's multi-tenant firewall boundary — multi-vsys, per-tenant routing domains and policy on shared hardware.
- Post-Quantum CryptographyCrypto-agility at scale, which is an inventory and mass-change problem before it is a cryptography problem.
- Security ArchitectureSecurity-by-design across estates with conflicting statutory obligations — where the classification scheme has to survive a court rather than an audit.
- Web Filtering and Content SecurityEighteen years and five vendor generations of the one control that touches every user every day — and, in a government estate, the one whose decisions are public records.
Wireless
- Distributed Antenna SystemsNeutral-host in-building DAS carrying four commercial carriers, public safety radio and Wi-Fi on one shared plant — across two full platform generations.
- Fixed Wireless BroadbandMotorola Canopy point-to-multipoint distribution off municipal towers, modeled for coverage before a mast went up.
- Industrial & Plant-Floor WirelessCoverage that has to hold while the line is running — production areas, material handling, yard and warehouse, surveyed on site.
- Point-to-Point WirelessLicensed-exempt bridges carrying voice, video and data where no fixed infrastructure exists — with the encryption placed above the link rather than inside it.
- RF Propagation ModelingCoverage modeled in EDX Wireless and validated in the field — because coverage is not a map exercise and the failure mode is a radio that does not reach anybody.
- Wireless LAN DesignEnterprise and building-wide WLAN across hospitals, plants, courthouses and a Super Bowl stadium.
- Wireless MeshMunicipal 802.11a mesh on light poles, backhauled from a city tower, with residential traffic tunneled clear of the government estate.
- Wireless Site SurveyMeasuring coverage on site rather than predicting it from a floor plan — including a countywide drive test in the era before the software existed.