Skills
Five-dot scale, calibrated against actual production use. Where a project on this site exercises a skill, it's linked; project pages link back here for context.
Azure + Microsoft 365 across a national, multi-site estate today; before that, hybrid AD + Office 365 for a regional services business. Comfortable with the entire stack: networking, identity, endpoints, ITSM, security baselines, M&A integration.
Python and PowerShell are my daily drivers, and the newest layer is agents. An autonomous triage agent runs in production on Azure Functions: it reasons over the whole ticket, escalates through a cheap-first model cascade, and confirm-gates every action that changes state.
Alongside it, an MCP server exposes the IT team's operational systems to Claude as one governed connector, over a Supabase backbone that unifies six source systems.
Keeping identity consistent across systems never designed to talk to each other: Entra ID as the source of truth, the HRIS flowing in over SCIM as the HR system of record, and scheduled exports flowing out to the data warehouse and to the Cornerstone LMS on an Azure Logic App.
Two AI policies that apply company-wide, plus a developer handbook and repo template that make compliance the fast path. The admin configuration is version-controlled and applied by pull request rather than edited in a console, so policy is diffable, reviewable, and recoverable like everything else.
Self-taught mobile development, with a paid iOS and Android app now maintained in Flutter. Built a Next.js + TypeScript platform on Cloudflare Workers that runs a real-world sports league. Web work on Astro + Tailwind + Cloudflare for acquired-company marketing sites.
Teams outside IT seek my direction on Fabric semantic models and row-level security, Snowflake SQL and query optimization, and AI-assisted Power Platform applications. The work is architecture, security, and integration direction across teams, regardless of reporting lines.
My IT Director role includes strategy, budget, vendors, and a small team. It also includes writing the scripts, drawing the architecture, and running the migrations. A three-person team supporting 850 users works because the person setting direction is also building the systems that absorb the load.
Where I've spent the most time. Hybrid Azure + on-prem identity, network, endpoint, and ITSM at enterprise scale.
Hybrid architecture, automation, security, monitoring
Used in: AI-augmented IT operations platform · IT Ops MCP server · IT documentation library, generated from live systems · Client Services activity report (serverless) · Client Manager distribution list automation · Entra stale-guest lifecycle automation
Launched M365 / Exchange Online at a prior employer; 12+ years total. Exchange, SharePoint, Teams, OneDrive, governance
Used in: Microsoft 365 PowerShell Admin Library · Microsoft 365 tenant architecture and governance · Client Services activity report (serverless) · Client Manager distribution list automation · HPSCAT vendor data ingestion pipeline · Security operations and incident response · Multi-region phone system consolidation on Teams Phone · Microsoft Fabric F64 migration · Full-stack technology modernization · Enterprise AI rollout, policy, and governance · Freshservice implementation
AD Connect, dynamic groups, Conditional Access, PIM, Privileged Identity Management
Used in: IT documentation library, generated from live systems · Microsoft 365 PowerShell Admin Library · Microsoft 365 tenant architecture and governance · Service catalog and onboarding/offboarding automation · HRIS integration via Entra ID SCIM · Employee SMS broadcast platform · Cross-platform data sync · Enterprise naming and identity standards · Microsoft Fabric F64 migration · IT operating-model standardization · Entra stale-guest lifecycle automation · Home lab and home automation
Windows + macOS (paired with Apple Business Manager federation)
Used in: Enterprise browser extension for a vendor portal · Intune fleet management and proactive remediations · Service catalog and onboarding/offboarding automation · Enterprise naming and identity standards · IT operations runbook library · Home lab and home automation
Meraki Systems Manager + Verizon MDM (prior employer), Intune for Windows and macOS (current employer), Apple Business Manager federated with Entra ID (current employer)
Hyper-V hosts, AD, file/print, virtual networking, VHDs
Used in: IT documentation library, generated from live systems · Multi-site Remote Desktop Services platform · Home lab and home automation
Connection Broker, Session Host, Gateway, Licensing. TLS-fronted Gateway with cert lifecycle.
Used in: Multi-site Remote Desktop Services platform · Home lab and home automation
Cisco Meraki MX/MR/SM across 51 sites; Ubiquiti EdgeMax + EdgeRouter X; Aruba Instant On switching and Wi-Fi; Ubiquiti NanoStation point-to-point bridges; CommandLink managed SD-WAN/NaaS migration across per-office ISPs (in flight).
Used in: IT Ops MCP server · Multi-site Remote Desktop Services platform · Managed SD-WAN / ISP standardization (multi-region) · Multi-site network architecture refresh · IT operating-model standardization · Home lab and home automation
Cross-vendor mesh (Meraki MX terminating against Ubiquiti EdgeRouter X)
Used in: Managed SD-WAN / ISP standardization (multi-region) · Multi-site network architecture refresh
Tadiran Coral → OnSIP → Zoom Phone (prior employer, published OnSIP case study, substantial cost reduction). Microsoft Teams Phone via BCMOne (current employer).
Used in: Multi-region phone system consolidation on Teams Phone
QuickBooks Desktop self-hosted, Right Networks, RDS / RemoteApp publishing
Used in: Full-stack technology modernization
Incident, problem, change, request, asset, knowledge; thousands of tickets a year
Used in: IT Ops MCP server · Service catalog and onboarding/offboarding automation · IT operating-model standardization · Support channel centralization on Freshservice · Freshservice implementation · IT operations runbook library · Dell warranty to Freshservice sync · ScreenConnect remote endpoint ops toolkit
The default response to a repeatable problem. PowerShell-first for IT; Python for data and integration; the AI-augmentation layer is the next compounding step.
Advanced scripting, module dev, Graph API. Internal M365 admin library plus the PowerShell toolkit from a prior employer that predated it
Used in: Multi-site Remote Desktop Services platform · Microsoft 365 PowerShell Admin Library · Intune fleet management and proactive remediations · Client Services activity report (serverless) · Client Manager distribution list automation · HPSCAT vendor data ingestion pipeline · M&A IT Integration Toolkit · IT operating-model standardization · Entra stale-guest lifecycle automation
Data pipelines, FastAPI, SQLAlchemy, dbfread, automation. stdlib-first style; idempotent and resumable jobs
Used in: AI-augmented IT operations platform · IT Ops MCP server · IT documentation library, generated from live systems · Cross-platform data sync · Independent Mobile App Business · Dell warranty to Freshservice sync · ScreenConnect remote endpoint ops toolkit · Subreddit Sounds
Identity, M365, transitive group membership, extension attributes
Used in: AI-augmented IT operations platform · IT Ops MCP server · IT documentation library, generated from live systems · Microsoft 365 PowerShell Admin Library · Client Services activity report (serverless) · Employee SMS broadcast platform · Cross-platform data sync · HPSCAT vendor data ingestion pipeline · M&A IT Integration Toolkit · IT operating-model standardization · Entra stale-guest lifecycle automation
User lifecycle, approval routing, SMS, vendor data ingest, on-premises data gateway bridges to on-prem PowerShell
Used in: Client Manager distribution list automation · Service catalog and onboarding/offboarding automation · HRIS integration via Entra ID SCIM · Employee SMS broadcast platform
Bridges cloud Power Automate to on-prem file shares and PowerShell jobs
PR-per-feature workflow, GitHub Issues as the work queue, branch-based development; repo/org administration across the company GitHub org
Used in: Enterprise browser extension for a vendor portal · Matt's Volleyball League · Entra stale-guest lifecycle automation · Dell warranty to Freshservice sync · matt-taylor.tech
Scheduled multi-workflow data feed plus auto-deploy on push to main on the internal AI-ops platform; five cron workflows running the volleyball league's GroupMe communications hands-off; multi-stage CI/CD, matrix builds, secrets management
Used in: Enterprise browser extension for a vendor portal · Matt's Volleyball League · Entra stale-guest lifecycle automation · Dell warranty to Freshservice sync
Used in: AI-augmented IT operations platform
Unattended autonomous-agent host: webhook to queue to agent, auto-deployed from main
Used in: AI-augmented IT operations platform
Custom skill ecosystem for the IT team
Used in: AI-augmented IT operations platform · Enterprise AI rollout, policy, and governance · ScreenConnect remote endpoint ops toolkit
Live conversational triage agent: whole-ticket reasoning, subject-person resolution, vision-based screenshot reading, prompt caching, confirm-gated actions, deterministic fallback
Used in: AI-augmented IT operations platform · Enterprise AI rollout, policy, and governance
Haiku→Sonnet→Opus escalate-on-low-confidence cascade with surfaced confidence bands; judgment-led routing with guardrails kept at the write layer
Used in: AI-augmented IT operations platform
Deployed FastMCP server on Azure Container Apps exposing Freshservice, ScreenConnect, Meraki, Dell warranty, and Microsoft Graph as one namespaced connector; write tools gated at the identity layer via an Entra OAuth connector and delegated Graph on-behalf-of scoping
Used in: IT Ops MCP server · IT documentation library, generated from live systems · Enterprise AI rollout, policy, and governance
SRE-flavored breadth at SMB scale: multi-tool stacks combining vendor monitors, custom collectors, time-series databases, and visualization. Plus the storage and backup architecture that backs it all up.
Primary infrastructure monitor across Meraki / Ubiquiti / Aruba / Synology / Hyper-V / Windows / SQL / LOB
Used in: Three-layer observability stack · Home lab and home automation
Local TSDB backend on a prior employer's observability stack
Used in: Three-layer observability stack
Dashboards over InfluxDB for server, hypervisor, network, and storage telemetry
Used in: Three-layer observability stack
Authored synology.sh polling the Synology NAS via SNMP into InfluxDB
Used in: Three-layer observability stack
Per-role XML profiles (Hyper-V health, network, SQL, DCs)
Used in: Three-layer observability stack
Servers, endpoints, Hyper-V VMs at both employers; primary backup engine
Used in: Home lab and home automation
On-prem file platform (prior employer) and Veeam backup target (both employers)
Used in: Three-layer observability stack · Home lab and home automation
Off-site backup tier in the Veeam → Synology → Backblaze 3-2-1 pattern
Used in: Home lab and home automation
Whole-house scale across Zigbee, Z-Wave, and MQTT on a self-run home lab
Used in: Home lab and home automation
Where the side businesses live. Modern web on Astro and Next.js; mobile via cross-platform tooling, not native Swift or Kotlin.
afterhoursds.com, mattsvolleyball.com, acquired-company marketing sites
Used in: Matt's Volleyball League · matt-taylor.tech
Volleyball Engine on Cloudflare Workers via OpenNext
Used in: Volleyball Engine
Used in: Volleyball Engine
Used in: matt-taylor.tech
Acquired-company sites + Volleyball Engine + internal Worker projects; Pages Functions API endpoints with edge caching on mattsvolleyball.com
Used in: Enterprise browser extension for a vendor portal · Employee SMS broadcast platform · M&A IT Integration Toolkit · Volleyball Engine · Matt's Volleyball League · matt-taylor.tech
Subreddit Sounds (public), legacy FoxPro DBF exploration, internal AI-augmented IT ops platform
Used in: Subreddit Sounds
Single-container app packaging: Subreddit Sounds (public), self-hosted FastAPI services; runs on any Docker host
Used in: Subreddit Sounds
Containerized apps on personal Linux infrastructure: reverse proxy, TLS, scheduled/unattended jobs, browser-based first-run config with no secrets on disk
Used in: Subreddit Sounds
Schema design, migrations, RLS policies, audit columns, multi-source data lake patterns
Used in: AI-augmented IT operations platform · Volleyball Engine
Brand-distinct sites for three HVAC companies under one ownership umbrella
Current AfterHoursDS stack (cross-platform mobile)
Used in: Independent Mobile App Business
Database, warehouse, and BI work that ties IT and business reporting together.
Used in: Full-stack technology modernization
Snowflake-native Python stored procedures with EXTERNAL ACCESS INTEGRATION, Snowflake Tasks scheduling
Used in: Cross-platform data sync · Snowflake platform review: cost, performance, and security
Capacity, semantic models, RLS, external sharing, Copilot in Fabric
Used in: Freshservice reporting infrastructure · Microsoft Fabric F64 migration
DAX, capacity, semantic models, RLS
Used in: Freshservice reporting infrastructure · Microsoft Fabric F64 migration · Snowflake platform review: cost, performance, and security · Freshservice implementation
Embedded store for single-process apps; read-only immutable consumer access. Knowing where it stops: file-sync and unattended multi-reader workloads belong on a server database
Used in: Subreddit Sounds
Identity-first, platform-controls-first. Defender stack plus the discipline that comes from testing a posture from the outside rather than assuming it holds.
Defender for Endpoint, Identity, Cloud Apps, Office 365
Endpoint AV/EDR reads in the IT ops platform; confirm-gated scan/isolate
Used in: Security operations and incident response · IT operating-model standardization
Patch-state reads in the IT ops platform; confirm-gated deploy/reboot
Information Protection, sensitivity labeling, retention, eDiscovery
External assessments under written authorization. nmap, subfinder, SecLists.
Topical training on BEC, ransomware, malicious macros
AxTraxNG (Rosslare) door access at a prior employer; SEMAC Web at the current employer; Ubiquiti UniFi Video and Reolink NVR; self-pulled Cat6 runs
Used in: Home lab and home automation
The non-code parts that make the code parts work in real organizations.
PowerShell migration runners + an operating playbook generated from a docx codebase
Used in: M&A IT Integration Toolkit · Multi-region phone system consolidation on Teams Phone · IT operating-model standardization
Career-long discipline: one supported stack per layer across three offices and brands, then the same method scaled across nine regional estates. Target-state design, platform selection, documentation, phased migration, change leadership, and automation against standards.
13-domain internal IT documentation library generated from live introspection across Graph, Meraki, ScreenConnect, Freshservice, and Snowflake via an MCP server, then exposed back through that server as a read-only skill the ticket agent grounds its answers in; automated PowerShell-to-markdown into SharePoint
Used in: IT documentation library, generated from live systems · M&A IT Integration Toolkit · Enterprise naming and identity standards · Snowflake platform review: cost, performance, and security · Dependency-sequenced IT roadmap · Freshservice implementation · IT operations runbook library
Interlocking standards anchored on Entra ID Department: account, computer, and server naming; AD, Entra ID, M365 group, and shared-mailbox taxonomy; region codes; and IP address assignment. Drives dynamic groups, licensing, Conditional Access scoping, and Intune targeting.
Used in: IT documentation library, generated from live systems · Microsoft 365 tenant architecture and governance · HRIS integration via Entra ID SCIM · Enterprise naming and identity standards
Company-wide AI policy (with HR and Business Intelligence), AI-assisted development policy, IT code of conduct, plus the developer handbook and repo template that operationalize them
Used in: Enterprise naming and identity standards · Enterprise AI rollout, policy, and governance · Dependency-sequenced IT roadmap
User lifecycle, deployment, patching, backup and recovery, purchasing, and escalation procedures written for repeatable execution across the whole support team
Used in: Dependency-sequenced IT roadmap · IT operations runbook library
Where the alternative is rolling our own; when the answer is build, this informs that too
Used in: Managed SD-WAN / ISP standardization (multi-region) · Multi-region phone system consolidation on Teams Phone · Dependency-sequenced IT roadmap · Support channel centralization on Freshservice
A small team run properly, not a large one. Three people including me, covering 850 users across 51 offices. Plus what comes with the title: budget, vendors, the roadmap, and the board conversation.
Three people including me, roughly one support engineer per 283 users against a 1:50 to 1:100 industry benchmark. Small on purpose: standards and automation do the scaling headcount otherwise would.
Used in: IT operating-model standardization · IT operations runbook library
Grew an inherited technician into independent project ownership, including site telephony migrations, operational guides, and shared knowledge-base authorship under common editorial standards
Used in: Freshservice implementation
Designed and staffed an offshore helpdesk path after a headcount request was declined: sourcing, screening, and the SOPs and handoff procedures the role works against, so it ran off documented playbooks rather than tribal knowledge
Used in: IT operations runbook library
Programs spanning teams that don't report to me: the company-wide AI program with HR and Business Intelligence, support centralization across five teams, and IT integration for five acquisitions
Used in: M&A IT Integration Toolkit · Enterprise AI rollout, policy, and governance · Support channel centralization on Freshservice
Annual State of IT assessment feeding nine dependency-sequenced initiative documents, including staffing and organizational design re-costed against user growth. Reconciliation names what didn't move, not only what did.
Used in: Dependency-sequenced IT roadmap
Budget ownership for an 80+ location estate, cost allocated and defended across regional P&Ls, and contract lifecycle work: term-end sequencing to avoid early-termination fees, notice windows, invoice reconciliation
Used in: Managed SD-WAN / ISP standardization (multi-region)
Modernization plan presented to senior leadership; a licensing proposal drafted with per-user cost analysis and taken to board approval
Used in: Dependency-sequenced IT roadmap
Differentiators that round out the resume.
Self-taught SCO OpenServer admin to keep a prior employer's legacy service-management environment running; decommissioned after the 2014 platform cutover
Used in: Full-stack technology modernization
Debian (3CX evaluation), Ubuntu, CentOS
Used in: Three-layer observability stack · Subreddit Sounds
Python + dbfread, ad-hoc; exploratory not production
Used in: Full-stack technology modernization
CSR generation, cert lifecycle, private-key handling, DNS / domain ownership across internal and public-facing infrastructure
From a decade in the trade before IT. Maintained current because the discipline that earned them is the same discipline I bring to systems work.
Held current. Acted as the mechanical-contractor qualifier for a BPI Gold Star HVAC division.
Heat Pump, Gas, Oil, Air Distribution
All three certification types (I, II, III)
Building performance, blower door, duct blaster, thermal imaging
Residential and commercial load, duct, sizing, and design calcs
Gas piping, low and high voltage electrical, sheet metal duct fab