Lead, build, and automate IT

For founders and executives who need a technology leader at the table but not a full-time salary. I set the roadmap, own the budget and the renewals, answer the security questionnaires your customers send, and report to the leadership team in plain language. When the company is ready for a full-time leader, I help hire one and hand over.

• Technology roadmap and annual budget
• Security program, policies, and audit readiness
• Customer security questionnaires and due diligence
• AI strategy, tool selection, and usage policy
• Vendor selection, contract review, and renewals
• Acquisition due diligence and integration plans
• Leadership and board reporting
• Hiring and coaching the IT team

For companies that have outgrown "the person who is good with computers" but are not ready to hire an IT team. I take over day-to-day support, devices, accounts, and security, and I document everything so nothing depends on one person’s memory.

• Help desk for your team by email, chat, and phone
• New hire setup and offboarding, same day
• Laptop and phone management with remote patching
• Microsoft 365 or Google Workspace administration
• Security baseline: MFA, endpoint protection, backups
• SaaS app and license management
• Vendor management for internet, phones, and software
• Monthly report and quarterly planning review

Most IT departments grow by accident. Tools pile up, knowledge lives in one person, and requests arrive in five places. I assess what exists, fix what is urgent, then put the structure in place: one way to ask for help, clear ownership, documented systems, and the metrics that show it is working. If you need to hire, I write the roles and run the interviews.

• Assessment of people, process, tools, spend, and risk
• One request channel with triage, priorities, and response targets
• Team structure, role definitions, hiring, and onboarding
• Runbooks and system documentation that outlive any one person
• Onboarding and offboarding automated end to end
• Tool and license consolidation
• A 12-month roadmap the leadership team signs off on

I start with your team’s week, not with a tool. We list the work that repeats, then I build the agents, chat bots, and automations that take it off people’s plates. Every build has guardrails: what it can read, what it can change, and when it has to ask a person first. I also write the AI usage policy, so your team knows which tools to use and what data they can put in them.

• Workflow review: where AI saves time and where it does not
• IT and HR help bots in Slack or Teams
• Agents that keep tickets, trackers, and records up to date
• Integrations between HR, identity, and IT systems
• AI usage policy, approved tools, and data rules
• Training for the people who will run and extend the builds

Deals close on a date. IT has to be ready on that date and then finish the job over the next quarter. I run discovery, build the cutover plan, write the employee messages, and run the migrations so the acquired team keeps working the whole time.

• Pre-close IT due diligence and risk review
• Day-one access: email, chat, and core apps
• Google Workspace and Microsoft 365 tenant merges
• Slack, phone system, and collaboration tool mergers
• Domain renames and email cutovers
• Integration playbook: every asset and credential handed over within 30 days of close

1. T-30 Discovery Inventory the acquired company’s systems and contracts. Flag what must change before close.
2. Day 1 Day-one access New hires can sign in, find their team in chat, and reach the tools they need.
3. Day 30 Identity and devices Accounts move to your identity provider. Laptops enroll in your management platform.
4. Day 90 Consolidation Old tenants and contracts shut down. Runbooks hand off to your team.

Most companies have more SaaS apps than they think, and more accounts in them than they have employees. I move sign-in to one identity provider, turn on automated provisioning where the app supports it, and find the accounts that must not exist.

• Entra ID, Okta, Google, or Auth0 SSO (SAML and OIDC)
• SCIM provisioning and deprovisioning
• Identity provider migrations
• Access audits of SaaS users against your directory

I set up zero-touch enrollment, move fleets between platforms, and match your asset records to what is actually deployed.

• macOS and Windows management with Kandji, Jamf, or Intune
• Mobile device management for company and personal phones
• Migrations between device management platforms
• Asset inventory and hardware recovery

Security tools are easy to buy and hard to roll out. I run vendor evaluations and proofs of concept, negotiate through resellers, and deploy in phases so protection goes up without stopping anyone’s work.

• Secure web gateway and DNS filtering
• Endpoint detection and response
• Device compliance reporting
• Vendor evaluation, proof of concept, and negotiation

I work with landlords, cabling vendors, and internet providers so the office works on move-in day. When a location closes, I recover and dispose of the equipment.

• Network and Wi-Fi design and installation
• Server room power and cooling standards
• Meeting room video setup
• Door access and badge systems
• Office closures and certified equipment disposal

A lot of IT work ends up as scripts on someone’s laptop or an old server. I move that work into managed cloud services with proper networking, secrets, and logging, so it keeps running when people change roles.

• Google Cloud architecture and project setup
• Serverless pipelines between HR, identity, and IT systems
• Static outbound IPs for vendor allowlists
• Email and workspace domain migrations