Services

Five practice areas.

Every engagement is quoted in writing after an initial call, as a monthly retainer, a project or a fixed-fee review.

Agentic AI and MCP

AGENTS IN PRODUCTION

Agents that work across your first- and third-party systems through custom MCP servers, with access limited to what each user is allowed to see.

What I have done

·Took agents from prototype into production for the largest enterprise customers at Superhuman

·Published an open source MCP server to npm, listed in the official MCP Registry

What is included

·Agent architecture and tool design

·Custom MCP servers over your systems, with OAuth2

·Permission-aware data access, per user and per tenant

·Evaluation and rollout, with a runbook your team keeps

Cloud architecture

GOOGLE CLOUD CERTIFIED

Target architecture, IAM and migration planning, with the security review done before anything moves.

What I have done

·Built production services on Cloud Run, Secret Manager, Firestore and Cloud Storage, with the CI/CD around them

·Earned the Google Cloud Professional Cloud Architect certification

What is included

·Current-state review and target design

·IAM, org policy and least privilege

·Services built, deployed and monitored on Cloud Run

·Migration plan, sequenced and costed

·Security posture and audit readiness

Identity and access

SSO, SAML, SCIM, OAUTH 2.0

Single sign-on and user lifecycle for a managed fleet, across Windows, macOS, browser and VDI.

What I have done

·Led the technical work on SAML SSO and SCIM for organization-wide Grammarly deployments

·Shipped identity changes and fixes that let Grammarly’s internal teams audit each user’s SCIM state and the services enabled for each customer in each beta phase

·Shipped sign-in bound to a Secure Enclave device key in an iOS app on the App Store

What is included

·SSO design and rollout, SAML and OAuth 2.0

·SCIM provisioning and deprovisioning

·Managed-device deployment at fleet scale

·Hardware-bound device keys, Secure Enclave and passkeys

·Escalation work on integrations that have stalled

Applications, built and shipped

IOS, MACOS, WINDOWS, WEB

Complete applications, from the iOS, desktop or web client down to the API and data layer underneath.

What I have done

·Carried an iOS app through TestFlight and App Store review, and out to users

·Built Appraisal Intelligence, a Windows and Mac app for UAD 3.6 appraisal reports, now in pilot with one firm

·Published developer tooling to npm

What is included

·iOS and macOS, Swift, SwiftUI and React Native

·Desktop for macOS and Windows

·Web front ends and the API behind them

·App Store and TestFlight release, signing included

·Tests, CI/CD and handover documentation

Blockchain and ledger

BTA CERTIFIED

Custody, recovery and decentralized identity for products built on the XRP Ledger.

What I have done

·Shipped a self-custody identity app to the App Store, built so the server cannot decrypt or sign anything a user owns

·Published open source XRPL identity tooling to npm

·Earned the BTA Certified Blockchain Solutions Architect credential

What is included

·Custody and recovery architecture

·XRPL integration, XLS-20, XLS-40, XLS-70

·Decentralized identity and credentials

·Threat modeling, and proof on testnet before mainnet

Send a short description of the project. I quote the full engagement in writing after a call, before any work starts.

Start a conversation