• Built Okta SSO and SCIM provisioning from scratch with 20 to 30 app integrations for a confidential enterprise client, kickoff to go-live.
• Okta SSO and SCIM integrations plus a Slack migration and integration project for a confidential SMB client.

Clients are under NDA.

• Primary Okta administrator for about 500 users and 140+ SaaS applications: SSO app catalog, SAML, OIDC, SCIM, MFA, sign-on and conditional access policy, Universal Directory, groups, lifecycle management, device trust.
• Super Admin on Google Workspace, Slack, Zoom, and 1Password. Google Workspace end to end: org units, groups, security settings, sharing policy.
• Extended and maintained the joiner/mover/leaver pipeline; automated deprovisioning across 88 of 140 apps; offboarding time cut from about 45 minutes to 15-20 minutes per employee.
• Led the JumpCloud rollout for Windows and Linux endpoints and served as the primary Windows administrator.
• Primary IT person for three SOC 2 audit cycles with Vanta.
• Led company-wide AI tool rollouts (Gemini, Claude, OpenAI, Zoom AI Companion) with usage policy and access controls.
• Microsoft 365 administration for about 120 users: Exchange Online, SharePoint, Teams, OneDrive, licensing, update channels.
• Apple fleet management with Jamf and Apple Business Manager (Kandji briefly before the switch to Jamf). CrowdStrike alert triage and remediation.
• Participated in renewal and roadmap decisions for Okta, CrowdStrike, Druva, Netwrix Endpoint Protector, BetterCloud, Google Workspace, and Slack. Kept a formal app intake and tiering checklist tied to procurement.
• Level 1-3 tickets in Freshdesk and Jira. Configured Jira workflows and automation rules for IT teams. Built runbooks and knowledge base content. Mentored junior staff.
• Became the de facto technical lead about six months in, after the VP of Technical Support and the Director of IT both left, and ran a team of five for roughly two and a half years without a title change.
• Found an underused Okta Preview license (about $20K a year), pitched dropping it to the VP of Compliance, and negotiated unlimited Okta Workflows in its place.
• Worked with BetterCloud at an engineering level and served as one of their reference customers.
• Solo-led the GTM RBAC redesign across 32 job titles, later used as the template for the team's company-wide redesign.
• Led the Slack Business to Enterprise Grid migration across nine domains.
• Built SauceULM, an AI-assisted onboarding and offboarding dashboard on the Okta API and GAM that replaced a manual spreadsheet.

Interactive Offboarding workflow I built at Sauce Labs

• Sole IT resource for 14 properties and 450+ users. Site lead for technology decisions and vendors.
• Led the 450+ user migration from a legacy local POP/IMAP provider to Microsoft 365 Exchange Online, with some hotel domains migrated to Google Workspace.
• Active Directory, Microsoft Entra ID, Exchange Online, Microsoft 365 at every location. Standardized provisioning and access that had varied by property.
• VMware hosts for Micros, Oracle, SPA, and keycard systems (network and firewall work handled by outsourced MSP vendors, which I supervised and reviewed).
• Windows endpoint fleet through Syncro: baseline configuration, patching, inventory. Early exposure to Intune before standardizing on Syncro.
• Deployed Synology NAS at 8 properties and set up AWS S3 and Glacier cold storage.
• Maintained network infrastructure, firewalls, and VPN connectivity across all properties.
• Hardware and software lifecycle, procurement, vendor coordination, device deployment, meeting room technology. Trained staff on new systems.

• Two-person IT team supporting 400-500 employees and about 600 endpoints. Daily ticketing in ServiceNow.
• Co-managed 26 Windows Servers and 2 Linux servers, becoming the primary admin after the first six to seven months of training.
• Led the replacement of about 280 Ruckus access points, managed via Superclick/MAMA, from planning through completion, including physical installation and cabling.
• Mobile devices through AirWatch (VMware Workspace ONE), iOS and Android.
• PCI-DSS controls for Micros POS payment systems.

• Level 1-2 technical support and incident resolution for enterprise customers in a structured ticketing and escalation model.