Professional chronology

Timeline

1. 2025–2026

   USC–NGA Cooperative Research and Development Agreement

   Methodology Lead / Principal Architect, CBO–TGRA

   Geospatial methodology · evidential reasoning · uncertainty

   Evidence

   • Originated Confidence-Based Ownership Assessment with Targeted Geometric Risk Analysis for NGA's requirement to identify and prioritize parcels with foreign or foreign beneficial ownership near U.S. critical infrastructure; designed the four-stage methodology, scoring and data architecture, governance, validation, analyst workflow, and technical specification.
   • Designed a calibrated Ownership Confidence Score from Bayesian belief networks, Noisy-OR, Dempster–Shafer with Yager conflict handling, and three-tier entity resolution; introduced geometric exploitation potential as an independent dimension with Monte Carlo viewsheds, edge-betweenness chokepoints, UAS feasibility, and change detection.
   • Specified a bi-temporal knowledge architecture across 42+ sources with provenance, lineage, versioning, CE95 control, and ISO 19157 gates; built KNIME, Python, ArcPy, and Esri components and Figma interface concepts; briefed NGA's Director of Counterintelligence; implementing the Washington, DC validation pilot. Case study →

2. 2019–2020

   Elysian Labs

   Product Manager, tactical human-machine interaction

   ATAK · mission workflows · physical interfaces

   Evidence

   • Conducted mission discovery with special-operations users and stakeholders through SOFWERX; decomposed workflows into objective, task, information, device and application state, action sequence, friction, required behavior, and confirmation.
   • Converted operator requests into complete solution designs for CRUX, a programmable hardened controller integrated with ATAK: invoked workflow, application state, data dependencies, event sequencing, latency, exception and recovery, degraded-connectivity behavior, hardware–software synchronization, acceptance conditions.
   • Evaluated prototypes under movement, gloves, low light, load, time pressure, and intermittent communications; classified failures by root cause; separated platform capability from configuration and customer implementation; contributed to pre-RFP capture and proposals. Case study →

3. 2018–2019

   Insight Engines

   Solutions and product, cybersecurity domain, semantic mapping, customer enablement

   Natural-language investigation · Splunk · customer workflows

   Evidence

   • Decomposed analyst questions into investigative intent, entities, relationships, event domain, time range, Common Information Model fields, telemetry dependencies, output structure, and next analytical action for an AI-enabled investigation platform on Splunk.
   • Expanded the semantic layer and recommendation logic: cybersecurity terminology, entity relationships from indicator to hosts, users, DNS activity, files, and malware, and repeatable hunts from emerging threat intelligence.
   • Treated each use case as a data-readiness specification tying coverage, normalization, freshness, and ingestion cost to the investigations it enabled; traced customer-reported behavior to the failing layer; delivered guided training and a recurring threat and use-case newsletter.

4. 2008–2018

   Defense and intelligence

   Mission systems · architecture · operations

   INDOPACOM J63 · CJTF-HOA J39 · U.S. Air Force Special Warfare

   U.S. Indo-Pacific Command, J63

   Reference architecture and CONOPS, Common Cyber Integration Model / ArcSight

   Evidence

   • Contributed capability-gap analysis, data-source mapping, DoDAF definitions, reference-architecture material, and the classified C2IM CONOPS; co-authored ArcSight CONOPS elements published at the Secret level.
   • Designed toward federation: collection and retention near source systems, selective forwarding, Common Event Format normalization, retention and forensics, real-time correlation, and mission-dependency mapping from technical event to decision.
   • Supported the Enterprise Operations Center–Pacific pilot under an Interim Authority to Test during the DIACAP-to-RMF transition with NIST SP 800-53-aligned inputs and separated test, production, and recovery environments.

   Case study →

   Combined Joint Task Force–Horn of Africa, J39

   Technical solution writer, winning operations-and-maintenance proposal

   Evidence

   • Wrote the technical response to an approximately $4 million annual cost-plus-fixed-fee requirement for geospatial media analysis of the regional information environment; the proposal won.
   • Decomposed the solicitation into mission objectives, tasks, deliverables, qualifications, performance expectations, security constraints, cadence, and evaluation criteria with end-to-end traceability from requirement to deliverable.
   • Structured the service as an analytical pipeline from regional collection and source characterization through structured coding, trend and measures-of-effectiveness analysis, and commander-focused BLUF reporting, with assurance controls for source affiliation, duplicate propagation, translation fidelity, and volume normalization; grounded in earlier J2 and J39 media-exploitation and influence-assessment products.

   United States Air Force

   Special Warfare, 13 years

   Evidence

   • Collection planning under weather and timing constraints; communications discipline; decisions under limited attention.
   • Direct knowledge of what an operator needs from a map, a control, and a warning, which shaped the Elysian Labs and CBO–TGRA work that followed.