IT Systems · Security · Automation · AI

Matt
James

IT & security engineer relocating to Austin, TX or the Washington, DC metro. I like being the person who owns the whole stack: identity, devices, security, the network and the SaaS sprawl in between. I automate the routine work, lock down the rest, and keep it simple enough that a small team can run it. Available within a month.

View experience Download résumé ↓ tensorfitness.com → LinkedIn

Years in IT

300+

Endpoints

40+

SSO apps

Certifications

Certified

CISM

Cloud

AWS SA

Fitness App

TensorFit

01 / About

I build and run IT for fast-growing companies. As the first IT hire at a software scale-up, I built the IT and security function from the ground up while headcount grew from 60 to over 300. Today I run identity, endpoints, security and collaboration for a 300-person fintech. Master's degree, CISM, Security+ and AWS Solutions Architect. Outside work I built and launched TensorFit, an AI fitness app, and run a self-built RTX 5090 home lab for OpenClaw agents and local models.

RelocatingAustin, TX · Washington, DC

AvailableWithin 1 month

CitizenshipU.S. Citizen

ClearanceEligible · none currently held

DisciplineIT · Security · Automation · AI

EducationMaster's in IT

Looking forA startup that is growing fast and needs IT and security to keep up

02 / Experience

CreditorWatchIT Systems Engineer

10/2025 – Current · Melbourne

▹Scaled IT provisioning and support as CreditorWatch grew from 200 to around 300 employees in a year, serving as the escalation point for identity, endpoint, network and SaaS issues, mentoring IT and help desk colleagues, running 1Password training, and maintaining the IT knowledge base and user guides.

▹Administer Microsoft 365 and Exchange Online with AvePoint backup, and Entra ID across the SaaS stack: SSO (SAML/OIDC), Conditional Access, MFA, Entra ID Protection, access reviews and SCIM provisioning.

▹Automated onboarding, offboarding and account provisioning end to end with n8n, Microsoft Graph, REST APIs and webhooks, and defined the offboarding data retention and mailbox handover process.

▹Built a least-privilege Microsoft Graph integration for the Databricks pipeline to publish reports to SharePoint for Copilot indexing.

▹Review AI tool requests against the AI acceptable-use policy, manage AI licensing and seat allocation, and enforce the policy through Netskope web filtering and DLP controls.

▹Manage the Mac and iPad fleet through Iru (formerly Kandji): deployment, configuration profiles, compliance policies, FileVault encryption, patching, and scripted installs and audits.

▹Operate CrowdStrike Falcon with Falcon Complete MDR, triaging alerts and working incidents with the MDR team, including phishing and compromised-account response, and Netskope NG-SWG/SSE with DLP controls and Exchange Online email security.

▹Operate under Australian data-residency requirements for sensitive tax and financial data at a regulated credit reporting bureau, keeping processing and storage onshore and reviewing SaaS and AI tools for data residency before approval.

▹Redesigned and redeployed the Melbourne office network on UniFi: Wi-Fi, VLANs, firewall rules, VPN, DNS and DHCP, and dual-ISP WAN failover, and upgraded the office A/V.

ROLLER SoftwareIT Officer / Security Specialist

09/2021 – 10/2025 · Melbourne

▹Hired as ROLLER's first IT employee, built the IT and security function from the ground up as the company grew from 60 to over 300 people, and onboarded, trained and mentored the IT staff hired as the team grew, building the IT knowledge base and user guides along the way.

▹Negotiated vendor pricing and contracts and managed hardware procurement, software licensing, and ISP and office fit-out vendors, tracking usage and licences across 40+ apps in Zluri.

▹Set laptop hardware standards and the refresh cycle, and overhauled asset tracking by rebuilding it in Jira Asset Management.

▹Deployed Microsoft Entra ID across the organization, configuring SSO (SAML/OIDC) and SCIM provisioning for 40+ enterprise applications and enforcing Conditional Access and MFA policies.

▹Set up OOBE zero-touch enrollment so new laptops joined Entra ID on first boot.

▹Deployed Iru, Intune, Automox and CrowdStrike Falcon across the Mac and Windows fleet, scripting patching, installs, security baselines and disk encryption (FileVault, BitLocker), and remediating critical vulnerabilities.

▹Authored the policies, procedures and audit documentation for SOC 2 Type 1, established change management, and ran KnowBe4 security awareness and 1Password training.

▹Served as primary Google Workspace administrator, managing email security, responding to phishing and compromised-account incidents, and scripting bulk administration with the GAM CLI.

▹Designed and installed the Melbourne and Sydney office networks on UniFi (Wi-Fi, VLANs, firewall rules, comms room and rack build-out, structured cabling) and the Zoom Rooms and conference room A/V.

Harris HMCInformation Technology Intern

02/2021 – 09/2021 · Melbourne

▹Managed a 150-device Windows fleet across the full hardware lifecycle (procurement, SOE imaging, asset tagging and secure decommissioning) and updated Active Directory and remote-management systems.

▹Delivered Level 1–3 desktop and laptop support and repair, ran IT onboarding/offboarding, and administered Slack, Jira & Confluence.

03 / Featured Project tensorfitness.com →

«TF»

APP PREVIEW

Featured Workouts

Curated programs: Today's Plan, Explosive Power, Full Body and more.

«TENSORFIT»

Founder · Developer · Since 2026

A cross-platform AI fitness coach, built solo and launched end-to-end on React Native / TypeScript with a fully serverless AWS backend (Lambda, API Gateway, S3) defined as Infrastructure-as-Code, and live on the App Store and Google Play.

Multi-model AI form analysis

Record yourself doing an exercise, then select the video in the app. A MediaPipe pose model extracts joint angles and body positions on device, and a Claude + Gemini pipeline on Lambda turns them into scored coaching feedback.

Conversational exercise coach

Ask Coach answers form, muscle and programming questions per exercise on the same multi-model pipeline. Prompt caching cuts repeat-inference cost.

A coach that remembers you

The coach remembers everything you tell it and everything you log, so the workouts it generates and the answers it gives are based on your history instead of starting fresh each time. Alongside that: a drag-to-order builder with 280+ exercises, curated plans, volume history and full data export.

Secured end-to-end

JWT-verified identity on every API request, Apple/Google SSO, per-user data isolation, usage quotas, AWS Secrets Manager and S3 lifecycle auto-expiry.

React Native AWS Lambda Serverless · IaC TypeScript Firebase Claude · Gemini MediaPipe

tensorfitness.com →

04 / Automation & AI at work

Most of what I automate is the routine identity and device work: onboarding, offboarding and access changes on n8n and Microsoft Graph. These are the AI tools I run or look after.

PILOT

Microsoft Scout for internal IT

I ran a pilot of Microsoft Scout for internal IT, with the agents running under Entra-governed identities so they get the same access controls as a person. The aim is to take routine requests off the queue so nobody has to work through them by hand.

VISIBILITY

Seeing and controlling AI tool use

I review AI tool requests against the acceptable-use policy and manage the AI licences and seats. Netskope shows which AI sites people are actually using, and its web filtering and DLP policies enforce which ones are sanctioned. CrowdStrike's AI detection covers what is running on the endpoints.

INTEGRATION

Databricks reports into SharePoint

The data team wanted their Databricks reports searchable in Copilot. I set up a Microsoft Graph integration that writes the finished reports into SharePoint, with the app limited to that one site. Copilot indexes them and people can ask questions instead of chasing files.

HOME LAB

OpenClaw and local models on an RTX 5090

I built an RTX 5090 workstation so my agents run at home. OpenClaw handles the always-on assistant and automation work, Claude Code handles coding, and DeepSeek Harness is the open-source agent runtime I run locally. Everything defaults to a local Qwen 3.8 27B through Ollama, and when a task actually needs a frontier model it switches to Claude Fable 5.1.

05 / Skills

Frameworks & Standards

What I have worked with, and what I am working towards

SOC 2 Type 1

Wrote the policies and procedures and put together the audit evidence at ROLLER.

DONE

ISO 27001

The reference I use for identity, endpoint and vendor controls.

USED

NIST CSF

The blueprint I used to build ROLLER's first security program.

USED

MITRE ATT&CK

Used when tuning CrowdStrike prevention policies and reviewing detections.

USED

Data residency

Tax data has to stay in Australia. I check this for every SaaS and AI tool before it is approved.

DAY TO DAY

CMMC 2.0 Level 2

Working through how the SOC 2 and ISO 27001 controls I have already built map to the 110 practices.

LEARNING

NIST SP 800-171

Same exercise for the 800-171 control families.

LEARNING

ITAR / EAR

As a U.S. citizen I meet the U.S. person requirement for ITAR and EAR controlled work.

ELIGIBLE

Identity & Access

Microsoft Entra ID

SSO · SAML / OIDC Conditional Access · MFA · ID Protection SCIM Provisioning · Automated User Lifecycle

Google Workspace Access Reviews · Access Audits OAuth 2.0 · JWT Least Privilege · RBAC 1Password

Endpoint & Device Management

Iru (formerly Kandji) · Blueprints · Profiles · Scripts · Self Service · Passport Intune Automox OOBE / Zero-touch Enrollment Device Certificates · SCEP / PKCS Security Baselines · Compliance Policies Patch Management FileVault · BitLocker macOS · iPadOS · Windows

Security & Compliance

CrowdStrike Falcon · Falcon Complete MDR Incident Triage & Response Netskope NG-SWG / SSE · DLP Email Security · SPF / DKIM / DMARC KnowBe4 Security Awareness Vulnerability & Patch Management SOC 2 Type 1 ISO 27001 NIST CSF MITRE ATT&CK IT Policy & Audit Documentation Change Management

Collaboration & SaaS

Microsoft 365 · Exchange Online · SharePoint · Licensing

Google Workspace · GAM CLI Slack Zoom · Zoom Rooms

Jira · Jira Service Management

Confluence Zluri · SaaS Lifecycle & Licensing Vendor Management & Procurement

Automation & Scripting

Python Bash & PowerShell

Claude Code

n8n Microsoft Graph API REST APIs · Webhooks GAM CLI MDM Scripting

CI/CD · GitHub Actions

Networking

TCP/IP · DNS · DHCP VPN VLANs & Segmentation Firewall Rules Wireless Design

UniFi · Multi-site · RADIUS Dual-ISP WAN Failover

Cloud & Development

AWS · Lambda · S3 · API Gateway Azure GCP Linux · Kali · AWS Instances JavaScript / TypeScript Node.js React Native Git

AI & Agentic Tooling

Always current · shipping with the latest tools

AI Acceptable-use Governance · Tool Evaluation AI Licensing & Seat Management Microsoft Scout · Internal IT Pilot · Entra-governed Agent Identities

Claude API

MCP

Multi-model Claude + Gemini Pipelines OpenClaw · DeepSeek Harness · Self-hosted Home Lab

Local Models · Ollama · Qwen 3.8 27B Self-built RTX 5090 Workstation

Pose Estimation · MediaPipe

06 / Certifications

Falcon Admin

CrowdStrike

07 / Education

Master's Degree · 2021

Business Information Technology

RMIT University · Melbourne, VIC

Bachelor's Degree · 2019

Business Administration

Birmingham–Southern College · Alabama, USA

08 / Beyond the Day Job

AI automation tool for ROLLERthon 2024

Built with the Claude API to automate Salesforce data extraction, cPanel config and report setup, projected to cut venue onboarding 25% and save 2,000+ hours and $100k annually across 1,000+ venues.

Founder, The Athletes Gun

Founded and ran a Shopify drop-shipping business selling recovery massage guns for athletes.

Ethereum mining rig

Designed and tuned a 210 MH/s rig for performance and profitability.

APS website redesign

Led a university team redesigning the Australian Psychological Society's site, with desktop & mobile prototypes.

Let's build something secure

Get in touch

Open to IT & security roles at fast-growing startups in Austin, TX and across the Washington, DC metro (Northern Virginia and Maryland). U.S. citizen, clearance-eligible, available within a month. Always happy to talk shop about TensorFit.

Email me Download résumé ↓ (205) 386-0178 LinkedIn tensorfitness.com

Save my details

Scan the code with your phone camera to save my contact card, or grab the résumé in whichever format your tools prefer.

Save contact (vCard) resume.md

Built withplain HTML · one CSS token file · vanilla JS · S3 + CloudFront · no framework, no tracking cookies For machinesllms.txt resume.md security.txt sitemap Press / to search