Cybersecurity · IT Systems · AI · Builder
Matt
James
Cybersecurity & IT systems engineer relocating to Washington, DC (Northern VA / MD) — or Austin, TX — building secure, automated infrastructure by day and building TensorFit, an AI form-coaching fitness app, by night.
6+
Years in IT & Security
300+
Devices Managed
7
Certifications
Certified
CISM
Cloud
AWS SA
Fitness App
TensorFit
01 / About
A cybersecurity & IT systems professional with a Master's degree and CISM certification — experienced across identity & access management, endpoint security, network infrastructure and automation. I build production software outside of work, including TensorFit, and run a self-built RTX 5090 workstation hosting local LLMs (Qwen 32B via Ollama) for hands-on AI experimentation — bringing that builder's mindset to securing and automating IT operations.
02 / Featured Project
tensorfitness.com →
«TF»
APP PREVIEW
Featured Workouts
Curated programs — Today's Plan, Explosive Power, Full Body and more.
«TENSORFIT»
Founder · Developer · 2026—Now
A premium fitness & workout-tracking app with an AI form coach — solo-built and shipped end-to-end on React Native / TypeScript with a fully serverless AWS backend (Lambda, API Gateway, S3) defined as Infrastructure-as-Code, from concept and UX wireframes through development, QA and live release on the App Store and Google Play.
01
Multi-model AI form analysis
A Claude + Gemini pipeline on Lambda scores depth, back position & elbow angle out of 100 — prompt caching cuts repeat-inference cost ~90%.
02
On-device pose tracking
MediaPipe (33 3D landmarks) in custom Kotlin/Swift native modules, plus offline-first logging with checkpointed cloud sync.
03
Guided workouts, builder & analytics
Drag-to-order builder across 280+ exercises, curated programs, volume history and full data export.
04
Secured end-to-end
JWT-verified identity on every API request, Apple/Google SSO, per-user data isolation, usage quotas, AWS Secrets Manager and S3 lifecycle auto-expiry.
React Native
AWS Lambda
Serverless · IaC
TypeScript
Firebase
Claude · Gemini
MediaPipe
03 / Experience
CreditorWatchIT Systems Engineer
▹Own identity and endpoint operations across a ~300-device fleet — Kandji MDM and CrowdStrike Falcon (Falcon Complete MDR), triaging analyst escalations and tuning prevention policies to cut false positives.
▹Onboard and configure software through Microsoft Entra ID for SSO (SAML/OIDC) and SCIM provisioning, centralizing identity and strengthening access controls.
▹Automated end-to-end onboarding/offboarding with n8n, provisioning SaaS accounts via SCIM and API integrations to cut provisioning time and enforce least-privilege access.
▹Led the Melbourne office network build-out on UniFi (Dream Machine + U7 Pro) — wireless redesign, dual-ISP WAN failover and a Netskope NG-SWG for web filtering, threat protection and DLP.
▹Built and deployed Kandji scripts for software installs, configuration and audits — including a fleet-wide browser-extension audit — and manage Microsoft 365 / SharePoint backup and recovery via AvePoint.
▹Use CrowdStrike AI detection to surface Shadow AI and enforce sanctioned GenAI apps; own Slack and Jira administration and deployed office-wide Datadog, Salesforce & Tableau dashboards.
ROLLER SoftwareIT Officer / Security Specialist
▹Established ROLLER's IT & security function from the ground up — building the first IT infrastructure across systems, identity and security, and scaling it as the org grew from ~60 to 300+ employees.
▹Deployed Microsoft Entra ID (Azure AD) across the entire organisation, centralizing identity and configuring SSO (SAML/OIDC) for 40+ enterprise applications, with Conditional Access policies enforcing zero-trust device compliance.
▹Oversaw IT systems for SOC 2 Type 1 compliance — authored security policies and audit documentation, established change-management processes, and ran regular 1Password audits and compliance mappings.
▹Built SCIM-based Zluri workflows to provision/deprovision users across 40+ third-party apps with the correct group access.
▹Deployed Kandji & Automox across all devices, scripting automated patching and standardized security baselines to reduce critical vulnerabilities.
▹Managed Mac and Windows device deployment end-to-end (300+ devices), Windows Server administration and IT build-outs for the Sydney and Melbourne offices; owned Slack and Jira administration, including the transition to Jira Asset Management.
Harris HMCIT Support Specialist Intern
▹Managed a 150-device Windows fleet across the full hardware lifecycle — procurement, imaging, asset tagging and secure decommissioning.
▹Delivered Level 1–3 IT support, ran IT onboarding/offboarding, and administered Slack, Jira & Confluence.
04 / Skills
Security & Compliance
CrowdStrike · Spotlight · SIEM/SOAR
SOC 2
ISO 27001
NIST
MITRE ATT&CK
1Password
Kali Linux
Data Privacy
Identity & Access
Microsoft Entra ID
Google Workspace
SSO · SAML / OIDC
SCIM Provisioning
Conditional Access · Zero Trust
Active Directory
Group Policy
Google Workspace
SSO · SAML / OIDC
SCIM Provisioning
Conditional Access · Zero Trust
Active Directory
Group Policy
Cloud & Automation
AWS · GCP · Azure
Infrastructure-as-Code · CloudFormation
Microsoft Graph API
Azure Pipelines · CI/CD
n8n
Zluri
AvePoint · M365 Backup
GitHub Actions
n8n
Zluri
AvePoint · M365 Backup
GitHub Actions
Endpoint · Network · Observability
Kandji · Intune
Windows Server
Automox
Netskope NG-SWG / SSE
Wi-Fi Design
TCP/IP · VLANs · DNS · VPN
UniFi · WAN Failover
Datadog · Tableau
Confluence · Jira
UniFi · WAN Failover
Datadog · Tableau
Confluence · Jira
Development & Scripting
React Native · TypeScript
JavaScript · Node.js
Python
Bash & PowerShell
Kotlin · Swift (native modules)
Firebase · Firestore
REST APIs
Git
AI & Emerging Tech
Always current · shipping with the latest tools
Claude API
Gemini
OpenAI
LLM Integration
Prompt Engineering
RAG
MCP
AI Agents · n8n
OpenClaw · MS Scout
Local LLMs · Ollama · Qwen 32B
Self-built RTX 5090 LLM workstation
Cursor
Pose Estimation · MediaPipe
05 / Certifications
CISM
ISACA · 2024
Security+ 701
CompTIA
Falcon Admin
CrowdStrike
MS-101
Microsoft 365
AWS SA
Solutions Architect
AWS CCP
Cloud Practitioner
GitHub Actions
CI/CD Automation
06 / Education
Master's Degree · 2021
Business Information Technology
RMIT University · Melbourne, VIC
Bachelor's Degree · 2019
Business Administration
Birmingham–Southern College · Alabama, USA
07 / Beyond the Day Job
Agentic AI for internal IT
Piloted agentic tooling for IT operations — self-hosted OpenClaw and Microsoft Scout running under Entra-governed agent identities with Intune-managed model policy, automating operations workflows under real access controls.
AI automation tool — ROLLERthon 2024
Built with the Claude API to automate Salesforce data extraction, cPanel config and report setup — projected to cut venue onboarding 25% and save 2,000+ hours and $100k annually across 1,000+ venues.
RTX 5090 AI workstation
Self-built rig hosting local models — Qwen 2.5 32B via Ollama and Wan 2.2 video generation.
The Athletes Gun — founder
Founded and ran a Shopify drop-shipping business selling recovery massage guns for athletes.
Ethereum mining rig
Designed and tuned a 210 MH/s rig for performance and profitability.
APS website redesign
Led a university team redesigning the Australian Psychological Society's site, with desktop & mobile prototypes.
Matt James · Washington, DC · Austin, TX
© 2026