Automation · Security · Applied AI

Complex operations. Clear systems.

I’m a Melbourne automation engineer specialising in security orchestration, endpoint management and cloud platform automation. I build practical systems people can understand, trust and keep using.

Melbourne, Victoria 0499 402 999 LinkedIn ↗
Automation Estate PowerShell Intelligence Security Orchestration Human-Centred Systems AI with Guardrails

Selected impact

Built for real operational pressure.

I take work from the first conversation through to a reliable, useful outcome, whether that means automation, AI, conventional software or a better process.

01

Automated security response

Built Splunk SOAR workflows for malicious links and suspicious mailbox activity, combining multiple data sources with an in-house LLM verdict, ticketing, Azure token revocation, account lockout and stakeholder notification.

02

Statewide endpoint engineering

Supported Intune and infrastructure across a Victorian education environment of more than 20,000 devices, covering endpoint policy, compliance, fleet support and server administration.

03

Applied AI, not AI theatre

Designed task-specific LLM agents and prompting workflows for security operations, internal automation support and software delivery, with clear boundaries and human-readable outputs.

04

Platforms that cost less to run

Helped move a delivery operation from costly managed dependencies to a self-sufficient internal platform, reducing monthly cloud and platform costs from about $18,000 to $2,000.

Experience

Deep technical work, clearly delivered.

Experience across public education, enterprise consulting, health, non-profit operations and cyber security.

CurrentJan 2025 to present

Systems Engineer, Automation
Department of Education

Building and maintaining SOAR, endpoint, cloud and infrastructure automations. The work spans Splunk dashboards and ingestion, account-compromise response, Intune, Azure AD, AWS, Red Hat Linux, ServiceNow and server administration.

PowerShellPythonSplunk SOARIntuneAWSServiceNow
Jan 2024 to Jan 2025

Core Intune Infrastructure Senior Consultant
Department of Education · contract via Capgemini / Empired

Designed Intune policies, configuration profiles and standards, working across teams to deliver secure device management and practical guidance for digital learning environments.

Microsoft IntuneMDMCompliancePolicyWorkshops
Mar 2022 to Dec 2023

Senior Consultant / IT Specialist Contractor, Level 2/3
Department of Education · contract via Capgemini / Empired

Delivered Azure backend scripting, Exchange improvements, identity, security and Microsoft 365 support. Built PowerShell, Python and Splunk Phantom automation across enterprise services.

Azure ADExchangePurviewSplunkL2/L3
Jun 2025 to Feb 2026

Specialist Consultant, Delivery Platform
After-hours consulting engagement

Led six developers delivering a private driver and operations platform, while helping move the business towards an internally managed system and materially lower cloud and platform costs.

Technical leadershipPlatform deliveryCloud cost reduction
Jun 2019 to Mar 2022

Cyber security and IT operations

  • IT TechnicianMedHealth · Aug 2021 to Mar 2022
  • ICT Coordinator, Cyber SecurityFoodbank Victoria · Jul 2020 to Aug 2021
  • IT Support Technician, Cyber SecurityUDIT · Jun 2019 to Jul 2020

Selected projects

Ideas turned into working systems.

Products and patterns shaped by real problems in automation, operations, documentation and communication.

Operations platform02

Driver App

A private delivery operations platform for jobs, trucks, drivers, independent contractors and historical incident investigation. I led a six-developer team and helped move the operation to a self-sufficient internal admin platform.

Consulting engagement · Jun 2025 to Feb 2026
$18K → $2KApproximate monthly platform cost reduction
Private project
Private language tool03

Family Translator

An English and Vietnamese companion for warm, natural family messages. Translation stays on the device and uses the language capability built into supported browsers.

Open translator
Agent pattern04

HatShift

A single-agent orchestration pattern built around a persistent core, on-demand role modules and shared validation guardrails.

Read the article

Latest writing

Notes from the work.

Practical articles about automation, systems engineering, cyber security and the projects I’m building.

HatShift single-agent orchestration pattern diagram

HatShift: a single-agent orchestration pattern

How a persistent core and on-demand role files can reduce repeated context while keeping every output inside the same guardrails.

Read article

More field notes are taking shape.

Future posts will cover PowerShell modernisation, automation operations and lessons from building practical tools.

Browse the blog
DANIEL_OS // ARCADE SERVICELOCAL SESSION · NO COINS REQUIRED

System break / build 1980

Debug the galaxy.

A small playable intermission for anyone who made it this far. Clear the fleet, keep the systems online and remember that serious engineering can still have a sense of play.

Score 0000 Best 0000 Level 01 9 bugs remain

Use Space to fire, R to reboot. One old cheat code still works.

Console ready // tap to fire
Lives ▲ ▲ ▲
OFF / DUTY

When I’m away from a terminal, I’m usually around motorcycles. I rebuilt a Honda 125cc from parts and maintain and ride a Triumph Daytona 600.

Let’s solve something

Have a stubborn systems problem?

I take on selected work across automation, applied AI, Microsoft platforms, infrastructure and operational security.