Robert D. Lish

Passwordless authentication across the fleet on Cloud Kerberos Trust.

Root-caused a class of enrollment failures traced to protected-account attribute conflicts that blocked a subset of users, then drove the rollout to completion.

• Entra ID
• Cloud Kerberos Trust
• Conditional Access

Replaced legacy remote access with Microsoft Private Access.

Included constrained delegation on connector infrastructure and service principal name registration to reach backend databases.

• Global Secure Access
• Kerberos
• Entra ID

Built the security monitoring pipeline from nothing.

Network appliance syslog ingestion, custom decoders and correlation rules, and chat-based alert routing — plus a recurring vulnerability triage process with documented risk assessment and remediation tracking.

• Wazuh
• syslog / CEF
• FortiGate

Enforced a weekly reboot cadence across 100+ endpoints.

Versioned state tracking, an uptime threshold rather than a blunt schedule, and permission hardening so users cannot tamper with the state file.

• Intune
• PowerShell
• Microsoft Graph

Resolved a customer-facing product configuration failure nobody could reproduce.

HAR-based analysis isolated an interaction between API rate limiting, an active A/B test, and an internal DNS conflict — three systems that were each individually healthy.

• HAR analysis
• DNS
• REST APIs

The day job underneath the projects.

Autopilot provisioning, hybrid Entra join troubleshooting across directory sync scoping, high-availability FortiGate perimeter with multi-ISP failover, UniFi switching and wireless, RDS/RemoteApp with broker HA, and Hyper-V migrations including legacy dynamic disk recovery.

• Intune
• Autopilot
• FortiGate
• UniFi
• Hyper-V
• RDS

A custom orchestration agent with roughly 70 registered MCP tools.

Local inference is the default provider, with a hosted frontier model as fallback — so routine work costs nothing and only hard problems reach the paid path. Includes a coding-task delegation tool that hands implementation to an autonomous coding agent, and a deploy tool targeting multiple repositories.

• Model Context Protocol
• Python
• Node.js

Local LLM inference node — a quantized 26B mixture-of-experts model on CPU.

Running llama-server with a 32k context window. The lab’s discrete GPU was retired, so throughput came from tuning thread count, context and batching rather than hardware.

• llama.cpp
• quantization
• systemd

A scheduled daily agent running 13 checks across the entire estate.

Infrastructure, services, security, storage, network, revenue, snapshot integrity and inference health — each result routed to a purpose-specific chat channel so the signal is not buried in one firehose.

• Python
• cron / systemd timers
• webhooks

A Next.js operations dashboard for the lab.

Its own repository with a key-based deployment pipeline, alongside a cost tracking service that reconciles monthly lab operating expense against side-project revenue.

• Next.js
• REST APIs

Algorithmic trading platform — crypto scalping and equity swing trading.

Applied Focal Loss to severe class imbalance in signal labeling, with automated weekly retraining. An unattended research harness for hyperparameter sweeps improved crypto entry-signal F1 from 0.579 to 0.968. It reached partial self-funding against lab operating costs before I wound it down deliberately — positions closed, schedules removed, configuration zeroed.

crypto entry-signal F10.579→0.968

• Python
• Focal Loss
• brokerage API

The unglamorous half that makes the rest trustworthy.

Home Assistant migrated from an appliance-style VM to multi-container Docker on the NAS, splitting core, Z-Wave and Matter into independently upgradable services. Least-privilege read-only tokens on every external integration, a full-credential rotation procedure exercised end to end, and snapshot and backup verification built into the daily check suite.

• Docker
• Proxmox
• Cloudflare Tunnel
• NAS