IT Systems · Security · Automation · AI
Matt
James
IT & security engineer relocating to the Washington, DC metro. I build and run identity, devices, security and SaaS for fast-growing companies, and automate the routine work. Available within a month.
6+
Years in IT
300+
Endpoints
40+
SSO apps
7
Certifications
Certified
CISM
Cloud
AWS SA
Fitness App
TensorFit
01 / About
I grew up in Alabama, studied business at Birmingham–Southern, then moved to Melbourne in 2019 for a master's in IT. I started in IT support and worked my way into security, building ROLLER's IT from the ground up as their first IT hire. Today I'm an IT systems engineer at CreditorWatch, a regulated fintech. Outside work I'm usually lifting or building something, which is how TensorFit started: I wanted an app that could coach my own lifting form, so I built one. After seven years in Melbourne, I'm moving back to the U.S. and settling in the Washington, DC area.
02 / Experience
CreditorWatchIT Systems Engineer
▹Engineers the company's identity, endpoint, network and SaaS systems, handles tier 3 escalations, and mentors the IT team. Scaled IT as headcount grew from 200 to over 300 in a year.
▹Manages Entra ID, including SSO and SCIM for the SaaS stack, Conditional Access, MFA, Entra ID Protection, access reviews, and access requests through Jira Service Management.
▹Administers Microsoft 365 Copilot licensing and LiteLLM for company access to Claude, reviews AI tool requests against the acceptable-use policy, and enforces it with Netskope web filtering and DLP.
▹Automated onboarding, offboarding and account provisioning with n8n and Microsoft Graph, and defined the offboarding data retention and mailbox handover process.
▹Manages the Mac and iPad fleet with Iru and Apple Business Manager, creating and deploying configuration profiles and device certificates, enforcing patching and FileVault encryption, and scripting installs in Bash.
▹One of the primary Netskope administrators, managing firewall, web filtering, DLP, and Private Access for remote staff.
▹Manages CrowdStrike Falcon Complete MDR, responding to alerts, IOCs, phishing, and compromised accounts, and trains staff on 1Password and password best practices.
▹Runs hardware procurement, asset inventory, and device lifecycle, and negotiates pricing and signs vendor contracts.
▹Administers Microsoft 365, Exchange Online and email security, Slack, Zoom, and Atlassian (Jira, Confluence, JSM), and tests AvePoint backup restores.
▹Redesigned the Melbourne office network and Wi-Fi on UniFi with VLANs, firewall rules, and dual-ISP WAN failover.
ROLLER SoftwareIT Officer / Security Specialist
▹Joined as ROLLER's first IT hire and built IT and security from the ground up as the company grew from 60 to over 300 people across five offices in four countries, mentored new IT hires, and wrote the IT knowledge base.
▹Administered Google Workspace for 300+ users as primary admin, including org units, groups, shared drives, Admin console security, and GAM lifecycle automation.
▹Consolidated identity on Entra ID, connecting 40+ apps via SSO and SCIM, enforcing Conditional Access and MFA, and automating HRIS-driven onboarding and offboarding.
▹Managed SaaS procurement and licensing through Zluri, tracking usage and seats across 40+ apps, and negotiated pricing and signed vendor contracts.
▹Brought an unmanaged Mac and Windows fleet under Iru and Intune with Automox and CrowdStrike, scripting patching, security baselines, and compliance reporting in Bash and PowerShell.
▹Set laptop hardware standards and the refresh cycle, and rebuilt asset tracking in Jira Asset Management.
▹Rolled out Claude and ChatGPT Enterprise, administered Slack, and owned email security, rolling out Abnormal Security, configuring SPF, DKIM, and DMARC, and handling phishing incidents.
▹Took ROLLER through SOC 2 Type 1 on Vanta, writing the policies and audit documentation, setting up change management, and running KnowBe4 security awareness and 1Password training.
▹Built out the Melbourne and Sydney offices, including UniFi networks with VLANs and firewall rules, Zabbix monitoring, comms rooms and racks, and Zoom Rooms.
Harris HMCIT Support Specialist Intern
▹Administered Microsoft 365, Entra ID, and Atlassian (Jira and Confluence), managing users and groups, connecting business applications through SSO, and managing the office comms room.
▹Administered Windows Server, Active Directory, and Group Policy.
03 / Featured Project
tensorfitness.com →
«TF»
APP PREVIEW
Featured Workouts
Curated programs: Today's Plan, Explosive Power, Full Body and more.
«TENSORFIT»
Founder · Developer · Since 2026
An AI fitness coach I built solo in React Native and TypeScript, on a serverless AWS backend (Lambda, API Gateway, S3) defined in CloudFormation. Live on the App Store and Google Play.
01
Multi-model AI form analysis
Record a set and a MediaPipe pose model tracks your joint angles on the phone. A Claude and Gemini pipeline turns that into scored coaching feedback.
02
Conversational exercise coach
Ask Coach answers form, muscle and programming questions for each exercise. Prompt caching keeps repeat questions cheap.
03
Picks up where you left off
Workouts and answers are built from the sets you have already logged, so the programming follows your real volume and progress. Plus a workout builder with 280+ exercises, curated plans, volume history and full data export.
04
Your training data stays yours
Sign in with Apple or Google. Every request is identity-checked and scoped to your own account. Per-user isolation, usage quotas and AWS Secrets Manager behind it.
React Native
AWS Lambda
Serverless · IaC
TypeScript
Firebase
Claude · Gemini
MediaPipe
04 / Skills
Frameworks & Standards
What I have worked with
SOC 2 Type 1
Wrote the policies and procedures and put together the audit evidence at ROLLER.
DONEISO 27001
The reference I use for identity, endpoint and vendor controls.
USEDNIST CSF
The blueprint I used to build ROLLER's first security program.
USEDMITRE ATT&CK
Used when tuning CrowdStrike prevention policies and reviewing detections.
USEDData residency
Tax data has to stay in Australia. I check this for every SaaS and AI tool before it is approved.
DAY TO DAYITAR / EAR
As a U.S. citizen I meet the U.S. person requirement for ITAR and EAR controlled work.
ELIGIBLEIdentity & Access
Microsoft Entra ID
SSO · SAML / OIDC
Conditional Access · MFA · ID Protection
SCIM Provisioning · Automated User Lifecycle
Google Workspace
Access Reviews · Access Audits
OAuth 2.0 · JWT
Least Privilege · RBAC
1Password
SSO · SAML / OIDC
Conditional Access · MFA · ID Protection
SCIM Provisioning · Automated User Lifecycle
Google Workspace
Access Reviews · Access Audits
OAuth 2.0 · JWT
Least Privilege · RBAC
1Password
Endpoint & Device Management
Iru (formerly Kandji) · Blueprints · Profiles · Scripts · Self Service · Passport
Intune
Automox
OOBE / Zero-touch Enrollment
Device Certificates · SCEP / PKCS
Security Baselines · Compliance Policies
Patch Management
FileVault · BitLocker
macOS · iPadOS · Windows
Security & Compliance
CrowdStrike Falcon · Falcon Complete MDR
Incident Triage & Response
Netskope NG-SWG / SSE · DLP
Email Security · SPF / DKIM / DMARC
KnowBe4 Security Awareness
Vulnerability & Patch Management
SOC 2 Type 1
ISO 27001
NIST CSF
MITRE ATT&CK
IT Policy & Audit Documentation
Change Management
Collaboration & SaaS
Microsoft 365 · Exchange Online · SharePoint · Licensing
Google Workspace · GAM CLI
Slack
Zoom · Zoom Rooms
Jira · Jira Service Management
Confluence
Zluri · SaaS Lifecycle & Licensing
Vendor Management & Procurement
Google Workspace · GAM CLI
Slack
Zoom · Zoom Rooms
Jira · Jira Service Management
Confluence
Zluri · SaaS Lifecycle & Licensing
Vendor Management & Procurement
Automation & Scripting
Python
Bash & PowerShell
Claude Code
n8n
Microsoft Graph API
REST APIs · Webhooks
GAM CLI
MDM Scripting
CI/CD · GitHub Actions
Claude Code
n8n
Microsoft Graph API
REST APIs · Webhooks
GAM CLI
MDM Scripting
CI/CD · GitHub Actions
Networking
TCP/IP · DNS · DHCP
VPN
VLANs & Segmentation
Firewall Rules
Wireless Design
UniFi · Multi-site · RADIUS
Dual-ISP WAN Failover
UniFi · Multi-site · RADIUS
Dual-ISP WAN Failover
Cloud & Development
AWS · Lambda · S3 · API Gateway
Azure
GCP
Linux · Kali · AWS Instances
JavaScript / TypeScript
Node.js
React Native
Git
AI & Agentic Tooling
Always current · shipping with the latest tools
AI Acceptable-use Governance · Tool Evaluation
AI Licensing & Seat Management
Microsoft Scout · Internal IT Pilot · Entra-governed Agent Identities
Claude API
MCP
Multi-model Claude + Gemini Pipelines
OpenClaw · DeepSeek Harness · Self-hosted Home Lab
Local Models · Ollama · Qwen 3.8 27B
Self-built RTX 5090 Workstation
Pose Estimation · MediaPipe
Claude API
MCP
Multi-model Claude + Gemini Pipelines
OpenClaw · DeepSeek Harness · Self-hosted Home Lab
Local Models · Ollama · Qwen 3.8 27B
Self-built RTX 5090 Workstation
Pose Estimation · MediaPipe
05 / Certifications
06 / Education
Master's Degree · 2021
Business Information Technology
RMIT University · Melbourne, VIC
Bachelor's Degree · 2019
Business Administration
Birmingham–Southern College · Alabama, USA
07 / Beyond the Day Job
AI automation tool for ROLLERthon 2024
Built with the Claude API to automate Salesforce data extraction, cPanel config and report setup, projected to cut venue onboarding 25% and save 2,000+ hours and $100k annually across 1,000+ venues.
Founder, The Athletes Gun
Founded and ran a Shopify drop-shipping business selling recovery massage guns for athletes.
Ethereum mining rig
Designed and tuned a 210 MH/s rig for performance and profitability.
APS website redesign
Led a university team redesigning the Australian Psychological Society's site, with desktop & mobile prototypes.
Matt James · Washington, DC
© 2026