Senior Engineer, Information Security at Mayo Clinic and full Product Owner for the entire Zscaler suite (ZIA, ZPA, ZDX, ZCC, DLP) — leading the transformation from legacy VPN and branch-firewall architecture to a cloud-delivered Zero Trust Exchange for one of the world's largest health systems. Over 20 years across security engineering, SOC operations, and network infrastructure.
I built Z Control, an internal platform unifying the Zscaler OneAPI, the Zscaler MCP server, and the ZDX GraphQL API behind a single Flask app with Claude as an AI reasoning layer over live operational data — presented in a Zscaler Zenith Live spotlight interview. I recently completed an M.S. in Cybersecurity and Information Assurance from Western Governors University.
Outside of Mayo, I run Frequency42 LLC — an AI and IT consultancy for small businesses in the Midwest, and the vCISO/MSP successor to StackTech, which I ran in Rochester, MN from 2009–2021. I build and operate the SaaS products behind it (RallyText, CrewLog, QRCode42 and family), work daily with Claude, GPT, and Gemini to accelerate delivery, and maintain open-source tools like ZLookup, termhop, and Portless. I also serve as President of the Marquette County Interscholastic Cycling team and as Branch Chief for Cybersecurity Engineering with the U.S. Coast Guard Auxiliary.
Outside of Mayo, I build things. Frequency42 LLC is my AI & IT consultancy for small businesses in the Midwest — and the home of a growing family of SaaS tools, all self-hosted on private bare-metal infrastructure with automated failover and zero cloud vendor lock-in.
AI solutions and managed IT for small businesses in the Midwest. Services include AI discovery & strategy, process automation, cybersecurity, cloud solutions, network setup, and custom app development — all at prices that make sense for Main Street.
frequency42.comHave an idea for a web app, iPhone app, or Android app? I can help you build it. Whether it's a customer-facing tool, an internal workflow app, or a brand new product — let's talk about what it would take to bring it to life.
get in touchProfessional QR code generation, tracking, and management. Built for marketing campaigns, event registration, and business cards. Track scans, manage campaigns, and see analytics — all in one dashboard.
qrcode42.comContactless digital menus for restaurants, bars, and cafes. Update your menu in real time without reprinting anything. Built for the post-pandemic world where QR menus are expected.
qrmenu42.comQR-powered marketplace solutions for local businesses. Connect customers directly to your products and services through smart QR technology — no app download required.
qrmarket42.comFull-production broadcast SMS platform for teams, schools, and nonprofits. Multi-tenant team management, Safe Sport compliance (auto-CC a second adult on athlete messages), A2P 10DLC registration, per-team Fernet encryption, local-LLM content moderation via Ollama, and SHA-256 hash-chained audit logging. Stripe billing with a multi-tier SaaS model.
rallytext.appInternal platform unifying the Zscaler OneAPI, the Zscaler MCP server, and the ZDX GraphQL API behind a single Flask app, with Claude as an AI reasoning layer over live operational data. Lets support and engineering teams ask natural-language questions about ZIA, ZPA, ZDX, ZCC, and ZTW telemetry instead of hand-building queries across consoles. Presented in a Zscaler Zenith Live spotlight interview.
ask me about itSelf-hosted network diagnostics platform (Flask, REST API) — DNS lookup, ping, bulk ping/DNS, traceroute, dig, and TCP/UDP checks, with optional Zscaler ZIA URL-category lookups and a Branch Connector/ZPA mode for validating cross-branch connectivity. Organization-neutral by default, enterprise integrations opt-in. MIT licensed.
github.com/techbuttonMulti-tenant time-tracking SaaS (Node.js, PostgreSQL, Nginx) built for a construction business — clock in/out, job location and distance tracking, equipment/parts logging, Excel/QuickBooks export, multi-method authentication, and a platform-admin back office.
get in touchSelf-hosted remote terminal application with end-to-end encryption (X25519 ECDH + XChaCha20-Poly1305) from the first commit. Python agent, WebSocket relay server, and a Capacitor/xterm.js client — no inbound ports required, and the relay never sees decrypted traffic. AGPL-3.0 (client under MIT).
github.com/techbuttonSelf-hosted remote-access and media-stack installer supporting Cloudflare Tunnel, Pangolin, Tailscale, Headscale, and Netbird — with CGNAT workarounds for anyone who can't get a public IP. Hardened through STRIDE/PASTA-style security review passes.
github.com/techbuttonHands-on experience connecting third-party APIs — OpenAI, Anthropic Claude, Google Gemini, and others — to automate data acquisition, enrich workflows, and reduce manual effort. Built pipelines that pull, transform, and act on data so businesses spend less time on repetitive tasks and more time on what matters.
let's discuss your workflowPrivate self-hosted AI server running Ollama with Open WebUI on bare metal — no data leaves the building. Used internally for Frequency42 client research, drafting, and AI-assisted workflows without relying on commercial LLM APIs.
frequency42.comManaged WordPress and static site hosting for small business clients — including chiropractic, photography, and local service businesses. Migrated sites from cPanel, set up automated failover, and handle ongoing updates and security.
frequency42.comAll products run on a private Docker stack: Caddy reverse proxy, Pangolin/WireGuard tunneling from a VPS to bare metal, MariaDB streaming replication, Proxmox-based hot standby with automated failover, NAS backup to a UGreen device, and 30+ Cloudflare zones — zero cloud vendor lock-in.
frequency42.com