Technology consulting · Hermosillo, Mexico
I started in a NOC chair, monitoring servers at 3am.
Eleven years later I'd been promoted five times at the same company, ending as CTO. Along the way: a SOC 2 Type 2 certification led while running the systems being audited, 99.9%+ uptime on ad-serving and publishing platforms, and engineering and operations teams across Mexico, the US and South America.
Today I spend two to three weeks inside a technology operation — yours, or one you're about to buy — and tell you what's actually true. If you want the findings fixed, I do that work too.
Most assessment work is done by people who have never carried a pager. They produce findings that are technically correct and practically useless. The difference shows up in the prioritization — which is the part you're actually paying for.
Services
Technical due diligence
For acquirers and investorsWhat you're actually buying: architecture, security posture, technical debt with a remediation cost attached, cloud and vendor costs, key-person risk. A red-flag summary written for someone deciding whether to sign.
Security and compliance
For companies that grew faster than their securitySecurity best practices sized to your company: access, vendors, backups and incidents, with policies your team actually follows. And when it makes sense, preparation for SOC 2.
Reliability and operations
For companies whose uptime is costing them customersIncident-pattern analysis, SLOs, on-call structure and load, monitoring gaps, change management, backup and recovery — what's actually causing your outages, rather than what everyone assumes is causing them.
Nearshore engineering
For US companies building, or struggling with, a team in MexicoEmployment structure, city and talent-market selection, compensation benchmarks, hiring and ramp plan, retention. I built an operations centre in Hermosillo from its first hire into a core delivery hub — I know where this goes wrong because I've been there when it did.
More, including platform consolidation and data and analytics, on the services page.
Every assessment ends the same way: a written report — an executive summary a CEO will read, findings precise enough for an engineer to act on — a prioritized roadmap with effort and cost against each item, and a working session with your team. Assessments and projects are fixed-fee, and the fee is agreed before any work begins.
Afterwards, some clients take the report and run with it. Some have me do the work on the roadmap, and some keep me on a monthly advisory retainer. For programs that need a full team, I'll introduce you to people who do that work full time — I'd rather refer the rest than do it half-well.
I work remotely from Hermosillo, Mexico, in English or Spanish, as I have for US companies for fifteen years. Standard vendor invoice — no employer of record, no entity setup. I take a limited number of engagements at a time.
A short call usually clarifies where to start, what the work would cover, and what it would cost. No obligation — and if I'm not the right fit, I'll say so.