SYSTEMS · MUSIC · VIDEOS · LÖHAN · ENTRA ID · TERRAFORM · AWS · INTUNE · OKTA · BYE.CHAII · PRODUCED · DIRECTED · SEWN BY HAND · SUPER BOWL BUSH · SYSTEMS · MUSIC · VIDEOS · LÖHAN · ENTRA ID · TERRAFORM · AWS · INTUNE · OKTA · BYE.CHAII · PRODUCED · DIRECTED · SEWN BY HAND · SUPER BOWL BUSH ·

Est. San Francisco Bay Area Systems by day / Creative by night

AIDAN
CARNAHAN

At a glance

Two disciplines,
one standard.

Engineering keeps things reliable. The creative work keeps things interesting. Both run on the same obsession with detail.

400+

Employees supported

25+

Distributed jobsites

30+

Government clients served

SF Bay Area

Born, raised & based

BYE.CHAII

DJ sets on SoundCloud

LÖHAN

Clothing label, live now

End of spec / 000

001 / Systems

Resume

IT Systems, Cloud & IAM Engineer: identity lifecycle, endpoint engineering, cloud infrastructure, security operations, and automation across regulated environments.

LinkedIn ↗
San Francisco Bay Area, CA

Experience

SEP 2025 - PRESENT
RICHMOND, CA

IT System Engineer

Overaa Construction, Inc.

Lead infrastructure, endpoint, cloud, IAM/security, and service operations for a 400+ employee general contractor spanning corporate users and 25+ distributed construction-site environments.

Built the Entra ID / Intune endpoint foundation: MDM enrollment, app deployment, device compliance, Conditional Access and MFA alignment, and JML efficiency.

Deploy and standardize jobsite infrastructure: connectivity, endpoints, remote management, camera/security systems, vendor coordination, and 90-day footage retention workflows.

Support cloud and server automation with Terraform, Kubernetes, CI/CD practices, Microsoft Sentinel, and security tooling, plus M365, CrowdStrike, Barracuda, backup/DR, RMM, and secure AI enablement.

JUN 2024 - SEP 2025
CA & NEVADA

Senior IT Business Systems Analyst

Infinity Technologies

Primary IT owner for the City and Police of Atherton and Half Moon Bay while consulting for 30+ local government clients across infrastructure, security, cloud, endpoint, and service operations.

Modernized city and police environments: cloud storage migrations, network redesign, access and security improvements, new building/museum IT buildouts, and Hyper-V server work.

Created secure network segmentation for police bodycam upload workflows and supported CJIS-aligned public-safety environments. Automated workflows and reporting with PowerShell, Python, R, SQL, Power Automate, APIs, Azure SQL, and Power BI.

JUN 2023 - JUN 2024
REDWOOD CITY, CA

Technical Support Analyst

Bolt Biotherapeutics, Inc.

Supported 120 FTEs and contractors across enterprise applications, lab systems, endpoint management, AWS workloads, security monitoring, and regulated biotech operations.

Administered Okta SSO/SAML, Microsoft 365, Zoom Rooms, Freshservice, Veeva Vault, SentinelOne, Arctic Wolf, and AWS EC2/S3/IAM. Implemented Intune, Autopilot, Automox, and PowerShell workflows for enrollment, patching, and lifecycle handoffs.

Engineered AWS and lab data protection workflows: custom IAM JSON permissions, VLAN segmentation, Synology/Acronis backup/DR, VPN/IP allowlisting, and Windows/macOS/Linux support.

JUL 2022 - JUN 2023
SF BAY AREA, CA

IT Support Consultant

Clarke IT Consulting

Supported multiple Bay Area biotech clients across helpdesk, systems administration, endpoint management, applications, networking, and security tooling, including consulting support for Bolt Biotherapeutics.

AUG 2021 - JUL 2022
BOISE, ID

Library Computing & IT Specialist

Boise State University, Albertsons Library

Supported students, faculty, and staff with IT, computing, AV/video production, documentation, and technical training. Led a four-person data analysis project tied to public transit route recommendations.

Selected projects

P / 01

Entra ID / Intune Endpoint Foundation

Designed and built the modern endpoint stack for a 400+ user org: MDM enrollment, app deployment, device compliance baselines, Conditional Access and MFA alignment, and a streamlined joiner/mover/leaver lifecycle.

Entra IDIntuneAutopilotConditional AccessMFAJML lifecycle

P / 02

Distributed Jobsite Infrastructure Standard

Standardized IT across 25+ active construction sites: connectivity, endpoints, remote management, camera/security systems, vendor coordination, and 90-day footage retention workflows.

NetworkingRMMCamera / security systemsVendor management

P / 03

CJIS-Aligned Public-Safety Network Segmentation

Engineered secure network segmentation for police bodycam upload workflows in CJIS-aligned environments, isolating evidence traffic from general municipal networks.

Network segmentationCJISVLANsAccess control

P / 04

City Cloud Migration & Network Redesign

Modernized city and police IT environments: cloud storage migrations, full network redesign, access and security improvements, Hyper-V server work, and ground-up IT buildouts for new municipal buildings.

Cloud migrationNetwork redesignHyper-VSecurity hardening

P / 05

AWS & Lab Data Protection Workflows

Engineered data protection for regulated biotech operations: custom IAM JSON permission sets, VLAN segmentation for lab systems, Synology/Acronis backup and DR, and VPN/IP allowlisting.

AWS IAMEC2 / S3VLAN segmentationBackup / DR

P / 06

Workflow & Reporting Automation

Automated recurring workflows and reporting for 30+ government clients using PowerShell, Python, R, SQL, Power Automate, REST APIs, Azure SQL, and Power BI dashboards.

PowerShellPythonSQL / Azure SQLPower AutomatePower BI

Core technical skills

Identity & Access Management

Entra ID / Azure ADOktaSSOSAML / OIDC / SWAAWS IAMConditional AccessMFAPIMRBACJML lifecycle

Endpoint Engineering & M365

IntuneAutopilotMDMDevice compliancePatch managementMicrosoft 365ExchangeSharePointTeamsOneDrive

Cloud, Infrastructure & DevOps

AWS EC2 / S3 / VPCRoute 53LambdaAzure SQLPower BITerraformKubernetesCI/CDHyper-VBackup / DR

Security & Networking

Microsoft SentinelCrowdStrikeSentinelOneBarracudaProofpointArctic WolfMerakiSonicWallVLANs / ACLs / VPNCJIS

Automation & ITSM

PowerShellPythonBashSQLRPower AutomateREST / APIsFreshserviceRMM toolingRunbooks

Operating Environments

Construction / field opsLocal governmentPublic safetyBiotech / lab systemsSOX / GxP-awareSecure AI enablement

Education & certifications

BOISE, ID

Boise State University

Information Technology Management · Minor in Supply Chain Management · Dean's Honors List

CJIS Advanced Security Certification Business Analytics Certificate: Predictive / Prescriptive / Descriptive / Diagnostic

Request full resume →

End of spec / 001

002 / Creative

Music. Videos.
Clothes.

DJing and producing as BYE.CHAII, making videos with and for other artists, and running LÖHAN, a clothing label built on minimal silhouettes and heavyweight fabrics. Everything here was made after hours.

Music videos & creative work