THOMAS SIMON // SYSTEMS ARCHITECT · NOC ENGINEER · AI CONTEXT ENGINEER

Infrastructure Built on First Principles.
Systems Engineered for Human Sovereignty.

I design, stabilize, and document cloud infrastructure, virtualized networks, and human-aligned AI workflows. Combining two decades of multidisciplinary rigor—from telecommunications engineering and Tier-2/NOC operations to documentary visual reportage—I bridge the gap between complex machine topologies and the humans who rely on them.

[ Initiate Technical Inquiry ] [ Inspect Architecture & Projects ]
[02 // CORE COMPETENCIES]

Technical Architecture & Operational Matrix

Ground-level engineering competencies built on 13+ years of production operations, 100+ client tenant environments, and zero-fluff accountability.

01 / INFRASTRUCTURE

Cloud & Hybrid Infrastructure

Design, provisioning, and migration of fault-tolerant environments. Deep expertise across Microsoft Azure, enterprise M365 ecosystems, virtualization clusters, and deterministic automation.

  • Azure
  • VMware ESXi
  • Hyper-V
  • Terraform
  • Ansible
  • Linux / Windows Server
  • BCDR
02 / OBSERVABILITY

NOC Operations & Incident Triage

Tier-2/3 incident escalation, centralized monitoring pipelines, and rapid root-cause diagnosis. Managing 3,500+ endpoints with high-signal threshold tuning and runbook authoring.

  • NOC Tier-2/3
  • SNMP / Syslog
  • RMM Centralization
  • Root-Cause Analysis
  • MTTR Reduction
  • SLA Governance
03 / AI SYSTEMS

AI Context & Cognitive Engineering

Transforming unconstrained LLMs into structured cognitive amplifiers. Model Context Protocol (MCP) integrations, local agent orchestration, RLHF evaluation rubrics, and epistemic guardrails.

  • MCP Architecture
  • Local LLMs (Ollama)
  • Edge AI (RPi5)
  • Cognitive Graphs
  • RLHF Rubrics
  • Python
04 / SOVEREIGNTY

Security, Hygiene & Sovereignty

Pragmatic cybersecurity hardening, Zero-Trust access segmentation, and encryption protocols. Protecting operator autonomy and eliminating single-point vulnerabilities.

  • Zero-Trust Access
  • GPG / PGP Encryption
  • Endpoint Hardening
  • Digital Hygiene
  • Cloudflare Tunnels
  • Air-gapped Backups
[03 // APPLIED ARCHITECTURE & INITIATIVES]

Featured Systems & Pedagogical Labs

Case studies spanning enterprise MSP infrastructure stabilization, local edge AI compute, and civic digital sovereignty initiatives in Latin America.

Civic Pedagogy & Empowerment

Minka Lab

Problem Architecture

Learners in developing regions face pervasive platform extractive models and lack structured technical education to protect their data and build sovereign infrastructure.

Stack & Methods

Open-source Linux workstations, offline documentation nodes, encrypted messaging pipelines, and tailored AI literacy workshops.

Human & Operational Outcome

Engineered high-agency curriculum in La Paz, Bolivia, transforming vulnerable students into self-reliant operators equipped with practical digital hygiene and technical literacy.

Edge & Private AI Infrastructure

Autonomous Edge AI Telemetry Hub

Problem Architecture

Standard cloud LLM consumption entails third-party telemetry leakage, unpredictable latency, and vendor lock-in for critical personal and operational reasoning tasks.

Stack & Methods

Raspberry Pi 5, Ollama local model runtime, Cloudflare Zero-Trust Tunnels, Model Context Protocol (MCP) server endpoints, and Python telemetry probes.

Human & Operational Outcome

Self-hosted, air-tight cognitive node providing private AI reasoning and tool-calling capabilities across remote workstations with zero recurring cloud subscription overhead.

Enterprise Fleet Operations

Global MSP Multi-Tenant Fleet Observability

Problem Architecture

Managing 100+ disjointed client environments with 3,500+ endpoints suffering from alert fatigue, undocumented failure modes, and erratic Tier-2/3 escalation delays.

Stack & Methods

Centralized RMM monitoring, automated PowerShell diagnostic scripts, BCDR replication pipelines, and rigorous SNMP threshold baseline tuning.

Human & Operational Outcome

Achieved 40% reduction in MTTR, stabilized 99.9%+ availability SLAs, and codified deterministic runbooks that eliminated operational ambiguity for distributed engineering teams.

[04 // FOUNDATIONAL ETHOS]

The Non-Linear Synthesis: Documentary Optics to Systems Architecture

Technical infrastructure rarely collapses from sheer mechanical insufficiency. It fails at the boundary between the machine and the human operator.

Before managing enterprise network operations and cloud virtualization, I spent years working as a professional documentary and reportage photographer. Immersed in the visual tradition of Saul Leiter and Gregory Crewdson, I learned to read urban geometry, evaluate signal-to-noise ratios, anticipate timing, and perceive subtle human tension under pressure.

When backed by formal training in Telecommunications Technology and Computer Networks (CNAM France), this optical discipline translates directly into architectural rigor:

“Just as a photograph fails when there is discordance between frame, light, and subject—a technical system fails when there is discordance between machine topology and operator comprehension.”

I enforce an uncompromising boundary against the Counterfeit Frame: no unearned certainty, no marketing buzzwords, and no bloated abstractions that conceal operational flaws.

The Dual-Layer Architecture

  • 1. The Machine Layer (Infrastructure Rigor)

    First-principles network routing, deterministic IaC automation, zero-trust perimeter segmentation, fault-tolerant virtualization clusters, and high-fidelity telemetry pipelines.

  • 2. The Operator Layer (Human Sovereignty)

    Translating opaque system topologies into transparent mental models, mitigating cognitive fatigue during high-severity outages, and establishing human-AI alignment workflows.

  • 3. The Negative Space Filter

    Absolute rejection of abusive corporate double-speak, black-box vendor lock-in, and counterfeit aesthetics. Grounded execution with measured, just assertiveness.

[05 // OPERATIONAL PROTOCOL]

Methodology: The 5-Stage Encoding & Execution Protocol

A closed-loop cognitive and engineering framework deployed for complex technical troubleshooting, AI context engineering, and long-term knowledge transfer.

STAGE 01

Precise Technical Core

Establish the factual, zero-fluff root-cause mechanism stripped of marketing padding and superficial assumptions.

STAGE 02

Spatial-Visual Metaphor

Anchor abstract protocol logic and data flow to concrete physical, optical, or architectural mental models.

STAGE 03

Graphical Architecture Map

Render the system topology into visual structural matrices, state machines, or deterministic flowcharts.

STAGE 04

Physical Motor Lock

Extract the 3 to 5 irreducible rules and write them down by hand on paper to engage motor-cortex encoding.

STAGE 05

Feynman Verification

Teach the concept back under pressure with calibrated friction to expose and remediate latent blind spots.

[@PEAK] MODE Deep analytical architecture, syntax drills, and high-friction root-cause diagnosis.
[@INGEST] MODE High-level systems mapping, structural LLM scaffolding, and visual topology synthesis.
[@CONSOLIDATE] MODE Low-pressure reinforcement, prior-session verification, and memory consolidation.
[@EXEC] MODE Production triage, rapid runbook deployment, and zero-latency incident remediation.
[06 // ENGAGEMENT TERMINAL]

Initiate Technical Engagement

High-signal, high-accountability technical consulting. Available for remote independent contracting, enterprise infrastructure stabilization, and AI context engineering.

Direct Ingestion Pathways

Reach out directly via verified channels. Inquiries receive prompt, direct technical replies.

PRIMARY EMAIL:
contact@tsimon.me
DIRECT EMAIL:
hello@tsimon.me
PROFESSIONAL NETWORK:
linkedin.com/in/tsimonfreelance
PGP ENCRYPTION:
FINGERPRINT AVAILABLE ON REQUEST
[ Open Direct Mail Client ]