Bryan Debnam

Systems Architect → AI Platform / MLOps Engineer Lewisville, TX · bdebnam@gmail.com · linkedin.com/in/bryanhd

Resume — AI Platform / MLOps: PDF · DOCX | Systems Architect: PDF · DOCX


Positioning

20+ years in enterprise IT, 3+ at the architecture level — cloud migrations, M&A technology integration, and identity modernization across four acquisitions, plus building and leading a 60+-control SOX/ITGC compliance program.

At work, more recently: “Script Portal,” an internal platform for interchangeable agentic-AI backends under one allowlist + output-masking safety model; Playwright RPA agents for SOX audit evidence; the org’s GitHub Enterprise Copilot rollout.

Independently (personal R&D; foundation: Texas McCombs AI/ML post-grad, 2024–2025): a full MLOps governance lifecycle (model registry, champion/challenger promotion with rollback, automated drift detection, data lineage), an LLM security triage tool, and LLM cost analytics — all on a self-hosted, dual-GPU Incus/k3s fleet.

What’s distinctive: the intersection of SOX/ITGC audit discipline and hands-on AI-platform engineering — few people have both.


Selected projects

Each project is tagged [Work] (Inform Diagnostics) or [Independent R&D] (personal), and scoped: Production (in real organizational use), Reference build (complete and running, single-environment / not scale-tested), POC (proves the pattern).

1. AI Governance & MLOps Lifecycle — [Independent R&D] · Reference build, flagship

An end-to-end model-governance pipeline for a 7-agent LLM system, applying SOX/ITGC evidentiary rigor to AI oversight.

2. Provider-Agnostic Agentic AI Platform (“Script Portal” / Agent Bridge) — [Work] · Production

An internal platform for deploying interchangeable agentic-AI backends under one safety model.

3. Agentic-OS Sandbox — [Independent R&D] · Reference build (self-hosted AI platform)

A ~60-instance self-hosted platform on a single dual-GPU host — the environment projects 1, 4, and 5 run in.

Detail — Architecture & infrastructure deck · AI service cards for the on-prem model fleet

4. AI Security Triage (garak-triage) — [Independent R&D] · Reference build

A red-team scanning and triage pipeline for LLM endpoints.

5. LLM Cost Analytics — [Independent R&D] · Reference build

Cost and usage visibility for a self-hosted / mixed LLM fleet.

6. SOX/ITGC Automation & Copilot Enterprise Governance — [Work] · Production


Skills — evidenced vs. currently deepening

Area Evidenced (projects above; W = work, R = independent R&D) Currently deepening
MLOps MLflow registry, champion/challenger, staged promotion + rollback, drift detection, Marquez lineage, LLM-as-judge eval, GenAI datasets production scale; Prefect/Dagster pipelines; feature store
Agentic AI provider-agnostic orchestration, VS Code broker extension, MCP/A2A services, RAG (Qdrant), guardrails (llm-guard), garak red-teaming LangGraph/CrewAI multi-agent; Agentic RAG; long-term memory
AI security / governance garak triage app, remediation library, guardrail-aware scans, SOX/ITGC rigor applied to AI NIST AI RMF / EU AI Act mapping; eval-gated release in CI
Infra / platform Incus fleet, k3s, GPU passthrough, ZFS, segmented networking, Caddy, Vault Terraform / IaC at scale; GitOps (ArgoCD/Flux)
Observability Prometheus, Grafana, Loki, Pyroscope, OTel collector, custom metrics proxy, Langfuse business-AI metrics + DORA in one pipeline
Cloud AWS SA-Associate + AI Practitioner + Cloud Practitioner; Azure Solutions Architect Expert + Admin Associate; Landing Zones, Well-Architected, multi-account governance (architecture level) deep hands-on AWS and Azure; SageMaker; cost governance at scale
Data Spark 3.5, MinIO/S3A, Qdrant, Postgres; MLflow on Postgres Iceberg/Delta lakehouse + catalog; Ray; large-scale platforms
Languages Python, Bash, PowerShell Java / Scala (JVM depth)
Enterprise delivery M&A integration ×4, identity modernization (~1,800 users), SOX program lead, Copilot rollout, lead-by-influence people leadership of a team / sub-leaders

Certifications & education


Honest scope statement

Two separate evidence bases, never blurred:


Verification

Issuer-hosted records, verifiable without an account: