# GovernTech Consulting For executives who want control of their technology: plain answers, documented access, accountable ownership. > GovernTech pairs real governance, compliance done properly, structure and control with boots-on-the-ground engineering execution. Not copied compliance documents. Not endless engagements. Assess, architect, build and oversee: hands-on work that gets built and shipped, with short, hourly engagements scoped up front. Maryland/DC, Florida, and remote nationwide. On-site in Maryland and Florida, and anywhere the work needs me, including overseas. ## Governance + technology Structure. Control. Executed. GovernTech pairs real governance, compliance done properly, structure and control with boots-on-the-ground engineering execution. Not copied compliance documents. Not endless engagements. Assess, architect, build and oversee: hands-on work that gets built and shipped, with short, hourly engagements scoped up front. ## Who it's for - **Technology leadership**: For teams that need one accountable engineer to lead technology with governance, structure and control. - **Architecture and priorities**: For leaders assessing the as-is environment and planning what comes next. - **Implementation and vendors**: For teams that need hands-on engineering or oversight of implementation and vendors. - **Ongoing oversight**: For organizations that need continuing security, accountability and control of technology. ## Services ### Discovery & assessment Understand the as-is state before deciding what comes next. - Map users, devices, accounts, licenses, vendors and admin rights - Assess risk, ownership and operational dependencies - Set priorities with a written scope, hourly estimate and not-to-exceed cap ### Architecture & structure Real structure and compliance, put into practice rather than copied documents. - Define system architecture, integrations and data flows - Establish ownership, access boundaries and implementation priorities - Plan cloud, infrastructure and Salesforce work around the operating environment ### Engineering & implementation Build the systems and automations the plan calls for. - Build internal tools, integrations, data pipelines and AI automations - Implement infrastructure, cloud and migration work - Build hands-on or oversee implementation and vendors, with documented decisions and handoff ### Oversight & control Keep technology accountable as it evolves. - Provide ongoing oversight of systems, implementation and vendors within an agreed scope - Maintain security, least privilege, MFA and logged access - Review priorities, document changes and keep ownership with your team ## Full-stack capabilities Discovery first. Then anything. Start with discovery: map the environment, find the risk. - **IT command & control**: own the environment end to end, including multi-site IT on lean teams - **Security & access**: Zero Trust, endpoint and email security, access reviews, audit readiness - **Cloud & infrastructure**: cloud tenant and file migrations, including zero-downtime cutovers - **Salesforce & integrations**: untangle orgs, connect apps - **AI builds**: internal tools and automations that ship - **Data & analytics**: pipelines, dashboards, and exec and board-ready IT reporting - **Lab & instrument systems**: regulated lab systems: GxP-adjacent, LIMS, eQMS, digital pathology, validation and audit prep - **Hardware & device builds**: medical-grade carts and field hardware - **Vendors & moves**: vendor and MSP management, office moves and site build-outs, including international - **Finance systems**: finance-system access and controls ## How engagements work - **Assess**: Discover the as-is environment, ownership, dependencies and risk. - **Architect**: Set structure, architecture and priorities. Agree a written hourly estimate and not-to-exceed cap before work starts. - **Build**: Engineer the systems or oversee implementation and vendors. Work in defined windows, with changes documented and logged. - **Oversee**: Provide ongoing oversight, security and control within the agreed scope. Keep decisions documented and access client-owned; remove my access when the engagement ends. Hourly engagements, scoped up front, with a written estimate and not-to-exceed cap. No billing past the cap without your written OK. Billed in half-hour increments, same rate for everyone, with a line-item log. Every invoice shows date, hours, and what was done. Invoiced every two weeks, in arrears. No prepayment. ## Access & security - **Your accounts, not mine**: I work only through named accounts you create and own. No shared logins, no passwords over email or chat. - **Least privilege, time-boxed**: The minimum role each task needs. Elevated access expires when the engagement ends. - **MFA on every account I use**: No exceptions. - **Everything logged**: Your audit logging stays on, and my line-item log matches what the logs show. - **Your data stays in your systems**: No client data goes into my personal AI tools unless you approve that specific tool in writing. - **NDA before access**: I'll sign yours, or provide a mutual one. - **Offboarding myself is a deliverable**: At the end I remove or hand back all access, rotate anything I touched, and give you a list to verify. - **Nothing left behind**: No client data stays on my devices after the engagement. ## Selected work ### LIFE SCIENCES: Company-owned workflow system. Problem: A specialized vendor system constrained ownership and change. Approach: Built an in-house system around the workflows the organization used. Result: An owned system with control over its evolution. ### SALESFORCE: Accountable platform ownership. Problem: The platform needed clear ownership and documented architecture. Approach: Led administration and mapped objects, automations, permissions and data flows. Result: An accountable owner and documented platform structure. ### MEDICAL DEVICE: Operations with a trained successor. Problem: The organization needed technology leadership and internal continuity. Approach: Led IT operations and trained an internal successor. Result: Internal ownership with a documented handoff. ### PERSONAL BUILD: Live data engineering with controls. Problem: A real-time data build needed reliable integration and controlled execution. Approach: Built a live API integration with automated execution, safety limits and out-of-sample testing. Result: A working system with explicit controls and honestly reported test results. ## About GovernTech means governance + technology. I lead technology with structure and control, then build and run it. I use AI operationally to assess environments and build tools and automations your team can maintain. You work directly with Jack, Principal engineer: from first discovery through architecture, engineering and ongoing oversight. Hourly engagements, scoped up front. ## Templates and runbooks Starting points Jack brings to the engagement, then tailors to your environment. Hourly. Built to get you ready for an audit, not a promise of one. - **Onboarding and offboarding**: Runbooks for the day someone joins, and the day they leave. - **DR, BCP, and incident response**: Plan starters for an outage, a breach, and the hours after. - **SOC 2 / HIPAA policy starters**: Policy sets to begin from, then tailor to the environment you have. - **Vendor-risk kit**: Questions, owners, and a review path for the vendors you already use. These are starting points for an hourly engagement. They are not products, and nothing is sold as a download. ## What I won't do - **Helpdesk & pager duty**: 24/7 helpdesk or pager duty. Technology leadership and engineering, not an emergency support desk. - **Reselling**: Resell hardware or licenses for a kickback. Recommendations follow the architecture and your needs. - **AI slideware**: AI projects that produce only slides rather than working systems. - **Billing beyond the cap**: Pad hours, or bill past the cap without your written OK. - **Handling your money**: Hold your money, buy on your behalf, or take a percentage of anything. I'm paid for my time. - **Embedded staffing & retainers**: Undefined embedded staffing or open-ended work without an agreed scope. Ongoing oversight is scoped and billed hourly. ## Contact Email: jack@governtechconsulting.com Phone: (443) 308-8319 Serving Maryland/DC and Florida, remote nationwide. On-site in Maryland and Florida, and anywhere the work needs me, including overseas. Start with discovery. Email me a few sentences about your technology and what you want to build. Within a day I’ll confirm fit and the next step. Auditors know the command.