--- title: Oscar Garcia · Résumé · ozzyphantom.com description: Oscar Garcia — AI enablement, agent systems and support infrastructure. Retail IT systems specialist at Nouria Energy and founder of DuskStone LLC. canonical: https://ozzyphantom.com/resume/ --- Curriculum Vitae · 2026 # Oscar *Ozzy* Garcia AI Enablement, Agent Systems & Support Infrastructure Technical Architect · AI Enablement · IT Operations & Security Generalist - Portland, ME - Open to relocation: DC · BOS · NYC · SF - US Remote - [hireme@ozzyphantom.com](mailto:hireme@ozzyphantom.com) - [ozzyphantom.com](https://ozzyphantom.com) - [linkedin.com/in/ozzyphantom](https://linkedin.com/in/ozzyphantom) ## Summary Three years in a lead role developing IT support infrastructure for a rapidly growing retail, fueling and car-wash organization. Sole technical owner for an international import/export operation, from web development to Google Workspace configuration and SSO. I work legacy systems problems to the root and produce the documentation to prove it, while using the frontier to shape the future of support and infrastructure. Depth from packet capture to production TypeScript. ## Experience ### Retail IT Systems Specialist · Nouria Energy Corporation (Jul 2023 – Present) Portland, ME · Worcester, MA Promoted from IT Field Technician. 232 convenience, fuel and car-wash sites across New England. - **Triage the high-priority queue**, including the critical tickets assigned directly by the C-suite. - **Traced a site-wide wireless authentication failure across three vendor boundaries**: the access-point vendor, the managed network provider, and the ISP. Every ticket had been closed as working as designed. Captured wireless and wired traffic, proved a 3,570-byte TLS certificate fragmenting on the third frame, and put the root cause on the managed provider's firewall, which was failing to apply MSS clamping between the access-point VLAN and a WAN running a non-standard MTU. Validated the fix at two more sites, remediated the rest, and published the root-cause writeup. - **Built the retail support platform for the organization**: 100+ independently authored issue documents and SOPs written to a standard authoring procedure, a 232-site operational directory, and a 230-record device and cabling inventory. Docusaurus, released through Azure DevOps onto Azure Static Web Apps, with authentication and scoped permissions through Entra ID, against requirements set by the executive team. Atomic documents are deep-linked, and a quick-fix utility takes a site number and returns the documents that apply to that site's platform, or an instruction to escalate. - **Standardized device labeling across the organization** and built the rollout tooling: per-site label sheets generated from the site directory as print-calibrated PDFs, with a guided checklist and a reporting path for non-standard equipment found on site. Consistent labels across every site sharply raised the success rate of remote support. - **Acting technical project manager for new-construction sites**: the direct line between contractors, construction management, and the executive team, working POS, fuel dispensers, VLAN design, and network turn-up against a launch date. Assessed and wrote the procedures for new site systems including video walls, e-ink price tags, connected HVAC, and NVR. Wrote the rack and structured-cabling standards for NTI/RR sites organization-wide. ### Founder & Chief Technical Architect · DuskStone LLC (Dec 2025 – Present) Portland, ME · Remote One major client and a set of smaller engagements. Sole technical owner for **WrapUSA Industries**, a multi-million-revenue importer and distributor of moving and material-handling supplies with no internal IT. Every decision has to be maintainable by a non-technical team. - **Built Palace, the CRM and project platform the client now runs their business on daily.** React 19, Hono and TypeScript on Cloudflare Workers with Postgres, authenticated through Cloudflare Access with row-level security and gated by pre- and post-deploy tests and audits. Replaced two paid SaaS products and the lock-in with them. 287 commits and counting, with features still shipping on request out of user testing. - **Built the agent surface on top of it, in production for a paying client.** One route factory mounted twice, once for humans and once for machines, so both paths share a single implementation. Every agent is scoped to minimum permissions through a scope grammar validated at mint and again on every request, failing closed. Hash-only machine keys, each bound to a single machine actor, so every agent write is attributable in an append-only audit log. New agent surfaces are exercised in a sandbox first, and deployment to critical systems stops at a documented human approval gate. - **Launched wrapusaindustries.com** on Astro and Cloudflare Pages with GitHub Actions CI/CD and Chromatic. 73 products across 8 categories and a cart-style quote-request flow that pipes lead intake straight into Palace, with Resend delivery, Turnstile, and origin allowlisting on every endpoint. The content schema validates at build time, so a malformed catalog entry fails the build instead of reaching a customer. - **Turned 18 Chinese-language manufacturer spec sheets into a 142-SKU structured product model** with a decodable part-number taxonomy and a duty-based category system buyers search by. Translated and restructured with Claude Code and purpose-built skills, checked against a human interpreter, and published as a product directory with variations, retouched photography, and SVG measurement diagrams. - **Design, branding and search.** Paper wireframes, Figma and Claude Design through to build, or a hand-off to a professional designer when a project earns one. Sites are tuned for conventional SEO and for agent-surface readability, so a catalog answers correctly when an AI assistant is the one doing the shopping. - **Migrated the client off an unmaintained Microsoft 365 tenant to Google Workspace** and put the stack behind Cloudflare Zero Trust with Google SSO. Still administer identity, groups, collaborative inboxes, onboarding and offboarding, and Bitwarden shared-key management. User experience is the security measure: passwordless sign-in, passkeys and SSO mean there is far less to worry about from the human. ### Production Technical Assistant · Terra Cotta Pasta Co (Jul 2020 – Feb 2023) Dover, NH - **Specified and deployed connected sensor and monitoring upgrades on production machinery.** Technical and mechanical support on call for equipment failures through pandemic-era volume scaling. - **Rewrote equipment manuals and SOPs** into standardized operator training material. ### IT Support · Liberty Mutual Insurance (contract) (Jul 2019 – Mar 2020) Dover, NH - **Tier 1 support.** Authored knowledge-base articles well past the tier-1 remit, replacing unusable vendor documentation and closing out recurring ticket types. Held record call times for the floor: a ~5-minute on-call average and a ~1-second after-call average. ## Selected work - **[ios-countdown.win](https://ios-countdown.win)** — solo project, #1 on Hacker News, February 13, 2026. Driving attention to Apple's keyboard UX flaws. Cloudflare Workers, zero runtime dependencies. - **“Cutting through Vendor Support Silos and Discovering a PPSK Handshake Failure at the Source”** — published root-cause case study, with the formal incident report written for the vendors. [ozzyphantom.com/case-studies](https://ozzyphantom.com/case-studies), more cases inbound. - **[SuperDirectory](https://github.com/ozzyphantom/SuperDirectory)** — interactive CLI for flattening and organizing messy directory trees. Built in Python, then ported to Go for performance and interoperability. - **[wrapusaindustries.com](https://wrapusaindustries.com)** — client website: the 73-product catalog and quote-request flow above, live. - **[This Might Not Matter](https://thismightnotmatter.com)** — my blog, where I write about technology, fiction, philosophy, and whatever else is on my mind. - **Homelab** — zone-based firewall policy across two physical sites, site-to-site tunnels, VLAN segmentation, and tunnel-only ingress through Tailscale and Site Magic with no port forwarding. Proxmox runs the VMs and LXCs: Home Assistant, a Minecraft server, and whatever else I'm working on. ## Technical - **Networking:** VLAN design · PPSK and 802.1X · RADIUS/RADsec · Wireshark packet analysis · MTU/MSS and path-MTU discovery · zone-based firewall policy · Tailscale - **Cloud & identity:** Cloudflare (Workers, Pages, Access/Zero Trust, DNS, WAF) · Azure Static Web Apps, Azure DevOps and Entra ID · Google Workspace administration · Postgres · Proxmox - **Application:** TypeScript · JavaScript · SQL · Python · Go · Bash · React · Astro · Hono · Tailwind · Drizzle ORM · Docusaurus · REST/JSON integrations - **Certifications:** Gilbarco Passport Certified Technician · Google UX Design Certificate ## Education Business Administration coursework, Baruch College. ## Contact [or use your preferred email client](mailto:hireme@ozzyphantom.com)