Isophoric

Oswego, New York · Remote since 2015

Aaron Carpenter

Technical account management, identity & access, and applications built to a constraint.

aaronsc.tech@gmail.com linkedin.com/in/aaron-carpenter-it

Twenty-five years in IT, fifteen of them running an independent managed services practice as the person a business calls when identity, access and device management have to actually work. In 2026 I started directing application builds.

Six of them now exist, across Flutter, Kotlin and JavaScript. AI coding agents are the implementation layer. The architecture, the stack selection, the constraints and the course corrections are mine — and the constraints are the part worth reading, because each of these applications is defined less by what it does than by what I refused to let it do.

Three of the six are public-safety or civic tools, and a fourth is a free public job search. That is not a coincidence; it is the same instinct that makes a good escalation point, pointed at software.

2026

Six applications, six constraints

Flutter · Android, Windows, web

LogiMaps

Navigation and hazard awareness for delivery drivers and first responders, on an all-free OpenStreetMap stack. Scans package labels into a stop list, routes around tolls and driver-marked impassable roads, speaks turns offline, and layers responder data over the map: FEMA’s national shelter registry with live status, IPAWS and state alerts, roughly 495 county and town alert feeds across 16 jurisdictions, 38 road-closure sources, flood gauges, road-weather sensors, air-quality and smoke overlays, and nuclear-plant zones. The largest of these codebases, at 53 Dart source files and 64 tests, prepared for open release.

What the constraint forced: every network call is wrapped so that a failure writes one line to a diagnostics screen and nothing else — the driver is never interrupted. The optional Claude advisory layer lives on a PC behind a token-gated, rate-capped relay, so the phone never holds a credential and the app is complete without it.

Flutter · Android, Windows

Weather Generative Button

Built at the request of the American Red Cross Northeast sector IT lead, for volunteers and first responders. Aggregates current weather, water and alert data for a given coordinate and radius, and emits a structured plain-text safety report. Working end to end.

What the constraint forced: every source had to be replaced with a free, key-less equivalent, and each one wrapped in its own failure boundary. A source that goes down costs only its own lines, and says so in a status block rather than failing the report silently. The data sources, the report layout, and a survey of every New York county’s alert system are documented in the repository.

Kotlin · Jetpack Compose · Android

ChirpSqueak

Transmits and receives short text messages as audible sound, phone to phone, over an 8-FSK phase-continuous protocol. No pairing, no network, no account — two devices in the same room and a speaker. Messages can be sealed with a QR-paired AES-256-GCM key. A prototype: the modem and cipher are verified by 70 unit tests against synthesized audio, not yet field-tested between two phones.

What the constraint forced: a dependency audit rather than a feature list. QR decoding went to ZXing instead of the obvious ML Kit, whose detector self-downloads its model on first use — which would have required exactly the permission the application is built to refuse.

Modulation8-FSK, phase-continuous
Tone pool1800–3600 Hz
Symbol length60 ms
Throughput~50 bit/s
Max payload255 bytes

Flutter · Android, web

Oswego Crier

A public-service application for residents of Oswego, New York, consolidating emergency alerts, local news, city hall announcements and emergency resource contacts into one place. Seventy-two Dart source files and 315 tests across models, services, screens and widgets, with a signed release bundle built for Google Play. The web edition is live on this site.

What the constraint forced: the architecture had to survive with no budget behind it — no paid feeds, no per-seat services, nothing that turns into an invoice a small city has to justify. A civic tool that depends on someone remembering to renew it is not a civic tool.

Kotlin · Jetpack Compose · Android

WhatWeKept

A location-based game on live satellite maps — GPS player marker, proximity-gated interaction, NWS forecast, radar and cloud-cover overlays, and per-user progress. The backend contract was written first: deny-by-default Firestore security rules, deployed, with the client built behind a repository interface so that backend drops in; the current build persists locally.

What the constraint forced: the rules had to be written as though the client were hostile, because a mobile client always is. Access decisions are expressed in server-side security rules (validated create-only; update and delete refused), not in the code path that calls them — so the client is not trusted to do the right thing, only prevented from doing the wrong one.

TypeScript · Node · MariaDB · daily crawl

Remote Job Search

A free, public search of remote jobs for anyone looking for work. Once a day it reads the public job boards of more than 18,000 employers directly — on Greenhouse, Lever, Ashby, SmartRecruiters, Recruitee, Rippling, Breezy, BambooHR, Workday, Oracle, iCIMS, Phenom, SuccessFactors, Eightfold and Radancy — another 4,500 on Workable a slice at a time, within the limits Workable sets, plus three remote job boards, keeps only remote roles, and labels each one for the filters a reader needs: role, region, US state, pay, and whether a posting asks for a bachelor’s degree, travel, in-person days, another language or a professional license. On 9 October 2026 that was 62,599 remote jobs from 7,513 employers. It is now growing into a full-stack product: the search runs on a shared, typed TypeScript core, and a Fastify API with a MariaDB database is being built for optional free accounts that keep searches on every device and send job alerts, with passkey sign-in and every change tested against a real database.

What the constraint forced: the crawler may remove only what is not a remote job — on-site roles, commission-paid roles, test postings — and must label everything else, because hiding a real job from someone who needs one is the costly mistake. So labels carry their evidence: a job tagged “bachelor’s degree required” quotes the sentence that set it, and 65 regression tests pin each misreading found along the way.

Since 2010

The practice underneath

Independent MSP

The final escalation point

Fifteen years owning the whole technical relationship for small-business, nonprofit and healthcare clients — assessment, onboarding, implementation, adoption, renewal. 85–95% of issues resolved remotely, and average time-to-resolution down roughly 30%, which comes from confirming root cause rather than restarting a service and hoping.

Identity & access

Where the hard tickets actually live

Most escalations that reach me are not application problems. They are Entra ID and Active Directory problems wearing an application’s clothes — single sign-on, MFA, Conditional Access, permissions inheritance, delegation, and authentication records that were correct for an environment that no longer exists.

Endpoint & device trust

Intune, Defender, Umbrella

Device lifecycle across Windows and macOS fleets — enrollment, compliance policies, device profiles, Autopilot — alongside Microsoft 365 and Google Workspace tenant administration and PowerShell for the parts that should never be done by hand twice.

Teams & documentation

Making the next person not need me

Managed a 10+ technician help desk at Monroe Community College and built the onboarding and training programs that standardised it. Runbooks and knowledge-base articles are why client ticket volume declines over time — my degree is in literary composition, which is a strange credential for a service desk and a useful one when the deliverable is a clear written explanation.

Certification
ServiceNow Certified System Administrator Active
Prior, inactive
CompTIA A+, Network+, Security+ · Certified Information Systems Auditor (ISACA)
Vendor training
OEM service technician — Dell, Lenovo, Lexmark. 258 completed technical courses via CompuCom (CCLearn / Skillsoft).
Education
A.A., Literary Composition — Monroe Community College
Prior clearance
Project-specific clearances for controlled DoD and NASA document handling (Xerox); contracted U.S. Secret Service protective support. Not current.

Describe what is breaking

Available for remote technical account management, implementation and senior support engineering roles. Remote only, working Eastern time in a remote-first practice since 2015.

The fastest way to find out whether I am useful to you is to describe the environment that is currently breaking.

aaronsc.tech@gmail.com linkedin.com/in/aaron-carpenter-it