• Tulsa, Oklahoma
  • Open to remote
cv.kfhiggs.com
Illustrated portrait of Kenneth Higgs

Kenneth Higgs

Solutions Architect · Infrastructure and Automation

I design standard, repeatable infrastructure for managed service clients, and the automation and integrations that build and run it.

Read the full resume

What I build

Standard designs, connected platforms, and identity

Standard designs

Build it once. Build it the same way every time.

  • A private cloud build console that builds a full client environment from one form.
  • Five baseloads that take a new server from a fresh Windows install to ready-to-deploy, with no engineer at the keyboard.

Platform integration

Tools that share one picture of the client.

  • Monitoring routes tickets into the PSA. Asset data keeps the documentation current.
  • Integrations for an in-house operations platform, including software that deploys automatically.

Identity

Who gets in, to what, and from where.

Microsoft Entra ID

  • Conditional Access
  • Entra Connect (hybrid identity)
  • Intune device compliance
  • Privileged Identity Management
  • app registrations and enterprise app SSO
  • B2B guest access
  • ADFS to Entra migration
  • Duo single sign-on across the MSP tool stack.
  • ADFS and on-premises federation.
  • AWS IAM access management.

Scale, and whose scale it is

49 → 12hands-on hours per private cloud build (estimated)TulsaConnect
~20client companies as lead engineerabout 500 end users · TulsaConnect
~2,000VMware virtual servers, 3 data centersteam of 6 · Muscogee Nation Gaming Enterprises
6–10engineers on the team I ledmore than 100 clients · TailWinds Technologies

Featured work

Work I designed and shipped

TulsaConnect

Private cloud, one standard build

One form builds a full client environment. The build console checks each change before it applies it.

  • domain
  • servers
  • remote desktops
  • firewall
  • certificates
  • Microsoft 365 link

Start to finish (estimated)about two weekstwo or three days

TulsaConnect

MSP tool stack, end to end

I integrated the RMM, PSA, documentation, and security stack behind Duo single sign-on.

  1. N-centralroutes tickets intoHaloPSA
  2. Liongardkeeps Hudu asset records currentHudu
  3. Duo-protected single sign-oncovers every tool

Also shipped the integrations for an in-house operations platform: SentinelOne, N-central, Duo, and an entitlement engine that deploys software automatically.

Personal

Mealie recipe server

A public recipe server, self-hosted on my own infrastructure. Try it.

Open Mealie

How I work

How I work

Don't make something unless it is both necessary and useful; but if it is both necessary and useful, don't hesitate to make it beautiful.

Shaker maxim

I started as a newspaper designer at the Tulsa World, a daily paper, with a degree in news-editorial journalism and advertising. Then I moved to infrastructure. The habit stayed: documentation and interfaces get the same care as servers.

MegaMind. I design and run a self-hosted multi-agent AI platform. Every task passes a scope-check agent and a human review gate. See the architecture