Illustrated portrait of Jason Epel with the La Jolla, California coastline behind him

Overview

Jason Epel

VP of Engineering & Technology at eSUB · SaaS, Cloud, Data & AI · Scaling high-performing engineering organizations


I lead engineering and technology organizations that ship durable software and run the systems a modern company depends on. As VP of Engineering & Technology at eSUB, I own the software, cloud, data, and IT functions behind a construction SaaS platform used by subcontractors across the United States and Canada.

Over nearly seven years at eSUB I have grown from Senior Manager to Director to VP, expanding scope from a single product team to the full engineering organization and the business systems that support sales, finance, security, and operations. I set the technical strategy and drove the execution behind our modernization on AWS, where my teams delivered a stack built on React, React Native, serverless services, and streaming data, along with the analytics and BI foundation that turns product data into decisions.

My background spans SaaS, mobile, public and private APIs, and cloud infrastructure across AWS, Azure, and GCP, across construction, medical and biotech, financial services, higher education, legal, government, and ecommerce. I am also an Agile practitioner and coach who has introduced and scaled Scrum and Kanban across multiple companies, moving teams from waterfall to predictable, quality-first delivery.

Most recently I have led our adoption of AI, working hands-on with Claude Code alongside my team to build internal AI services, developer tooling, and automation that change how we deliver. I care about clear priorities, healthy teams, and technology that earns its keep.

Get in touch

Connect with me on linkedin.com/in/jasonepel, or use the chat bubble in the corner to message me directly.

Experience

Experience#

A leadership career across software, cloud, data, quality, security, and enterprise IT — from the current VP role back through three decades of building and running engineering teams and systems.

What I do#

Ten domains I have led and delivered in, from executive technology leadership to hands-on architecture.

Engineering Leadership & Organization

Building and leading distributed engineering organizations: hiring, managing managers and individual contributors, org design, and executive technology leadership.

Software Engineering & Architecture

Full-stack product development and application architecture across web, mobile, and API, including hands-on development.

Agile Delivery & Scrum Transformation

Agile coaching, ScrumMaster practice, waterfall-to-Agile transformations, release management, and backlog and sprint process.

Cloud, DevOps & Infrastructure

Multi-cloud platforms, CI/CD, DevSecOps, observability, and release engineering.

Data Engineering, Analytics & BI

Data pipelines, warehousing, and business intelligence.

Quality Assurance & Test Engineering

QA leadership, test automation, and test and defect management.

Security

Application and infrastructure security: mobile device management, secure messaging, DevSecOps, certificate authority, firewalls, and VPN.

Enterprise IT, Systems & Messaging

Directory, messaging, and network infrastructure administration and systems engineering.

Program & Project Management

Program and project delivery, disaster recovery planning, budgeting, and documentation.

Developer Tooling & Platform Administration

Administration of engineering tooling (Atlassian suite, source control) and system integrations.

VP, Engineering & Technology#

eSUB Construction Software · Nov 2019 – Present · Remote (US)

Senior Manager (2019) → Director (2023) → VP (2025).

  • Lead a 22-person, four-country engineering organization (US, Mexico, Colombia, Poland), now fully remote, setting strategy across software, cloud, data, security, and business systems for eSUB's construction SaaS portfolio.
  • Direct the teams delivering eSUB Fusion and eSUB Classic, their iOS/Android apps, and ERP integrations including the Windows eSUB Connector for Sage 100/300; work directly with the team to choose, build, maintain, scale, and upgrade third-party integrations that extend product functionality without building every capability in-house.
  • Set technical direction for a modern AWS stack (React, React Native, serverless APIs, streaming data) and the analytics/BI foundation that turns data into decisions.
  • Stay hands-on in DevSecOps and cloud operations across AWS, Azure, and GCP, balancing modern services with legacy platforms.
  • Triage customer escalations personally, engaging through support to remediate issues and balancing escalation response against roadmap commitments to keep releases on schedule.
  • Lead adoption of generative AI (Claude) across eSUB, from rolling out Claude for Work with Microsoft 365 to running an internal AI enablement hub and workshop program.
  • Work hands-on with Claude Code alongside the team on internal MCP API services, an AWS Bedrock customer-issue triage agent, developer tooling, and automation, setting guardrails for AI-assisted engineering.
  • Directed and built an encrypted design-preview publishing system for sharing unreleased designs with outside reviewers — AES-256-GCM pages decrypted client-side with access codes and a private/public repository split so only ciphertext is ever published — plus a self-service browser admin gated by Entra ID SSO with a Cloudflare Worker auth proxy holding the only repository credential behind a strict allowlist.
  • Run production operations and reliability for the SaaS portfolio, including observability and alerting (Datadog, CloudWatch, Lumigo) and feature-flagged delivery with LaunchDarkly.
  • Own the business technology stack (CRM, ERP, accounting, IT, security, customer-health tooling) supporting sales, finance, marketing, and operations.

Manager, Software Engineering / IT Enterprise Projects#

Kibo Commerce (formerly Certona) · Nov 2018 – Nov 2019

Joined via Kibo Commerce's acquisition of Certona, continuing to lead the personalized-search and predictive-analytics team through the transition.

  • Led a 4-person team developing a personalized search API paired with Certona's proprietary ML/AI predictive analytics services.
  • Administered Azure AD and on-prem Active Directory environments, plus Windows Server 2012/2016 infrastructure, and Office 365 tenants including Exchange Online integration with the Marketing and Sales CRM products.
  • Consolidated and migrated Jira, Confluence, and SharePoint (Online and on-premise) across four implementations, configuring custom workflows and third-party integrations, and implemented Atlassian Service Desk as the team's help desk platform.
  • Consolidated source control across Azure DevOps and a pseudo on-premises Bitbucket/GitHub Enterprise installation hosted in AWS.
  • Introduced Docker and Terraform for GCP development and deployment, supported Jenkins CI/CD, and wrote Bash scripts to automate Linux VM and Docker container administration.
  • Served as Scrum Master, coaching the team on story-point estimation, risk management, technical-debt budgeting, and in-sprint backlog prioritization.

Director, Engineering R&D#

BioTelemetry · Jun 2017 – Oct 2018

  • Led a global, 17-person R&D QA software and hardware engineering team delivering proprietary BioTel products across web, mobile, firmware, and hardware enhancements, and ran DevOps activities within the R&D division.
  • Purchased, configured, implemented, trained, and supported the Atlassian cloud portfolio — Jira Software (Scrum and Kanban across DevOps, support, and development teams), Jira Service Desk, and Confluence — and consolidated Jira Cloud instances following a merger/acquisition.
  • Transformed software engineering teams from waterfall to an Agile Scrum framework, resulting in faster, higher-quality releases, reduced time to market, and more on-time deliveries.
  • Introduced lean Agile testing practices to test incremental builds and catch bugs early while developers were still in the code, reducing technical debt and related risk.
  • Provided ongoing Agile Scrum training and coaching to the entire engineering team and to new Scrum Masters.

Director, Software Engineering#

SmartDrive Systems · May 2016 – May 2017

  • Led a 6-person QA engineering team responsible for testing proprietary webapp, API, and BI software, plus firmware for the company's vehicle-telemetry hardware products.
  • Implemented Agile Scrum and coached the Scrum Masters, facilitating and coaching Scrum activities as needed.
  • Directed code and test-process improvements on Microsoft Visual Studio Team Foundation Server 2013: improved processes and data management for bugs and test cases, monitored and reviewed C# builds, reviewed code changes for risk assessment to focus testing, and used MTM for test-case management and execution.
  • Mentored engineers with strategic and tactical coaching on risk management for delivery schedules, code quality, and early bug detection.

Manager, Software Engineering, QA#

BlackBerry (formerly Good Technology) · May 2012 – May 2016

Joined via BlackBerry's acquisition of Good Technology, continuing to lead mobile device management and secure mobile engineering through the transition.

  • Led a 7-person full-stack engineering team building proprietary mobile device management, secure mobile email, and secure instant messaging applications, plus SDK/platform code used by third-party BYOD apps on iOS and Android.
  • Created, administered, and supported Windows infrastructure in ESX lab environments: Windows Server 2008–2012 R2 (Certificate Authority, DNS, DFS, and other roles; single and multiple forests with trusts) and Exchange (2007, 2010, 2013).
  • Stood up and supported unified-communications platforms: Lync (2010, 2013), Skype for Business (2015), Domino 8.5.2+, Sametime 8.5.2+ in AD- and Domino-integrated deployments, and Cisco Unified Messaging and IM/P virtual appliances.
  • Owned budgeting for the lab and messaging infrastructure, covering upfront and ongoing hardware and software costs.
  • Performed Scrum Master duties: sprint management and reporting; facilitating stand-ups, grooming, planning, retros, and bug triage; unblocking resources; and managing dependency and release risk with QA, development, and IT leads.
  • Managed Agile releases in Jira and Rally, test-case management in TestRail, and defect management across releases including customer-reported issues; maintained knowledge-base documentation in Confluence.

Manager, Software Engineering#

Shopzilla · Jul 2008 – May 2012 · San Diego & Los Angeles

  • Led a 6-person full-stack engineering team (San Diego and Los Angeles) for shopzilla.com and related sites, spanning presentation, middle-tier, and back-end API services, including SQL, NoSQL, and BI data processing.
  • Led engineering teams to maintain and improve product and process quality across a service-oriented architecture spanning shopzilla.com, bizrate.com, tada.com, beso.com, and international sites.
  • Created test plans and verified new iOS applications, tracking incremental feature introduction through Agile Scrum, and worked with teams to implement Kanban, TDD, and BDD practices.
  • Performed risk assessment and managed test plans using black-box, gray-box, and white-box techniques for front-end web clients and mobile apps (iPhone, iPad, iPod).
  • Researched and led projects that implemented lower-cost, higher-efficiency business solutions and processes, and managed deployments of scalable web applications and services through an Agile process.
  • Tested Tomcat web applications, RESTful web services, Oracle Coherence Grid, Oracle Database, and Sybase on CentOS, and performed SEM/SEO testing and analysis for changes impacting crawler traffic from Google, Yahoo, and Bing.

Manager, IT#

Pima County Consolidated Justice Court · Jan 2007 – Jun 2008 · Arizona

  • Led an 8-person software engineering and support team (6 Programmer Analysts, 1 Systems Administrator, 1 Help Desk) responsible for the court's Case Management System and its integration with county, state, and law-enforcement systems.
  • Led development groups building n-tier web (HTML, ASP, PHP) and PC applications (VB.NET 1.1/2.0 and VB6) on IIS across three database backends: SQL 2005 on Windows 2003, MySQL on Linux, and RMS/DataTrieve on VMS.
  • Managed enterprise, large, medium, and small-scale projects tied to court strategic objectives; established an SDLC process; and performed gap analysis with functional specifications and project documentation.
  • Supported and expanded a Cisco network environment: internal and external DNS, multi-zone DHCP, VLAN troubleshooting, Cisco ASA and WatchGuard firewalls (including VPN), and Exchange 2003 email.
  • Created the help desk process (Numara Track-It), authored project and disaster-recovery documentation, and created and managed the court technology budget, including Pima County and Arizona state funds and grants.
  • Performed production QA for services and applications used by the public (1,000,000+ users), justice partners, and internal customers, and served on State of Arizona committees, including the Judicial Technology Advisory Council.

Manager, IT and Software Engineering#

Laureate Education, Inc. · May 2003 – Dec 2006 · Los Angeles, CA & Baltimore, MD

Joined Canter & Associates, later acquired by Sylvan Learning Systems; in 2003 Sylvan's higher-education business was renamed Laureate Education, Inc., where this role continued through 2006.

  • Led a new unified corporate systems architecture and integration strategy, managing the projects that unified the organization's technologies, and documented the resulting procedures, standards, and end-user documentation.
  • Designed and implemented a new Lotus Notes/Domino R6 architecture, upgrading R5 domains in Los Angeles and Baltimore, and built Windows 2003 test/QA servers for Domino/Lotus Notes development.
  • Consolidated R5 and R6 Domino domains routing email for 100,000+ accounts (students, faculty, staff, corporate) across 30+ domains, and administered Exchange and AD DNS across 20+ domains plus backup services.
  • Administered messaging infrastructure for 60,000+ accounts across laureate-inc.com, waldenu.edu, and ntu.edu, spanning Los Angeles, Minneapolis, and Baltimore.
  • Designed and built BlackBerry Enterprise Server (3.6/4.0), Sametime, and an SMTP gateway; implemented Postini antispam and BlueCoat DMZ reverse-proxy servers for webmail.
  • Supported seven integrated messaging environments (Lotus Notes R4.6–R6.5, Exchange 5.5/2003, Sendmail on SunOS), trained admin and help-desk staff, and supported the Altiris help-desk rollout.

Infrastructure Engineer, Lotus Notes Systems Architect#

Fiserv, CBS Worldwide · Oct 1999 – Mar 2003 · Global (Singapore, Sydney, London)

  • Principal Certified Lotus Notes Administrator and Developer (R5) supporting a global Lotus Notes infrastructure spanning offices in Singapore, Sydney, and London.
  • Built QA certification and load-testing n-tier environments (IBM WebSphere, Java, IBM AS/400, MS SQL 2000, IIS, and .NET) for proprietary software products.
  • Designed the global business infrastructure plan, standards, and resourcing, along with a new global R5 infrastructure and project plan, and traveled to manage and support project staff through the R4-to-R5 upgrade and Notes domain consolidation.
  • Converted paper- and email-based development and support processes to online collaborative workflows, designing and developing Lotus Notes applications.
  • Evaluated and implemented server- and client-side configuration and database-design changes to improve performance, optimize resource utilization, and minimize bandwidth usage.

Earlier roles#

  • DeveloperChep USAMay 1998 – Oct 1999

    Built Lotus Notes business applications (Service Request and Employee Profile systems) that reduced cost and improved performance, and led Notes administration with a focus on database security and auditing.

  • DeveloperDarden RestaurantsMar 1997 – May 1998

    Designed, coded, and supported legal dispute resolution, competition management, and product tracking systems on newer Lotus Notes technology, managing projects via workflow and Notes mail.

  • Network Engineer & Systems AdministratorTime Warner Cable — Full Service NetworkMar 1996 – Mar 1997

    Network engineering and systems administration for Time Warner Cable's Full Service Network.

  • Systems Analyst, Developer, Systems AdministratorComputer PowergroupSep 1995 – Feb 1996

    Systems analysis, development, and administration for business clients.

  • Technical Liaison / Lotus Notes DeveloperWestinghouse ElectricAug 1994 – Dec 1995

    Lotus Notes development and technical liaison work; recognized with a "Total Quality" award in Communications.

  • Computer ConsultantOviedo Family Health CenterAug 1989 – Jun 2002

    Long-running part-time engagement (concurrent with full-time roles): software, systems, and network support for a medical practice.

  • Systems Engineer (freelance)Freelance Computer Consulting1982 – 1999

    Part-time freelance systems, network, and small-business technology consulting, concurrent with full-time roles.

AI Projects

AI Projects#

Products and services I have designed and built hands-on with Claude Code — from shipped native macOS apps to MCP servers and integrations, a static site with client-side encrypted pages, and the automation that runs my week.

Applications#

AltWindow

Native macOS app · Swift, SwiftUI & AppKit · altwindow.com

  • A companion app for Claude Code that renders live Activity and Tasks windows from Claude Code's hook events — reading events only, asynchronously and fail-open, so a companion issue can never cost a coding session.
  • Built in Swift 6 with a pure-logic core behind a SwiftUI and AppKit interface, held to a 100% core-coverage gate, strict formatting, and golden-fixture decoder tests in GitHub Actions CI.
  • Shipped as a free download for Apple silicon with a curl-piped installer and DMG, rolling and versioned releases, and a published project site.

Shortcut Map

Native macOS app · Swift 6, SwiftUI & AppKit · shortcut-map.epel.us

  • Built and shipped a native macOS menu bar app that answers a question macOS exposes no API for — which keyboard shortcuts are actually bound on this machine right now — by reconciling four independent, mutually disagreeing sources into one searchable map with conflict detection.
  • Wrote the discovery engine in Swift 6 with zero external dependencies: a live Accessibility-API walk of every running app’s menus, isolated in an actor behind messaging timeouts and a depth cap so a hung app can never wedge a scan; the system hotkey preference domain, backed by a curated catalog because macOS ships no readable defaults; per-app user overrides; and a read-only reader for BetterTouchTool’s undocumented store, which binds hotkeys globally and is therefore invisible to every other source while being the most likely thing to silently shadow an app’s own binding.
  • Confined the entire Accessibility surface to one small auditable file, so the app’s stated use of that permission — menu titles and their key equivalents, never keystrokes — can be checked rather than taken on trust, and documented plainly which categories of shortcut the app structurally cannot see. No telemetry; the version check is disableable.
  • Diagnosed and fixed the code-signing defect behind repeated loss of that permission — macOS pins a privacy grant to an app’s designated requirement, which under ad-hoc signing is the per-build code hash, so every rebuild read as a different app — then built a signature-verified in-place updater on the stable identity the fix created: each download checked against the running app’s own requirement, anything not strictly newer refused, and every failure path falling back to the website rather than a half-installed app.
  • Shipped it publicly through a curl-piped installer that sidesteps the Gatekeeper quarantine dead-end, with a matching uninstaller, rolling and versioned releases, and continuous integration that proves the distribution path rather than only the code — linting the install scripts, exercising install, signature-verify, run, and uninstall end to end, and mirroring the releases and project site from a private repository to a public one. The whole project — first commit through v0.7.0, across ten tagged releases — was designed, built, and shipped in a single day.

Obsidian ↔ Claude MCP Bridge

MCP integration · TypeScript · Obsidian plugin + stdio MCP server · obsidian-claude-mcp.epel.us

  • Designed and shipped a two-component TypeScript system that gives Claude Desktop live read and write access across one or many Obsidian vaults — working through Obsidian's running app, so Claude sees the real search index, backlinks, and metadata rather than raw files on disk.
  • Built an esbuild-bundled Obsidian community plugin that runs a token-authenticated localhost server per vault, paired with a stdio MCP server that auto-discovers open vaults and exposes tools spanning read, search, write, cross-vault copy and move, and deep links.
  • Engineered for safety and easy setup: localhost-only binding with constant-time token auth and per-vault read-only toggles, packaged as a free macOS and Linux download with idempotent install scripts and tagged GitHub Actions releases.

Microsoft Graph MCP server

Self-hosted MCP server · Python · Microsoft Graph · OAuth 2.1 + On-Behalf-Of

  • Designed and built a remote MCP server that gives Claude full create, update, and delete reach into a personal Microsoft 365 tenant through Microsoft Graph — acting as the signed-in user under delegated permissions rather than as a tenant-wide daemon.
  • Chose an architecture in which the identity platform is the authorization server and the service is only a resource server: OAuth 2.1 with PKCE at the client, an On-Behalf-Of token exchange authenticated by a certificate client assertion at the server, and no refresh token ever stored — so multi-factor and Conditional Access are enforced at every connect and revocation is immediate.
  • Automated the identity provisioning rather than documenting portal clickwork: a dry-run-by-default, idempotent tool that creates both application registrations, wires them together, grants the delegated permissions and consent records, and writes the generated identifiers straight back into configuration.
  • Built the safety and verification layer alongside the service — confirmation-gated destructive operations that otherwise return a preview of exactly what they would affect, journaled mutations as an audit trail, capped and compacted responses, and a standalone auth-chain verifier that diagnoses each identity failure inline.

jason.epel.us

Static site · Python publisher · JavaScript & WebCrypto · GitHub Pages

  • Built the site you are reading: a private source-of-truth repository that generates a fully published public one, so no published file is ever hand-edited — driven by a single Python publisher that reconciles a page registry, encrypts, generates, and publishes in one command, with per-page hashing for incremental change detection.
  • Implemented code-protected pages end to end — each page encrypted at publish time with a PBKDF2-derived AES-256-GCM key and decrypted in the browser by a hand-written WebCrypto gate, guarded by a round-trip verification so the publisher and the client decoder can never drift. Access codes live only in the private repository.
  • Built an incremental, idempotent photo and video pipeline that turns dropped originals into web-optimized, content-hashed derivatives with sips and ffmpeg — including transcodes with poster frames and Live Photo tiles — feeding a grid-and-lightbox viewer while the originals stay private.

Tools & automation#

tasks-sync

Python daemon · Microsoft Graph + Todoist · systemd

  • A poll-only daemon that mirrors Microsoft To Do and Microsoft Planner into Todoist across two Microsoft 365 tenants, with cursor-based, incremental, largely two-way sync.
  • Engineered for reliability: loop-prevention so echoes never ping-pong, self-healing delta cursors, isolated multi-instance state, and systemd hardening with staleness alerting.

Todoist inbox-zero skill

Reusable Claude skill

  • An approval-gated skill that triages a Todoist inbox to zero with sync-aware routing rules, a single batch-approval step, and a saved scorecard — encoding a hard no-writes-without-approval rule.

YNAB budgeting pipeline

Python + REST API · Excel

  • A two-way pipeline between a budgeting spreadsheet and the YNAB API, with reconciliation, pre-write confirmation, and a verifiable write log, plus a scheduled automation that mirrors balances between budgets idempotently.

Health-metrics pipeline

Python · Vendor REST API · OAuth 2.0

  • Designed and built a self-hosted pipeline that pulls personal health metrics from a health platform's public API into three outputs that must always agree — an Excel workbook, a CSV, and a self-contained web page — every derived value computed once in a shared metrics module so the three can never drift.
  • Implemented the OAuth 2.0 authorization-code flow with the vendor's HMAC request-signing scheme and rotating refresh tokens from scratch — standard library only in the core, so no third party ever holds a token — with multi-profile guards that make cross-account data mix-ups structurally impossible.
  • Engineered around a class of silent-failure hazards — an API returning HTTP 200 on failure, dual-stack localhost callback traps, consent-screen session reuse — each diagnosed live and documented with its evidence.

Skills

Skills#

A selected view across the areas I lead and build in.

Leadership & People

  • Engineering leadership
  • Distributed & remote teams
  • People management
  • Mentoring & coaching
  • Executive communication
  • Strategic planning
  • AI adoption

Agile & Delivery

  • Scrum
  • Kanban
  • Agile transformation
  • Agile coaching
  • ScrumMaster
  • Product ownership
  • Roadmap & backlog
  • Release management

Software Engineering

  • Full-stack development
  • Application architecture
  • REST & GraphQL APIs
  • Web
  • iOS & Android
  • Native macOS
  • macOS Accessibility API
  • SaaS
  • Service-oriented architecture

Languages & Frameworks

  • TypeScript
  • Node.js
  • Python
  • React
  • React Native
  • C# / .NET
  • Swift & SwiftUI
  • PowerShell
  • Shell scripting

Cloud & DevOps

  • AWS
  • Azure
  • GCP
  • Serverless & Lambda
  • DynamoDB
  • CI/CD
  • Docker
  • Terraform
  • CloudFormation & CDK
  • Observability
  • LaunchDarkly

Data & Analytics

  • Data pipelines
  • Streaming (Kinesis, EventBridge)
  • Redshift
  • SQL Server
  • BI & data marts
  • Tableau
  • Delta Lake

Quality & Test

  • QA leadership
  • Test automation
  • Code review
  • Risk-based testing
  • TDD & BDD
  • Cypress & Playwright
  • Defect management

Enterprise IT & Messaging

  • Active Directory & Entra ID
  • Microsoft 365
  • Microsoft Graph
  • Exchange
  • SharePoint
  • Windows Server
  • DNS

Security

  • DevSecOps
  • MDM & secure mobile
  • OAuth 2.1 & PKCE
  • Conditional Access
  • Least privilege
  • Secret management
  • Cryptography
  • Firewalls & VPN
  • Certificate authority
  • Code signing

Dev Tooling & Integrations

  • Jira & Confluence
  • GitHub
  • Azure DevOps
  • Salesforce
  • MCP
  • Claude Code
  • System integration (MuleSoft, Workato)

Education

Education & recognition#

BS, Computer Science (major) and Physics (minor), University of Central Florida, 1995. Background studies in psychology, finance, and mathematics.

Certifications & awards

  • R6 Certified Lotus Professional (Administration)
  • R5 Principal Certified Lotus Professional (Administration and Development)
  • Management Training, Learning Tree International
  • Fiserv team award — global Lotus Notes upgrade and consolidation
  • Westinghouse "Total Quality" award — Communications