Shaun Marshall CV

Curriculum vitae · Orlando, Florida

Shaun Marshall

Enterprise systems, security and AI governance

Current
Senior Systems Analyst, Executive Support, Walt Disney World · Oct 2013 – Present
Employment
Atos assignment: October 2013–November 2022; Disney employee: November 2022–Present.
Certifications
CompTIA Network+, CompTIA i-Net+, Certified Internet Webmaster (CIW); CompTIA Security+ ce (previously held, valid 2022–2025) · all credentials
Education
ECPI University: Computer and Information Science coursework, cybersecurity track (governance and policy focus), 2023–2025
Clearance
Top Secret (Single Scope Background Investigation), previously held

People first. Good systems augment good people. I bring 30 years of IT experience to dependable technology for small businesses, executives, and complex organizations. My work spans enterprise support, cybersecurity, knowledge and records migrations, and developmental AI governance through GKOS and GKOS-Engine. I am also conducting independent research into a specific aspect of gravitational physics.

Also current, alongside the Disney role

Role focus

  • AI governance and assurance engineering
  • Enterprise and executive technology support
  • Information and records governance
Security and governance Where it was used Infrastructure and operations Where it was used AI and automation Where it was used Delivery and leadership Where it was used

Skill group

Security and governance: where it was used

Agentic AI Developer and Systems Architect

Independent · 2025 – Present

  • Founded and edit GKOS, a public AI governance specification that turns provenance, context, authority, review and authorized agent use into testable contracts and machine-readable records. The v0.82.1 edition (25 September 2026) has 62 permanent requirements and 28 gate codes.
  • Directed the schemas and assurance tooling: deterministic context replay, fail-closed validation, and a mutation-test corpus covering all 28 gate codes, run in CI on Linux and Windows. Releases state their coverage and conformance limits.

Founder, President and CTO

Florida Armored Combat Inc. · 2023 – Present

  • Founded Florida Armored Combat Inc. as a 501(c)(3) nonprofit and leads the organization as President and Chief Technology Officer (CTO).
  • Grew the organization from three teams to eight city teams and three collegiate teams, and led the formation of a statewide female team.

Senior Systems Analyst, Executive Support

Walt Disney World · Oct 2013 – Present

  • Exported the team's OneNote knowledge base to Markdown with attachments intact, shared the export and method with the team, and used a copy for a Confluence migration with an approximately 95% successful import. Documented the migration's limitations.
  • Added an experimental analysis of relationships between notes, including which documents supersede others, so current material is easier to find in search. It is non-deterministic, so it is used as an aid to human review.

IT Consultant

Shaun Marshall Consulting · Feb 2010 – Present

  • Designs and deploys segmented networks with remote access: OPNsense and pfSense firewalls, Cisco switching and Proxmox virtualization.
  • Builds and hosts websites on the LAMP stack and WordPress; plans and runs hardware and software migrations.

Senior Field Service Technician

CACI and TEKsystems, for U.S. Department of the Navy, NAVAIR Orlando · 2001 – 2006

  • Provided hardware and software support for over 1,100 clients on the Navy/Marine Corps Intranet (NMCI).
  • Led the research that resolved a Windows Installer failure blocking Microsoft Office deployments on Windows 2000 workstations (2003). Deployments continued on schedule, and the prime contractor, EDS, avoided an SLA miss carrying a penalty of more than $200,000.

GKOS: AI governance specification and assurance engineering

Developmental specification

  • Public developmental specification; executable mechanism-level checks available. Complete profile qualification and independent interoperability validation remain outstanding.

All skills by area

Security and governance

Infrastructure and operations

AI and automation

Delivery and leadership

Developmental specification · Founder and initial editor Public artifact

GKOS: AI governance specification and assurance engineering

Independent project. Not affiliated with a standards body or an employer.

Status Public developmental specification; executable mechanism-level checks available. Complete profile qualification and independent interoperability validation remain outstanding.

Problem
When an AI system recommends or takes an action, ordinary logs show that a call happened. They rarely show which evidence it used, what context it saw, who had authority to approve it, or how the result can be challenged and replayed.
My part
I drafted the specification (with AI drafting assistance) and lead its design: provenance, deterministic validation, reproducible context, bounded delegation and records of decisions and actions. I direct the schemas, fixtures and conformance runner and approve each published edition.
Exists now
Published edition v0.82.1 (25 September 2026) with 62 permanent requirements and 28 gate codes, JSON schemas, a requirements registry, and an adapter-neutral conformance runner. CI runs the runner on Linux and Windows with Node 22 and 24.
Results
Mechanism-level checks pass, including a clean-process context replay and a mutation corpus that covers all 28 gate codes. The executable suite covers only part of the profile catalogue, so no conformance profile is qualified yet.
Limits
No qualified profile, no public second implementation, and no independent interoperability validation. Proposed NIST, ISO and EU AI Act mappings are informative drafts under review, not established alignment.
Relevance
Gives governance teams inspectable contracts for evidence provenance, policy enforcement, delegated authority, refusals and audit reconstruction of agent actions.

Evidence Public artifact

Open-source releases · Product owner and lead developer (agent-assisted implementation) Public artifact

GKOS-Engine and Kosmos-Oden: governed knowledge tooling

Independent open-source projects (Apache-2.0).

Status GKOS-Engine release 2.1.1 (18 August 2026); 2.2.0 on main pending release qualification. Kosmos-Oden release 0.8.2 (9 September 2026).

Problem
Agents and people need to search and reason over a Markdown knowledge base without a tool silently changing source files or exposing restricted notes.
My part
I set the requirements and design, review the changes, run the qualification checks and decide releases. AI coding agents write much of the code under that review.
Exists now
A TypeScript library and CLI that parses and validates GKX records, builds canonical graphs, indexes and retrieves notes, and serves ten credential-bound, read-only MCP tools on a local port. Kosmos-Oden uses it to draw a vault as an explorable 3D map in Obsidian or a standalone viewer.
Results
Release-status records show CI and Linux and Windows runtime qualification passing for the recorded main baseline. Writes to source notes remain unavailable unless a host explicitly configures and authorizes them.
Limits
No published usage or adoption figures. The npm package lags the current source (2.0.1). Implementation independence from GKOS has not been demonstrated.

Evidence Public artifact

Completed internal migration · Did the export, migration and analysis Self-reported

Team knowledge base migration: OneNote to Markdown to Confluence

Work for Walt Disney World Enterprise Technology.

Status Export complete and shared with the team; Confluence import approximately 95% successful; limitations documented.

Problem
A team's knowledge lived in a OneNote environment that was hard to search, move or preserve with its attachments and history.
My part
I exported the full environment to Markdown with attachments intact, shared the export and approach, ran the Confluence import from a copy, and wrote up the limitations.
Exists now
A complete Markdown export, a Confluence space built from it, and an experimental map of which notes supersede others.
Results
About 95% of the import succeeded (my estimate; the denominator is not published). The supersession map is non-deterministic and is used only to help people review search results.
Limits
Internal work: no public artifact. The import rate is self-reported.

Evidence Self-reported

Internal work. No public artifact.

Decade

Pick a decade to show only its entries. Every entry stays on the page.

2020s

2025 – PresentIndependent workCurrent

Agentic AI Developer and Systems Architect

Independent · Orlando, Florida

Independent design and development of governed knowledge tools that support human judgment through inspectable evidence, clear authority, and bounded agent access, alongside full-time employment. AI coding agents assist implementation; I set requirements, review changes, test behavior, and decide what ships. GKOS remains developmental; independent validation and full conformance qualification remain ahead.

  • Founded and edit GKOS, a public AI governance specification that turns provenance, context, authority, review and authorized agent use into testable contracts and machine-readable records. The v0.82.1 edition (25 September 2026) has 62 permanent requirements and 28 gate codes. Public artifact: repository, v0.82.1 release
More from this entry
  • Directed the schemas and assurance tooling: deterministic context replay, fail-closed validation, and a mutation-test corpus covering all 28 gate codes, run in CI on Linux and Windows. Releases state their coverage and conformance limits. Public artifact: conformance docs, claims policy
  • Leads development of GKOS-Engine, an Apache-2.0 TypeScript library that validates GKX records, builds deterministic knowledge graphs from Markdown and serves agents through ten credential-bound, read-only MCP tools (latest release 2.1.1). Public artifact: repository, 2.1.1 release
  • Built Kosmos-Oden on GKOS-Engine: an Obsidian plugin and standalone viewer that draws a Markdown vault as a navigable 3D map (release 0.8.2). Public artifact: Kosmos-Oden repo
  • Runs a self-hosted lab of open-weight language models and AI agents that share memory records, task files and a message broker. AI coding agents do much of the implementation; I set the design, review the changes, run the tests and decide what is released.

Independent and self-employed Read the full entry: Agentic AI Developer and Systems Architect, Independent

2023 – PresentNonprofit leadershipCurrent

Founder, President and CTO

Florida Armored Combat Inc. · Florida

Founded a 501(c)(3) nonprofit; statewide governing body for armored combat (buhurt).

Founded and leads Florida Armored Combat, a 501(c)(3) nonprofit, applying leadership, business orchestration, technology integration, event planning, AI governance, and cybersecurity to support member teams and community activities.

  • Founded Florida Armored Combat Inc. as a 501(c)(3) nonprofit and leads the organization as President and Chief Technology Officer (CTO).
More from this entry
  • Grew the organization from three teams to eight city teams and three collegiate teams, and led the formation of a statewide female team.
  • Supports charitable events, STEM programs, K-12 and collegiate education programs, and free training for the public; coaches and recruits new fighters.
  • Significantly reduced technology costs by building and running the organization's website and systems with open-source software, and trained volunteers to use open-source frameworks in their work.
  • Built AI agents to augment the volunteer workforce and devised governance protocols defining what agents can and cannot access or do with the organization's knowledge and infrastructure.

Nonprofit and community Read the full entry: Founder, President and CTO, Florida Armored Combat Inc.

2010s

Oct 2013 – PresentAtos to DisneyCurrent

Senior Systems Analyst, Executive Support

Walt Disney World · Orlando, Florida

Atos assignment: October 2013–November 2022; Disney employee: November 2022–Present.

Provides technology support and advice to Walt Disney World executives at vice-president level and above and WDW Legal. Served through Atos from October 2013 to November 2022, then joined Walt Disney World Enterprise Technology as an employee. Work spans enterprise support, secure remote access, records and knowledge migrations, and coordination with information security teams. Helps executives, Legal staff, and colleagues work reliably and securely, with less disruption.

  • Exported the team's OneNote knowledge base to Markdown with attachments intact, shared the export and method with the team, and used a copy for a Confluence migration with an approximately 95% successful import. Documented the migration's limitations.
More from this entry
  • Added an experimental analysis of relationships between notes, including which documents supersede others, so current material is easier to find in search. It is non-deterministic, so it is used as an aid to human review.
  • Wrote the policy for migrating WDW Legal records from several sources to NetDocuments and coordinated LegalOps training on retention and retrieval.
  • Recovered lost or fragmented data and reports for clients on several occasions, saving from about an hour to several days of rework each time; this work contributed to a Disney Recognition award in 2026.
  • Liaison between executives and Global Information Security; advised WDW Legal on modernizing its BYOD policy and forensic investigation methods.
  • Moved WDW Legal executives, paralegals and support staff to secure remote work in 2020 using Citrix and two-factor authentication, procured equipment for long-term remote work, and strengthened home networks for the added traffic.
  • Located, organized and migrated WDW Legal PST archives to Exchange Online, with access granted to the correct attorneys and paralegals.
  • Developed and delivered training to counter spear-phishing campaigns; worked with eDiscovery on preserving digital evidence and records.
  • Proposed to leadership a review of WDW Legal's digital assets based on confidentiality, integrity and availability (CIA triad) principles.
  • Supported the WDW Legal move from eDOCS to NetDocuments (in progress in 2019).
  • Administered accounts, file and system access, and conferencing: Active Directory and Azure AD, Exchange Online, SCCM, OneDrive, BlueJeans, Zoom and Polycom.
  • Subject-matter expert for Disney IT support and field teams on PC, Mac, application and network issues; individual and group instruction for executives and support staff.

Walt Disney World Read the full entry: Senior Systems Analyst, Executive Support, Walt Disney World

May 2012 – Oct 2013Contractor, vendor assignment

Windows 7 Migration Team Lead and Technical Liaison

CNSS Inc., for Walt Disney World · Orlando, Florida

Field team for moving Walt Disney World property and offices from Windows XP to Windows 7.

  • Led four contractors and worked with the HyperCare team supporting the move from Windows XP to Windows 7 across the Walt Disney World property and supporting offices.
More from this entry
  • Scheduled deployments with off-site developers, directors and department heads, deploying department by department to keep downtime low.
  • Enforced enterprise PC standards, fixed application and network issues, and helped test white-box applications and equipment.

Walt Disney World Read the full entry: Windows 7 Migration Team Lead and Technical Liaison, CNSS Inc., for Walt Disney World

Feb 2010 – PresentSelf-employedCurrent

IT Consultant

Shaun Marshall Consulting · Florida

Current work through LuSaur Technology, LLC; independent consulting since 2010.

Practical IT, cybersecurity, infrastructure, and AI integration suited to an organization’s people, resources, and needs. Current work through LuSaur Technology, LLC builds on an independent consulting practice begun in 2010.

  • Designs and deploys segmented networks with remote access: OPNsense and pfSense firewalls, Cisco switching and Proxmox virtualization.
More from this entry
  • Builds and hosts websites on the LAMP stack and WordPress; plans and runs hardware and software migrations.
  • Writes business-operations, disaster-recovery and information-security policies for each client, and teaches owners how to run their networks safely.

Independent and self-employed Read the full entry: IT Consultant, Shaun Marshall Consulting

2010 – 2011

SME Support Analyst

Connextions Inc. · Orlando, Florida

Technical support account in a contact center.

  • Technical mentor for call-center agents on a technical support account; trained them in troubleshooting and resolution.
More from this entry
  • Wrote and updated support articles in the company wiki; provided first- and second-level support with DameWare and Active Directory.

Other employers Read the full entry: SME Support Analyst, Connextions Inc.

2000s

2008 – 2009Contractor, staffing firm

Systems and Support Analyst

TEKsystems, for Roetzel & Andress · Orlando, Florida

Support for attorneys and staff at a law firm's Florida offices.

  • Supported attorneys and staff on Citrix, Westlaw and Microsoft Office 2007; managed accounts, printers and remote access with Active Directory, Remote Desktop and SMS.
More from this entry
  • Helped build a Citrix server environment for the firm's Orlando, Fort Lauderdale and Naples offices.

Other employers Read the full entry: Systems and Support Analyst, TEKsystems, for Roetzel & Andress

2006 – 2007Contractor, vendor assignment

Senior Analyst

CompuCom Inc., for Walt Disney World · Orlando, Florida

Disney PC Migration project.

  • Proposed an in-house help center and remote-assistance service for the Disney PC migration, then set it up and managed it; it worked with Disney IT to resolve deployment and transition issues.
More from this entry
  • Wrote training material for new help-center technicians and trained them on Active Directory, SMS, Ghost imaging and Remote Desktop.
  • Ran needs assessments and deployment scheduling with ACS and Disney managers and network engineers; provided basic data recovery when needed.

Walt Disney World Read the full entry: Senior Analyst, CompuCom Inc., for Walt Disney World

2001 – 2006Contractor, vendor assignment

Senior Field Service Technician

CACI and TEKsystems, for U.S. Department of the Navy, NAVAIR Orlando · Orlando, Florida

Promoted from Field Service Technician.

Department of Defense contractor on the Navy/Marine Corps Intranet (NMCI) at Naval Air Warfare Center Training Systems Division.

  • Provided hardware and software support for over 1,100 clients on the Navy/Marine Corps Intranet (NMCI).
More from this entry
  • Led the research that resolved a Windows Installer failure blocking Microsoft Office deployments on Windows 2000 workstations (2003). Deployments continued on schedule, and the prime contractor, EDS, avoided an SLA miss carrying a penalty of more than $200,000.
  • Wrote documents and hot-fixes that were used at site and enterprise level within NMCI.
  • Assisted DoD Information Assurance personnel with forensic investigations on the Navy network, gathering evidence within state and federal law.
  • Tools: HEAT and Remedy ticketing, Tivoli remote control, Active Directory and SMS for accounts and software packages.
  • Command Master Chief Award for Excellent Service, Naval Air Warfare Center Training Systems Division (2001).

Department of the Navy Read the full entry: Senior Field Service Technician, CACI and TEKsystems, for U.S. Department of the Navy, NAVAIR Orlando

2001Contractor, project

Technical Project Manager, NMCI Assessment and Planning

AERA Inc., for U.S. Department of the Navy, NAVAIR Orlando · Orlando, Florida

Assessment and planning stage before the NMCI transition at NAVAIR Orlando.

  • Hired and supervised 15 contractors for the assessment and planning stage before NMCI, working with the local Navy command and DoD staff.
More from this entry
  • Wrote standard operating procedures and a lessons-learned list used at other naval bases preparing for NMCI; finished almost one month ahead of schedule.

Department of the Navy Read the full entry: Technical Project Manager, NMCI Assessment and Planning, AERA Inc., for U.S. Department of the Navy, NAVAIR Orlando

1990s

1998 – 2001

Electronics Lab Manager, Department of Nursing

University of Central Florida · Orlando, Florida

Computer lab and simulation equipment for the Department of Nursing.

  • Designed, assembled and ran the department's networked computer lab, with testing stations, a file and print server and a Virtual IV injection-simulation station.
More from this entry
  • Supported nursing faculty, staff and students; wrote a best-practices and lab-maintenance guide for later lab managers.

NASA and UCF Read the full entry: Electronics Lab Manager, Department of Nursing, University of Central Florida

1996 – 1998Student employment

Safety Engineer and Computer Specialist

NASA John F. Kennedy Space Center, Safety and Mission Assurance (RT-SRD-2A, EIC-A) · Kennedy Space Center, Florida

Student employment in Safety and Mission Assurance.

  • Maintained the Pressure Vessels and Systems (PV/S) database and coordinated a safety-recertification schedule with the Center's major contractors.
More from this entry
  • Designed a web portal where contractors could identify their own pressure vessels and systems and check them against the Center's records.
  • Member of the Shuttle Upgrades Liquid Flyback Booster study (1997): reusable kerosene and oxygen engines, specific impulse and maintenance time between launches.
Show the photographs from Kennedy Space Center

NASA and UCF Read the full entry: Safety Engineer and Computer Specialist, NASA John F. Kennedy Space Center, Safety and Mission Assurance (RT-SRD-2A, EIC-A)

Education

  • ECPI University Computer and Information Science coursework, cybersecurity track (governance and policy focus) Coursework · 2023–2025 · Lake Mary, Florida Courses: Network security and defense; Incident response and digital forensics; Governance, risk and compliance; Security policy and ethics; Cryptography fundamentals; Programming logic and design
  • University of Central Florida LEAD Scholars Program (student leadership program) Program member · 1995 · Orlando, Florida
  • Professional and continuing study Cisco Networking Essentials I and II; Microsoft Exchange 2000; Coursera courses in AstroTech, Genetics and Evolution, Galaxies and Cosmology, and Nanotechnology Completed courses

Certifications

  • CompTIA Security+ ce Previously held CompTIA · Valid 2022–2025
  • CompTIA Network+ Held CompTIA · Earned before 2009
  • CompTIA i-Net+ Held CompTIA · Earned before 2009
  • Certified Internet Webmaster (CIW) Held CIW
  • CompTIA A+ Previously held CompTIA
  • Dell Certified Systems Expert Previously held Dell
  • Lenovo Certified (ThinkPad T42, T43p, T60) Previously held Lenovo
  • Microsoft Office User Specialist (Office XP) Previously held Microsoft

Clearance

  • Previously heldTop Secret (Single Scope Background Investigation)

Awards

  • Disney RecognitionWalt Disney World Enterprise Technology · 2026 · Client service and data recovery
  • Command Master Chief Award for Excellent ServiceNaval Air Warfare Center Training Systems Division · 2001

Memberships

  • ISACA
  • ISC2
  • InfraGard

2016 – 2020 · Volunteer

President and Technology Advisor

Grassy Lake Elementary PTO

  • Founded the PTO's 501(c)(3).

Volunteer

Volunteer

Scouting BSA Pack 551 and Troop 998G

Volunteer

Technology Advisor, AV and Effects Specialist

Breakthrough Theatre of Winter Park

Volunteer

Science and technology education support

Home-school families

Also

  • Creator and host, The SHOW (Star Trek Online podcast, Oden Knight on YouTube) 2015Produced and hosted roundtables on game mechanics with community guests and Star Trek Online developers and artists.
  • Science advisor and voice of Professor Kim, Project Warp
  • Raid leader and game tester, Online games 2004 – 2017Led World of Warcraft raid teams of 10 to 40 players across time zones: recruiting, training, scheduling and supply logistics.Beta tester for Star Trek Online (documented over 200 bugs) and other titles; regional coordinator for technical issues in the Earth & Beyond test.

Quest panel Strength Public artifact

since 2026 · v0.82.1 · 62 requirements

AI governance specification

Founder and initial editor of GKOS, a public developmental specification for accountable AI assistance: inspectable evidence, reproducible context, and clear decision authority that support human judgment. Independent validation and full conformance qualification remain ahead.

  • Edition v0.82.1 (25 September 2026): 62 permanent requirements and 28 gate codes.
  • Machine-readable schemas and an adapter-neutral conformance runner, run in CI on Linux and Windows.
  • Context replay and a mutation corpus covering all 28 gate codes, at mechanism level.
  • No conformance profile is qualified yet, and no independent implementation exists.

Where GKOS: AI governance specification and assurance engineering (Developmental specification); Agentic AI Developer and Systems Architect, Independent (2025 – Present)

Check it GKOS specification repository; GKOS v0.82.1 release (developmental specification, public working draft); GKOS conformance mechanisms at commit b308ff7

Esc closes the panel. Links under “Where” jump to the entry on the page.