Shaun Marshall

Enterprise systems, security and AI governance

Orlando, Florida

Current
Senior Systems Analyst, Executive Support, Walt Disney World · Oct 2013 – Present
Employment
Atos assignment: October 2013–November 2022; Disney employee: November 2022–Present.
Certifications
CompTIA Network+, CompTIA i-Net+, Certified Internet Webmaster (CIW); CompTIA Security+ ce (previously held, valid 2022–2025) · all credentials
Education
ECPI University: Computer and Information Science coursework, cybersecurity track (governance and policy focus), 2023–2025
Clearance
Top Secret (Single Scope Background Investigation), previously held

Concurrent roles

Two-page résumé

Summary

People first. Good systems augment good people. I bring 30 years of IT experience to dependable technology for small businesses, executives, and complex organizations. My work spans enterprise support, cybersecurity, knowledge and records migrations, and developmental AI governance through GKOS and GKOS-Engine. I am also conducting independent research into a specific aspect of gravitational physics.

Role focus

  • AI governance and assurance engineering
  • Enterprise and executive technology support
  • Information and records governance

Strongest points

Select an area for the detail and the evidence.

since 2026 · v0.82.1 · 62 requirements

AI governance specification

Founder and initial editor of GKOS, a public developmental specification for accountable AI assistance: inspectable evidence, reproducible context, and clear decision authority that support human judgment. Independent validation and full conformance qualification remain ahead.

  • Edition v0.82.1 (25 September 2026): 62 permanent requirements and 28 gate codes.
  • Machine-readable schemas and an adapter-neutral conformance runner, run in CI on Linux and Windows.
  • Context replay and a mutation corpus covering all 28 gate codes, at mechanism level.
  • No conformance profile is qualified yet, and no independent implementation exists.

Where GKOS: AI governance specification and assurance engineering (Developmental specification); Agentic AI Developer and Systems Architect, Independent (2025 – Present)

Check it GKOS specification repository; GKOS v0.82.1 release (developmental specification, public working draft); GKOS conformance mechanisms at commit b308ff7

Selected projects

GKOS: AI governance specification and assurance engineering

Founder and initial editor · Developmental specification

Status: Public developmental specification; executable mechanism-level checks available. Complete profile qualification and independent interoperability validation remain outstanding.

Problem
When an AI system recommends or takes an action, ordinary logs show that a call happened. They rarely show which evidence it used, what context it saw, who had authority to approve it, or how the result can be challenged and replayed.
My part
I drafted the specification (with AI drafting assistance) and lead its design: provenance, deterministic validation, reproducible context, bounded delegation and records of decisions and actions. I direct the schemas, fixtures and conformance runner and approve each published edition.
Exists now
Published edition v0.82.1 (25 September 2026) with 62 permanent requirements and 28 gate codes, JSON schemas, a requirements registry, and an adapter-neutral conformance runner. CI runs the runner on Linux and Windows with Node 22 and 24.
Results
Mechanism-level checks pass, including a clean-process context replay and a mutation corpus that covers all 28 gate codes. The executable suite covers only part of the profile catalogue, so no conformance profile is qualified yet.
Limits
No qualified profile, no public second implementation, and no independent interoperability validation. Proposed NIST, ISO and EU AI Act mappings are informative drafts under review, not established alignment.
Relationship
Independent project. Not affiliated with a standards body or an employer.

GKOS-Engine and Kosmos-Oden: governed knowledge tooling

Product owner and lead developer (agent-assisted implementation) · Open-source releases

Status: GKOS-Engine release 2.1.1 (18 August 2026); 2.2.0 on main pending release qualification. Kosmos-Oden release 0.8.2 (9 September 2026).

Problem
Agents and people need to search and reason over a Markdown knowledge base without a tool silently changing source files or exposing restricted notes.
My part
I set the requirements and design, review the changes, run the qualification checks and decide releases. AI coding agents write much of the code under that review.
Exists now
A TypeScript library and CLI that parses and validates GKX records, builds canonical graphs, indexes and retrieves notes, and serves ten credential-bound, read-only MCP tools on a local port. Kosmos-Oden uses it to draw a vault as an explorable 3D map in Obsidian or a standalone viewer.
Results
Release-status records show CI and Linux and Windows runtime qualification passing for the recorded main baseline. Writes to source notes remain unavailable unless a host explicitly configures and authorizes them.
Limits
No published usage or adoption figures. The npm package lags the current source (2.0.1). Implementation independence from GKOS has not been demonstrated.
Relationship
Independent open-source projects (Apache-2.0).

Team knowledge base migration: OneNote to Markdown to Confluence

Did the export, migration and analysis · Completed internal migration

Status: Export complete and shared with the team; Confluence import approximately 95% successful; limitations documented.

Problem
A team's knowledge lived in a OneNote environment that was hard to search, move or preserve with its attachments and history.
My part
I exported the full environment to Markdown with attachments intact, shared the export and approach, ran the Confluence import from a copy, and wrote up the limitations.
Exists now
A complete Markdown export, a Confluence space built from it, and an experimental map of which notes supersede others.
Results
About 95% of the import succeeded (my estimate; the denominator is not published). The supersession map is non-deterministic and is used only to help people review search results.
Limits
Internal work: no public artifact. The import rate is self-reported.
Relationship
Work for Walt Disney World Enterprise Technology.
Evidence
Internal work. No public artifact.

Experience

Newest first. Each role states how it was held: employee, contractor, self-employed or independent work.

Agentic AI Developer and Systems Architect

Independent

2025 – Present · Independent work

Independent design and development of governed knowledge tools that support human judgment through inspectable evidence, clear authority, and bounded agent access, alongside full-time employment. AI coding agents assist implementation; I set requirements, review changes, test behavior, and decide what ships. GKOS remains developmental; independent validation and full conformance qualification remain ahead.

  • Founded and edit GKOS, a public AI governance specification that turns provenance, context, authority, review and authorized agent use into testable contracts and machine-readable records. The v0.82.1 edition (25 September 2026) has 62 permanent requirements and 28 gate codes.
  • Directed the schemas and assurance tooling: deterministic context replay, fail-closed validation, and a mutation-test corpus covering all 28 gate codes, run in CI on Linux and Windows. Releases state their coverage and conformance limits.
  • Leads development of GKOS-Engine, an Apache-2.0 TypeScript library that validates GKX records, builds deterministic knowledge graphs from Markdown and serves agents through ten credential-bound, read-only MCP tools (latest release 2.1.1).
  • Built Kosmos-Oden on GKOS-Engine: an Obsidian plugin and standalone viewer that draws a Markdown vault as a navigable 3D map (release 0.8.2).
  • Runs a self-hosted lab of open-weight language models and AI agents that share memory records, task files and a message broker. AI coding agents do much of the implementation; I set the design, review the changes, run the tests and decide what is released.

Show 4 more points: Agentic AI Developer and Systems Architect, Independent

Founder, President and CTO

Florida Armored Combat Inc.

2023 – Present · Nonprofit leadership

Founded a 501(c)(3) nonprofit; statewide governing body for armored combat (buhurt).

Founded and leads Florida Armored Combat, a 501(c)(3) nonprofit, applying leadership, business orchestration, technology integration, event planning, AI governance, and cybersecurity to support member teams and community activities.

  • Founded Florida Armored Combat Inc. as a 501(c)(3) nonprofit and leads the organization as President and Chief Technology Officer (CTO).
  • Grew the organization from three teams to eight city teams and three collegiate teams, and led the formation of a statewide female team.
  • Supports charitable events, STEM programs, K-12 and collegiate education programs, and free training for the public; coaches and recruits new fighters.
  • Significantly reduced technology costs by building and running the organization's website and systems with open-source software, and trained volunteers to use open-source frameworks in their work.
  • Built AI agents to augment the volunteer workforce and devised governance protocols defining what agents can and cannot access or do with the organization's knowledge and infrastructure.

Show 4 more points: Founder, President and CTO, Florida Armored Combat Inc.

Senior Systems Analyst, Executive Support

Walt Disney World

Oct 2013 – Present · Atos to Disney

Atos assignment: October 2013–November 2022; Disney employee: November 2022–Present.

Provides technology support and advice to Walt Disney World executives at vice-president level and above and WDW Legal. Served through Atos from October 2013 to November 2022, then joined Walt Disney World Enterprise Technology as an employee. Work spans enterprise support, secure remote access, records and knowledge migrations, and coordination with information security teams. Helps executives, Legal staff, and colleagues work reliably and securely, with less disruption.

  • Exported the team's OneNote knowledge base to Markdown with attachments intact, shared the export and method with the team, and used a copy for a Confluence migration with an approximately 95% successful import. Documented the migration's limitations.
  • Added an experimental analysis of relationships between notes, including which documents supersede others, so current material is easier to find in search. It is non-deterministic, so it is used as an aid to human review.
  • Wrote the policy for migrating WDW Legal records from several sources to NetDocuments and coordinated LegalOps training on retention and retrieval.
  • Recovered lost or fragmented data and reports for clients on several occasions, saving from about an hour to several days of rework each time; this work contributed to a Disney Recognition award in 2026.
  • Liaison between executives and Global Information Security; advised WDW Legal on modernizing its BYOD policy and forensic investigation methods.
  • Moved WDW Legal executives, paralegals and support staff to secure remote work in 2020 using Citrix and two-factor authentication, procured equipment for long-term remote work, and strengthened home networks for the added traffic.
  • Located, organized and migrated WDW Legal PST archives to Exchange Online, with access granted to the correct attorneys and paralegals.
  • Developed and delivered training to counter spear-phishing campaigns; worked with eDiscovery on preserving digital evidence and records.
  • Proposed to leadership a review of WDW Legal's digital assets based on confidentiality, integrity and availability (CIA triad) principles.
  • Supported the WDW Legal move from eDOCS to NetDocuments (in progress in 2019).
  • Administered accounts, file and system access, and conferencing: Active Directory and Azure AD, Exchange Online, SCCM, OneDrive, BlueJeans, Zoom and Polycom.
  • Subject-matter expert for Disney IT support and field teams on PC, Mac, application and network issues; individual and group instruction for executives and support staff.

Show 11 more points: Senior Systems Analyst, Executive Support, Walt Disney World

IT Consultant

Shaun Marshall Consulting

Feb 2010 – Present · Self-employed

Current work through LuSaur Technology, LLC; independent consulting since 2010.

Practical IT, cybersecurity, infrastructure, and AI integration suited to an organization’s people, resources, and needs. Current work through LuSaur Technology, LLC builds on an independent consulting practice begun in 2010.

  • Designs and deploys segmented networks with remote access: OPNsense and pfSense firewalls, Cisco switching and Proxmox virtualization.
  • Builds and hosts websites on the LAMP stack and WordPress; plans and runs hardware and software migrations.
  • Writes business-operations, disaster-recovery and information-security policies for each client, and teaches owners how to run their networks safely.

Show 2 more points: IT Consultant, Shaun Marshall Consulting

Windows 7 Migration Team Lead and Technical Liaison

CNSS Inc., for Walt Disney World

May 2012 – Oct 2013 · Contractor, vendor assignment

Field team for moving Walt Disney World property and offices from Windows XP to Windows 7.

  • Led four contractors and worked with the HyperCare team supporting the move from Windows XP to Windows 7 across the Walt Disney World property and supporting offices.
  • Scheduled deployments with off-site developers, directors and department heads, deploying department by department to keep downtime low.
  • Enforced enterprise PC standards, fixed application and network issues, and helped test white-box applications and equipment.

Show 2 more points: Windows 7 Migration Team Lead and Technical Liaison, CNSS Inc., for Walt Disney World

SME Support Analyst

Connextions Inc.

2010 – 2011

Technical support account in a contact center.

  • Technical mentor for call-center agents on a technical support account; trained them in troubleshooting and resolution.
  • Wrote and updated support articles in the company wiki; provided first- and second-level support with DameWare and Active Directory.

Show 1 more points: SME Support Analyst, Connextions Inc.

Systems and Support Analyst

TEKsystems, for Roetzel & Andress

2008 – 2009 · Contractor, staffing firm

Support for attorneys and staff at a law firm's Florida offices.

  • Supported attorneys and staff on Citrix, Westlaw and Microsoft Office 2007; managed accounts, printers and remote access with Active Directory, Remote Desktop and SMS.
  • Helped build a Citrix server environment for the firm's Orlando, Fort Lauderdale and Naples offices.

Show 1 more points: Systems and Support Analyst, TEKsystems, for Roetzel & Andress

Senior Analyst

CompuCom Inc., for Walt Disney World

2006 – 2007 · Contractor, vendor assignment

Disney PC Migration project.

  • Proposed an in-house help center and remote-assistance service for the Disney PC migration, then set it up and managed it; it worked with Disney IT to resolve deployment and transition issues.
  • Wrote training material for new help-center technicians and trained them on Active Directory, SMS, Ghost imaging and Remote Desktop.
  • Ran needs assessments and deployment scheduling with ACS and Disney managers and network engineers; provided basic data recovery when needed.

Show 2 more points: Senior Analyst, CompuCom Inc., for Walt Disney World

Senior Field Service Technician

CACI and TEKsystems, for U.S. Department of the Navy, NAVAIR Orlando

2001 – 2006 · Contractor, vendor assignment

Promoted from Field Service Technician.

Department of Defense contractor on the Navy/Marine Corps Intranet (NMCI) at Naval Air Warfare Center Training Systems Division.

  • Provided hardware and software support for over 1,100 clients on the Navy/Marine Corps Intranet (NMCI).
  • Led the research that resolved a Windows Installer failure blocking Microsoft Office deployments on Windows 2000 workstations (2003). Deployments continued on schedule, and the prime contractor, EDS, avoided an SLA miss carrying a penalty of more than $200,000.
  • Wrote documents and hot-fixes that were used at site and enterprise level within NMCI.
  • Assisted DoD Information Assurance personnel with forensic investigations on the Navy network, gathering evidence within state and federal law.
  • Tools: HEAT and Remedy ticketing, Tivoli remote control, Active Directory and SMS for accounts and software packages.
  • Command Master Chief Award for Excellent Service, Naval Air Warfare Center Training Systems Division (2001).

Show 5 more points: Senior Field Service Technician, CACI and TEKsystems, for U.S. Department of the Navy, NAVAIR Orlando

Technical Project Manager, NMCI Assessment and Planning

AERA Inc., for U.S. Department of the Navy, NAVAIR Orlando

2001 · Contractor, project

Assessment and planning stage before the NMCI transition at NAVAIR Orlando.

  • Hired and supervised 15 contractors for the assessment and planning stage before NMCI, working with the local Navy command and DoD staff.
  • Wrote standard operating procedures and a lessons-learned list used at other naval bases preparing for NMCI; finished almost one month ahead of schedule.

Show 1 more points: Technical Project Manager, NMCI Assessment and Planning, AERA Inc., for U.S. Department of the Navy, NAVAIR Orlando

Electronics Lab Manager, Department of Nursing

University of Central Florida

1998 – 2001

Computer lab and simulation equipment for the Department of Nursing.

  • Designed, assembled and ran the department's networked computer lab, with testing stations, a file and print server and a Virtual IV injection-simulation station.
  • Supported nursing faculty, staff and students; wrote a best-practices and lab-maintenance guide for later lab managers.

Show 1 more points: Electronics Lab Manager, Department of Nursing, University of Central Florida

Help Desk Representative

University of Central Florida

1996 – 1999 · Student employment

Campus help desk.

  • Supported students and staff on campus email clients (GroupWise, Outlook and Exchange, PINE) and network access.

Safety Engineer and Computer Specialist

NASA John F. Kennedy Space Center, Safety and Mission Assurance (RT-SRD-2A, EIC-A)

1996 – 1998 · Student employment

Student employment in Safety and Mission Assurance.

  • Maintained the Pressure Vessels and Systems (PV/S) database and coordinated a safety-recertification schedule with the Center's major contractors.
  • Designed a web portal where contractors could identify their own pressure vessels and systems and check them against the Center's records.
  • Member of the Shuttle Upgrades Liquid Flyback Booster study (1997): reusable kerosene and oxygen engines, specific impulse and maintenance time between launches.

Show 2 more points: Safety Engineer and Computer Specialist, NASA John F. Kennedy Space Center, Safety and Mission Assurance (RT-SRD-2A, EIC-A)

Show photographs from Kennedy Space Center

Student Assistant, LEAD Scholars Program

University of Central Florida

1995 – 1996 · Student employment

Program office of the LEAD Scholars student leadership program.

  • Student assistant in the LEAD Scholars Program office while a member of the program.

Skills

Security and governance

  • AI governance and assurance (provenance, authority, replayable context)
  • Information and records governance (retention, access, migration policy)
  • Digital evidence preservation with eDiscovery
  • Forensic investigation support (DoD Information Assurance)
  • Security awareness training (spear-phishing)
  • Security liaison between executives and Global Information Security
  • Policy writing: business operations, disaster recovery, information security
  • AI governance
  • Cybersecurity

Infrastructure and operations

  • Windows client and server, Active Directory and Azure AD, Exchange Online, SCCM/SMS
  • Network design and segmentation with remote access
  • OPNsense and pfSense firewalls, Cisco switching
  • Proxmox virtualization
  • Linux (Debian, Ubuntu, CentOS)
  • Citrix and two-factor remote access
  • Data recovery
  • Enterprise PC and software migrations
  • Technology integration

AI and automation

  • MCP tool design with read-only, credential-bound access
  • Deterministic validation, replay and mutation testing
  • Knowledge-base export, migration and retrieval
  • Self-hosted open-weight models and model routing (lab)
  • TypeScript, Python and Rust in current projects (agent-assisted)
  • PowerShell, Bash and batch scripting for operations
  • HTML, CSS, PHP and JavaScript websites (LAMP, WordPress)
  • Database and web portal for safety records (1990s)

Delivery and leadership

  • Technical advice for executives at vice-president level and above
  • Team lead for contractor teams (15-person assessment, four-person migration)
  • Project planning, SOPs and lessons-learned reports
  • Training and mentoring technicians, agents and staff
  • Secure remote-work transition for a legal department
  • Founding and running a statewide nonprofit
  • Leadership
  • Business orchestration
  • Event planning

Where each group was used

Skill group

Security and governance: where it was used

Roles and projects that used these skills. Choose a group above to read the main contributions from each.

Education and credentials

Education

  • ECPI University, Lake Mary, Florida

    Computer and Information Science coursework, cybersecurity track (governance and policy focus)

    Coursework · 2023 – 2025

    Courses: Network security and defense, Incident response and digital forensics, Governance, risk and compliance, Security policy and ethics, Cryptography fundamentals, Programming logic and design

  • University of Central Florida, Orlando, Florida

    LEAD Scholars Program (student leadership program)

    Program member · 1995

  • Professional and continuing study

    Cisco Networking Essentials I and II; Microsoft Exchange 2000; Coursera courses in AstroTech, Genetics and Evolution, Galaxies and Cosmology, and Nanotechnology

    Completed courses

Certifications

  • CompTIA Security+ ce, CompTIA Previously held, valid 2022–2025
  • CompTIA Network+, CompTIA Held, earned before 2009
  • CompTIA i-Net+, CompTIA Held, earned before 2009
  • Certified Internet Webmaster (CIW), CIW Held
  • CompTIA A+, CompTIA Previously held
  • Dell Certified Systems Expert, Dell Previously held
  • Lenovo Certified (ThinkPad T42, T43p, T60), Lenovo Previously held
  • Microsoft Office User Specialist (Office XP), Microsoft Previously held

Clearance

Top Secret (Single Scope Background Investigation)

Previously held

Memberships

ISACA, ISC2, InfraGard

Awards

  • Disney Recognition

    Walt Disney World Enterprise Technology: client service and data recovery

    2026

  • Command Master Chief Award for Excellent Service

    Naval Air Warfare Center Training Systems Division

    2001

Community

President and Technology Advisor

Grassy Lake Elementary PTO

2016 – 2020

  • Founded the PTO's 501(c)(3).

Volunteer

Scouting BSA Pack 551 and Troop 998G

Technology Advisor, AV and Effects Specialist

Breakthrough Theatre of Winter Park

Science and technology education support

Home-school families

Other community work

  • Creator and host, The SHOW (Star Trek Online podcast, Oden Knight on YouTube) (2015)

    Produced and hosted roundtables on game mechanics with community guests and Star Trek Online developers and artists.

  • Science advisor and voice of Professor Kim, Project Warp

  • Raid leader and game tester, Online games (2004 – 2017)

    Led World of Warcraft raid teams of 10 to 40 players across time zones: recruiting, training, scheduling and supply logistics.

    Beta tester for Star Trek Online (documented over 200 bugs) and other titles; regional coordinator for technical issues in the Earth & Beyond test.