Industries we serve

Public sector

Local government and special districts

Cities, counties, groundwater conservation districts and utility districts need an IT provider that understands open records, budget cycles and the statutes that bind a public body. We have contracted with Texas counties, cities and special districts for more than a decade, including a groundwater district relationship maintained since 2012.

Since 2017 we have been primary IT provider to a county for every department, from the judge's and clerk's offices to the sheriff, prosecutor, justice courts and road and bridge. Completed work includes a county-wide workstation replacement, secure wireless links between public buildings, and IT logistics through a courthouse renovation.

• Public, charter and private schools: classroom Wi-Fi sized for every student device, student, staff and guest networks kept apart, managed staff and classroom devices, and student-data privacy (FERPA) handled as advice, not attestation
• An annual written infrastructure assessment delivered ahead of your budget cycle, with a seven-year capital outlook so the governing body can budget rather than react
• Microsoft 365 retention policies set to your adopted records schedule; until one is adopted, we apply the interim Texas State Library local schedule
• Board and council email on your own domain for Public Information Act retention, secure access from personal phones, and a mailbox-only user category so officials are not priced as full staff
• Enrollment and completion tracking for the state-required annual certified cybersecurity training, and coordination with your DIR Regional Security Operations Center where you use one (the RSOC monitors; we coordinate)
• .gov domain request and supporting letter prepared for your official to file (special districts use get.gov, with an interim domain in the meantime), and legacy domains transferred into the entity's control
• Board-meeting support: a packet summary, staff figures checked, and attendance in person, by Teams or by phone
• A board device program: entity-owned phones, tablets or laptops configured, encrypted and enrolled before they ship
• A one-hour board orientation, with a board distribution group, packet library and shared calendar
• Network and domain health checks for city halls and county facilities: a numbered findings register, a risk register and a 30-day sequence
• Courthouse and facility renovations in four phases, elections-office support with chain-of-custody requirements, and council-chamber audio-visual and livestreaming design

Facility and courthouse renovations, in four phases

What has changed. Texas requires most local-government employees and elected officials to complete certified cybersecurity training each year, and TX-RAMP certification has become the first question to ask of any cloud service a public body buys. We answered by building training enrollment and tracking into the Managed Service Program and by checking TX-RAMP status and the Chapter 620 prohibited-technology list before any product is quoted.

Texas public bodies receive terms written for public-entity requirements, set out in a written agreement. Form 1295 is filed before the governing body votes; a CIQ is completed on request. Hardware is quoted and invoiced without sales tax once your exemption certificate is on file. Public-sector staff complete current CJIS Security and Privacy training, renewed annually, with background screening.

Regulated

Healthcare and home health

Urgent-care clinics, specialty practices, clinical-research sites, home-health agencies and medical billing offices handle protected health information on networks shared with guests, phones, printers and vendor equipment. We design so that PHI traffic is segmented and the controls can be shown to an auditor.

• VLAN segmentation that keeps clinical systems apart from guest, voice, IoT and vendor networks, with isolation rules treated as compliance controls and re-tested after every firewall change
• Site-to-site VPN between clinic locations and secure remote access for named users
• Secure cloud fax filed into a SharePoint library, with Business Associate Agreements from both Engineer Austin and the carrier, and notification emails that contain no patient information
• A twelve-month fax-volume analysis from carrier call records before any fax recommendation: exact counts, not estimates
• Accurate time sources and persistent logging on network gear, because audit trails depend on them
• Workstations encrypted and enrolled before they ship, and MFA enforced from account creation

What has changed. Fax has not left healthcare, but the analog line it ran on is leaving: carriers are moving fax onto encrypted SIP trunks and cloud services, and a fax that carries PHI now needs a Business Associate Agreement from every party that handles it. Our answer is a hosted secure fax service with BAAs from the firm and the carrier, priced side by side with a client-owned fax appliance and third-party vendors so the practice can choose on equal terms.

We sign Business Associate Agreements and confirm or amend them before any PHI-handling service goes live. HIPAA help is advisory: we design, document and harden; we do not issue attestations, certifications or legal opinions.

Offices

Churches, nonprofits and professional services

Churches, ministries and community nonprofits, along with law offices, CPA firms, real-estate brokerages and consulting practices, run on email, documents and a handful of line-of-business applications. They need confidentiality, a clean handover when staff leave, and an IT bill that fits an office of five or fifty.

• Microsoft 365 tenant build or migration with SPF, DKIM and DMARC, staged so the source is untouched until the copy is verified
• SharePoint and OneDrive structured so no record is trapped in a departing employee's account
• MFA enforced from day one, self-service password reset and NIST-aligned password practice
• Small-office network package installed on one visit: managed firewall, PoE switch, Wi-Fi 7 access point, rack UPS and a tidy cabinet
• Security audits of inherited firewalls, including finding paid-for security services that were never switched on
• Mailbox-only accounts for boards, elders and volunteers who need an address but not a workstation
• For churches and nonprofits: Wi-Fi that holds up when the sanctuary or fellowship hall is full, guest networks kept apart from offices and giving records, and volunteers on their own phones protected without taking the phones over
• Donor and member information kept in accounts the organization owns, with access removed when a staff member or volunteer moves on, and help using nonprofit licensing programs where you qualify

What has changed. Microsoft has been retiring the sign-in methods that let a password alone open a mailbox, and cyber-insurance applications now ask in writing whether MFA, encryption and tested backups are in place. We build every tenant to that baseline from the first account, re-check it against Microsoft's current guidance at the annual assessment, and keep the configuration in writing so the questionnaire can be answered from the record.

No client-facing ticket portal is imposed on a small office: you call or email, the request is logged, and the technician confirms directly when it is closed. Churches and nonprofits receive the same written assessment and ownership terms as every other client.

Networks as infrastructure

Internet service providers and property owners

Small and medium ISPs and WISPs need senior network expertise without a full-time hire. Office plazas, RV parks, subdivisions, campuses and ranches need a network engineered like a utility.

• Outsourced senior network support for ISPs and WISPs: core and edge design, routing, access networks, capacity planning and on-call escalation
• Point-to-multipoint fixed-wireless backhaul and a firm-operated wireless management server
• Multi-tenant core router design for an office plaza, with tenant-isolation decisions documented
• Site survey, RF design, outdoor access points, fiber-to-the-pad, pedestals and conduit, bandwidth planning and guest portals for parks, resorts and communities
• Private tower and mast installation, mounts, path analysis, grounding and inspection for point-to-point links, WISP sites and SCADA telemetry

What has changed. Broadband grant programs have put funding and reporting obligations in front of small providers, IPv4 scarcity has made CGNAT and IPv6 design decisions rather than afterthoughts, and park guests now arrive with streaming devices that expect fiber-class service at the pad. We provide regulatory and grant support alongside the design work, including P.E. review and certification where a program requires it, treat IPv6 and CGNAT as part of every core design, and plan property networks around peak occupancy.

The principal's IT career began on an ISP support desk. See ISP and WISP engineering support, RV park and site-wide Wi-Fi and fiber, and tower installation and services.