JOEL GATHERCOLE
Principal Engineer | AI Systems Architect | Security & Identity
joel@joelnanz.com · New Brunswick, Canada (Remote) · joelnanz.com
Professional Summary
Principal-level software engineer and systems architect with 36 years of hands-on experience (self-taught since 1990) building secure, production-grade platforms. Currently architecting MapleWorkSuite — a multi-product SaaS AI platform — with a focus on agentic AI architectures, on-device identity security, and credential management for AI agents. Deep expertise in security compliance (SOC 2 Type II, HIPAA), protocol-level integration (OAuth2, JWT, SAML, OIDC), and real-world implementation of MCP, A2A, and ACP protocols in production systems. Proven track record across healthcare, telecom, and AI-native SaaS — from architecture to production deployment. Builder first: I'm more comfortable showing working code than describing it.
Core Competencies
| • Agentic AI Architecture (MCP, A2A, ACP) |
• Confidential Computing / Edge AI Appliances |
| • AI Credential Brokering & On-Device Security |
• Cloud Platforms: GCP, AWS, Linux (Rocky/Ubuntu) |
| • OAuth2, JWT, SAML, OIDC, SCIM |
• CI/CD, Docker, Linux Systems Administration |
| • SOC 2 Type II & HIPAA Governance |
• HL7/FHIR EMR Integrations |
| • Multi-Tenant SaaS Architecture |
• Asterisk/VoIP, WebRTC, SIP, Telnyx |
| • WebSocket & Real-Time Agent Orchestration |
• Payment Integration & API Architecture |
| • Debugging, Testing & Code Validation Pipelines |
• Technical Writing & API Documentation |
Professional Experience
Joel & Nanz Inc. — Founder, Principal Architect
2018 – Present | New Brunswick, Canada (Remote)
Building MapleWorkSuite: a modular AI-powered SaaS platform addressing the intersection of identity security, agentic AI, and developer tooling.
- MapleStation — Physical AI appliance with on-device data processing and hardware-enforced data residency. Confidential computing principles: local LLM inference, encrypted local storage, WebSocket-based agent gateway. No credentials or data leave the device; security model meets enterprise identity requirements without cloud dependency.
- Agentic AI Orchestration — Production multi-agent systems using MCP, A2A, and ACP protocols. Designed credential brokering for AI agents: granting the right access, at the right time, without exposing credentials at rest or in transit.
- MapleCore — Ground-up agent runtime in Go targeting <10MB memory footprint and sub-second boot for embedded/edge deployment on ARM and RISC-V hardware.
- MapleSecure — Document security and identity management built to HIPAA and SOC 2 Type II standards: RBAC, audit logging, session lifecycle management.
- MapleReceptionist — AI voice agent platform with real-time identity verification, credential-gated workflows, and Telnyx SIP integration.
- Full multi-tenant SaaS infrastructure: OAuth2/JWT auth flows, SCIM-style provisioning, API gateway, webhook delivery, compliant SMS (10DLC/Toll-Free).
- Quality & Validation — Built automated testing and code validation pipelines across the platform: PHP lint gates, runtime regression tests, HTTP 500 monitoring, and pre-deployment syntax validation. Every file deployed passes a hard validation gate before reaching production.
- Technical Documentation — Authored comprehensive API documentation, architectural specifications, and AI governance frameworks. Wrote developer onboarding guides, integration specs (MCP, OAuth2, webhook), and compliance documentation for SOC 2 and HIPAA audits.
- Additional products: MapleInvoice, MapleExpense, MapleConcierge, MapleCabinet.
TriageLogic LLC — Senior Software Developer & Technology Consultant
2006 – 2026 | Remote
Senior technical lead for a nationwide nurse triage platform serving US healthcare clients at 24/7 high-availability scale.
- Architected nurse triage systems and virtual nursing infrastructure for nationwide healthcare clients.
- Designed identity access controls, audit trails, and session management meeting SOC 2 Type II requirements.
- Built HIPAA-secure messaging, encrypted fax workflows, and clinical data exchange systems.
- Engineered HL7/FHIR EMR integrations for secure interoperability across hospital systems.
- Modernized telephony infrastructure (Asterisk, SIP, WebRTC) and migrated on-premise systems to GCP.
- Implemented CI/CD pipelines across multi-environment Rocky Linux/Debian deployments.
- Developed debugging workflows and test suites for clinical-grade software: regression testing, integration tests, and production monitoring for 24/7 uptime SLAs in healthcare environments.
- Wrote technical specifications and implementation documentation for client integrations, API contracts, and compliance audit evidence packages.
Telecom / Asterisk Consulting — VoIP & Call Center Engineer
2004 – 2006
- Built VoIP call centers using Asterisk for healthcare and enterprise clients.
- Engineered SIP routing, IVR systems, and redundant call queues for a 100+ agent contact center.
Independent Software Development
1990 – 2004
- 14 years of pre-commercial development across early PC platforms, BBS systems, network infrastructure, and the early web.
- Self-taught from age 12 — developed adaptability and pattern recognition across multiple technology generations.
Technical Skills
| Languages | PHP, Python, JavaScript/TypeScript, Node.js, Go, Bash, SQL |
| AI & Agents | MCP, A2A, ACP protocols; agentic orchestration; LLM integration (Anthropic Claude, Ollama, Gemini) |
| Identity & Security | OAuth2, JWT, SAML, OIDC, SCIM, session management, credential brokering, audit logging |
| Telecom | Asterisk, FreePBX, SIP, WebRTC, Telnyx, 10DLC, Toll-Free compliance |
| Compliance | SOC 2 Type II (design & implementation), HIPAA, AI Governance & Risk Management |
| Cloud & Infra | GCP, AWS, Rocky Linux, Ubuntu, Docker, CI/CD, Git |
| Testing & QA | Automated validation pipelines, regression testing, HTTP monitoring, syntax lint gates, integration tests |
| Technical Writing | API documentation, architecture specs, compliance evidence, developer onboarding, integration guides |
| Healthcare | HL7, FHIR, EMR Interoperability |
Education
Advanced Mathematics & Entrepreneurship — Quebec English School System
Programming: Self-taught from age 12 (1990) — 36 years of continuous practice
Certifications & Compliance Experience
- SOC 2 Type II Governance (design + implementation)
- HIPAA Security & Privacy
- Linux Systems Administration
- AI Governance and Risk Management (Practical)