Table of Contents

1. Introduction

Forward deployed engineer who builds agentic developer tooling. I design, build, and ship enterprise Claude Code deployments, agentic data products, MCP servers, skills, and training curricula that the agent delivers itself, along with the identity and auth layers underneath them: OIDC federation to AWS, OAuth for remote MCP servers with Cognito, Okta, and Clerk, passkey sign-in, and per-user credential brokering. Before this I spent fifteen years at Verizon on carrier voice networks, then moved to AWS for the Amazon Chime SDK and Generative AI. I work in Claude Code, and a harness I built around it, every day.

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119].

2. Terminology

A2A: Agent-to-Agent protocol, for agents to discover and call one another

FDE: Forward Deployed Engineer: an engineer embedded with a customer to build and deploy

MCP: Model Context Protocol, a standard for connecting AI agents to tools and data

OIDC: OpenID Connect, the identity layer used for single sign-on federation

SBC: Session Border Controller, used in VoIP and real-time communications

Skill: a packaged set of instructions and resources an agent loads when a task calls for it

3. Capabilities

An implementation of this author provides the following capabilities:

oBuild: agentic products and developer tools in TypeScript, Go, Python, and Rust, from a React/Electron "Claude Code for data" app to the Claude Code on Bedrock deployment layer and seven CLI tools of my own.

oDeploy: take agents into enterprise environments and own the hard parts there: identity, credentials, cost controls, compliance, and the requirements conversations with security and procurement.

oTeach: design curricula and run hands-on technical sessions, from re:Invent workshops to a 44-lesson Claude Certified Architect series that the agent delivers itself.

oAdvise and sell: fifteen years of pre-sales architecture for Fortune 100 accounts, running technical evaluations and turning customer requirements into product.

4. Professional Experience

4.1. Fundamental, Forward Deployed Engineer (Jul 2026 – present)

oBuild the infrastructure and support layer for a 20-person data science team: MCP servers and agent skills that let data scientists build and deploy production systems outside their specialty.

oTurn multi-day data-processing work into hours of delegated agentic work, so data scientists spend their time on modeling instead of plumbing.

oCodify senior-engineer judgment as skills and resources, so the team learns while doing their own work instead of waiting on an engineer.

oMeasure the work by the time it returns to the team, and turn each repeated request into a reusable skill rather than one-off help.

4.2. Oracle, Forward Deployed Engineer (Mar 2026 – Jul 2026)

oPrimary engineer on an unreleased agentic data-engineering product, a "Claude Code for data." An LLM agent queries, transforms, and visualizes data across Snowflake, Oracle Fusion, EPM, DuckDB, and Parquet through a chat-first interface. I wrote the majority of its commits:

-The Electron desktop app, with a React renderer for streaming chat, notebooks, visualization, and data lineage.

-An Ink/React CLI.

-The shared TypeScript core for sessions, tools, connections, and prompts, in a Turbo monorepo.

oBuilt the enterprise control plane that turns the single-user tool into a governed multi-user service: identity, authorization policy, connection and credential brokering, metering, and entitlement, all kept out of the data path.

oContributed to the Rust query engine underneath it (an LLM-optimized dataframe IR that compiles to 19 SQL dialects): per-user OCI Vault credentials, grant-verified secret writes, gVisor sandboxing, and cross-platform (macOS arm64, Windows) release bundles and CI.

oBuilt an investigation assistant for forward deployed engineers that turns customer feedback, logs, and resource IDs into structured, Jira-ready investigation reports.

4.3. AWS, Principal Specialist Solutions Architect, Generative AI (Mar 2025 – Mar 2026)

oDesigned and built, as sole engineer (with Claude Code), the AWS Solutions Guidance for deploying Claude Code on Amazon Bedrock. Adopted by enterprises covering 50,000+ developers; 400+ GitHub stars, 150+ forks. It includes:

-OIDC single sign-on federation (Okta, Entra ID, Auth0, Cognito) through a credential-process binary that exchanges ID tokens for temporary AWS credentials.

-Per-user cost attribution, quota enforcement, and data-residency controls.

-OpenTelemetry monitoring with a collector, a client helper, and CloudWatch dashboards.

-Cross-platform Go and Python installers and a Python deployment CLI.

oRan discovery with enterprise customers rolling Claude Code out to their developers, captured their security, identity, cost-control, and compliance requirements, and turned them into the guidance's roadmap.

oBuilt and delivered two re:Invent 2025 sessions on Claude: "Vibin' with Claude," on working with Claude Code, and a hands-on A2A workshop on a multi-agent orchestration platform where agents are discovered and used dynamically through MCP and A2A.

oBuilt an agentic validation system that tests and verifies Solutions Architects' sample code before publication, cutting manual review time.

4.4. 8090 Inc., Chief Architect (Sep 2024 – Mar 2025)

oBuilt a hosted MCP server connecting internal Cursor users to private documentation and code, with RAG retrieval, pre-loaded prompts, and access controls.

oBuilt a VS Code extension that lets non-technical staff update PRDs from meeting notes and emails with Claude on Bedrock, committing the results to git.

oBuilt an organization-wide Amazon Bedrock gateway centralizing logging, quotas, and access across multiple AWS accounts, simplifying quota management and smoothing bursty traffic.

oBuilt multi-model agentic document-processing workflows for Know Your Customer (KYC) and quality control, cutting manual review and routing work across models for cost.

oDesigned custom SaaS architectures for clients and established MLOps practices for deploying, monitoring, and maintaining models in production.

4.5. AWS, Principal Specialist Solutions Architect, Generative AI (2024 – Sep 2024)

oPartnered with model providers including Anthropic and Meta to build demos for enterprise customers.

oGuided enterprise customers through complex GenAI workloads: prompt engineering, tool use, agentic workflows, and RAG, deployed with CDK.

oCo-presented Step Functions + Bedrock + Claude tool use at the AWS Heroes Summit 2024; built two re:Invent 2024 workshops on agentic workflows.

4.6. AWS, Amazon Chime SDK (2020 – 2024)

Principal Developer Advocate (2023) · Senior Developer Advocate (2022–2023) · Senior Specialist Solutions Architect (2020–2022)

oWorked with the service team to define, refine, and launch Chime SDK features; wrote the blogs and code for multiple feature releases.

oBuilt open-source demos deployed thousands of times, CDK constructs (cdklabs/cdk-amazon-chime-resources), a public Postman collection, CodeSandbox demos, Jupyter notebooks, and AWS Workshops, including early LLM integrations with SageMaker, Lex, and Transcribe.

oCo-hosted a weekly Twitch show with thousands of views; ran internal training for Solutions Architects on VoIP, coding, and CI/CD.

oWrote best-practice integration guides for Cisco Call Manager and Microsoft Teams with Amazon Chime Voice Connector.

4.7. Verizon (2005 – 2020)

Voice Sales Architect → Tier 2 Voice Sales Architect → Principal Architect → Distinguished Architect → Distinguished Member of Technical Staff

oTechnical architect of a first-to-market SBC-as-a-Service product on OpenStack. Developed, tested, sold, and deployed it, then extended it with Internet interfaces and SR-IOV.

oProfessional services lead for a 4,000-location SBC and unified communications design and migration for a single enterprise customer, across multiple carriers and UC clusters.

oPre- and post-sales architect for Fortune 100 customers, brought in as the escalation expert on high-stakes deployments.

oLed training for 100+ architects, and built the documentation and tools used in company-wide training for 200+.

oBuilt Python and Ansible automation for rapid deployment of SBC and voice infrastructure on AWS and Azure, and led the Microsoft Teams Direct Routing integration with Verizon SIP Trunking.

5. Independent Work

5.1. workshop.institute, agent-delivered technical training (May 2026 – present)

workshop.institute

oDesigned and built a training platform where Claude Code teaches the workshop in the learner's own terminal. The agent walks the lessons, runs verification, and coaches; progress syncs across machines.

oWrote the curriculum, 10 workshops and 100+ lessons:

-Claude Certified Architect (6 workshops, 44 lessons): one production PR-review agent built across Claude Code configuration, prompting and structured output, tools and MCP, agentic orchestration, and context and reliability.

-Build a Real MCP Server (13 lessons) and Build an LLM Evals Harness (8 lessons).

-Build Your First Skill, Claude Code Basics, Git Basics, Intro to SQL, and ML Foundations.

oMade the quality bar a system. Every workshop starts from one template in which each lesson has a manifest, a learner README, a coach script, and verify tests, and CI runs manifest lint and compose validation, so a lesson can't ship until it passes.

oBuilt the platform: serverless AWS (CDK, Lambda, DynamoDB, one MCP server per workshop), a Go CLI, payments, an event-administration app, shared typed contracts, and a plugin marketplace for Claude Code and Cowork.

oBuilt the auth: email one-time codes and passkeys through Clerk, OAuth-protected MCP servers per workshop, CLI sign-in that carries progress across machines, and a GitHub-gated admin MCP for operators.

oBuilt in-person event operations kits (runbooks, day-of checklists, communications, access grants, feedback) and an operator admin app for access and seating.

5.2. The .tools family and an agent harness (2026 – present)

subaud.tools

oBuilt seven local-first developer tools, mostly in Go, with one shared build, signing, release, and install standard and a fleet conformance checker. Two are commercial.

-muster: a local multi-agent coordination bus that lets Claude Code and Codex sessions message each other.

-galley: document review in rounds between a human reviewer and an agent.

-hail: drive coding-agent sessions from a phone, including answering tool-approval prompts, over infrastructure you own.

-kempt: declarative machine setup you read before you run.

-tackle, channels, and muda round out the set.

oBuilt and published harness extensions on npm (event channels that wake idle sessions, a provider guard, a tmux bridge, wakeups, quiet tool rendering), and maintain republished forks of a permission system, an auto-review security authorizer, a scheduler, and a Claude Code bridge.

oBuilt Claude Code plugins for feature lifecycle management and cross-model code review (claude-code-plugins, codex-reviewer).

oAbout 6,500 commits across these projects in 2026.

6. Publications and Talks

oPublished working patterns for agent and MCP auth: OAuth for MCP servers with Cognito and Okta, moving an MCP server from API keys to browser login, verifying Clerk JWTs in Cloudflare Workers, and keeping API keys out of an agent's context.

osubaud.io: 100+ technical posts on Claude Code (hooks, skills, subagents), MCP, agent harnesses, static-analysis gates for AI-generated code, and AWS/CDK, including Teaching Claude to Teach AWS and Skills Instead of Setup Docs.

oOver a dozen AWS blog posts. Speaker at re:Invent (workshops in 2022, 2023, and 2025), four AWS Summits, Enterprise Connect, and Contact Center Week.

7. Implementation Notes

This author is known to interoperate with the following:

oAI: Claude Code (plugins, skills, hooks, subagents), MCP (server design, OAuth), agent orchestration, tool use, prompt and context engineering, evals, RAG, Amazon Bedrock

oLanguages: TypeScript, Go, Python, Rust (working), SQL

oFrontend / CLI: React, Electron, Ink, Bubble Tea, Astro

oCloud: AWS (CDK, Lambda, DynamoDB, ECS/Fargate, CloudFront, IAM/STS federation), OCI, GitHub Actions, OpenTelemetry

8. Security Considerations

Agents deployed by this author MUST NOT hold long-lived credentials. Prior implementations include OIDC federation to temporary AWS credentials for 50,000+ Claude Code developers [CC-BEDROCK], OAuth for remote MCP servers with Cognito, Okta, and Clerk, per-user credential brokering through a vault, and keeping API keys out of an agent's context entirely.

Identity, authorization policy, and metering SHOULD stay out of the data path.

9. IANA Considerations

This document has no IANA actions.

10. References

10.1. Normative References

[RFC2119]Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997, <https://www.rfc-editor.org/info/rfc2119>.

[RFC7322]Flanagan, H. and S. Ginoza, "RFC Style Guide", RFC 7322, September 2014, <https://www.rfc-editor.org/info/rfc7322>.

10.2. Informative References

[CC-BEDROCK]AWS Solutions Library, "Guidance for Claude Code with Amazon Bedrock", GitHub Repository, 2025, <https://github.com/aws-solutions-library-samples/guidance-for-claude-code-with-amazon-bedrock>.

[WORKSHOP]Schuett, C., "workshop.institute", Training Platform, 2026, <https://workshop.institute>.

[TOOLS]Schuett, C., "The .tools family", Software, 2026, <https://subaud.tools>.

[SETUP]Schuett, C., "The subaud setup", Web Page, 2026, <https://www.subaud.io/the-subaud-setup/>.

[CDK-CHIME]CDK Labs, "CDK Amazon Chime Resources", GitHub Repository, 2023, <https://github.com/cdklabs/cdk-amazon-chime-resources>.

Author's Address

Court Schuett
Fundamental

Email: court@subaud.io
URI: https://subaud.io