Behind every project, challenges mastered and concrete gains.
As part of a multi-year project run for a major defence integrator, contribution to the security architecture and integration of the Canadian Army's Land Command Support System (LCSS): secure authentication, access management and system interoperability across NATO and Five Eyes partners.
Security architecture, authentication and access management in a classified multinational environment. Design and integration of single sign-on (SSO) and two-factor authentication (2FA) mechanisms based on Kerberos and Active Directory for intranet services, and identity federation (ADFS/SAML) for secure extranet access by external partners. Development of role-based access control (RBAC) integrated into applications built on a variety of technology platforms (Web, Java, .NET), in direct support of the client's lead architect.
Authentication and identity federation architecture validated and successfully integrated during a NATO interoperability exercise among allied nations, ensuring secure data sharing between Canadian forces and their allies.
For a defence research centre, contribution to the development of an artificial-intelligence solution applied to cybersecurity, to automate and accelerate vulnerability assessment and penetration testing.
Development of AI-based query and recommendation engines (machine learning, natural language processing, large language models) to assist cybersecurity analysts in preliminary risk assessment across multiple data sources. Integration and optimization of an anomaly detection system through the addition of intrusion detection solutions aligned with the MITRE ATT&CK framework, along with the design of a reproducible test and evaluation framework to validate the performance of the deployed solutions.
In production, the solution frees analysts from much of the manual collection and analysis of risk data, and broadens threat detection coverage across a wider variety of targets.
The Canadian Army's land electronic warfare modernization program (CFLEWM) is organized around four capability pillars: Command, Sense, Act and Shield, plus a counter-IED line. Fielded systems will have to share a common operating picture through the Team Awareness Kit (TAK) ecosystem, the de facto standard for situational awareness among Canada's allies. This demonstrator shows our command of that ecosystem.
Design and delivery of a technology demonstrator around a route-clearance patrol vignette: an EW sensor detects a suspected jammer, an electronic countermeasures effect is applied, a suspected device halts the convoy until it is cleared, all narrated on one timeline tagged by pillar. Every event is real Cursor on Target (CoT) traffic sent to an open-source TAK-compatible server, with a Python scenario engine, a containerized architecture (Docker) and a custom web map client. Standard CoT elements (MIL-STD-2525 types, sensor schema) are clearly separated from domain-specific extensions, the way vendor integrations extend CoT in the field.
A demonstration that runs in a single command, works offline, and can be shown live on an unmodified ATAK client on Android: the same traffic drives both the web view and the field application. Concrete proof that we can integrate EW and counter-IED data into the allies' common operating picture, ready to support integrators and the Department of National Defence as the program moves forward.
A defence research centre studies the embedded systems in vehicles (CAN bus networks and electronic control units, ECUs). The goal is to build mitigation frameworks, standards and policies based on real data, not assumptions. The work also produced large volumes of CAN bus traffic captures for analysis.
On the offensive side, we characterized the hardware, firmware and protocols involved. We reverse-engineered ECU firmware at the assembly level with Ghidra and IDA Pro, and ran fuzzing and penetration-testing campaigns. On the defensive side, we built a purpose-built security information and event management (SIEM) system in Python. It ingests the traffic captures into a GPU-accelerated database for analysis in Immerse and Tableau, and a statistics engine computes a "normal behaviour" baseline.
The analyses led to targeted mitigation measures, and the delivered databases document the full attack surface. The SIEM is deployed at the military client, and its baseline statistics give intrusion-detection teams a measured basis for spotting anomalies.
Analysts at a public-security organization had to reverse-engineer binaries for which only fragments of the source code were available. Mapping functions by hand was slow.
We co-developed the tool iteratively with a defence research centre, in two parts. The first is a static analyzer that models partial C/C++ source code as a metrics database. The second is an IDA Pro plugin that identifies functions in the binary from elements that survive compilation, then matches them against that model.
The tool was delivered to the public-security client. It automatically links binary functions to their likely source code, which shortens the path to understanding unfamiliar software.
A defence research centre builds integrated survivability analysis tools that estimate whether a land vehicle and its crew will survive a mission. Those tools need fast predictions of what happens when a projectile strikes armour: penetration or not, residual velocity, behind-armour debris. The data exists, but it comes from trials, analytical models and the literature, in inconsistent and often incomplete formats.
As part of a major defence integrator's team, we designed a data-driven rather than physics-based model, trained on the centre's trials and a reference ballistic impact database.
The kinetic-energy projectile model delivered in phase one was adopted and extended by the centre through a follow-on task authorization. Analysts have a tool that generalizes years of trials and can be called directly from higher-level models.
The software computes danger areas for weapons fired from aircraft: guns, rockets, indirect fire, fixed or rotary wing. A defence research centre developed it for the Canadian Armed Forces' technical airworthiness authority, following the NATO STANAG 2401 methodology. After years of changes, the legacy C++/CLI code had become hard to maintain. The challenge: make it evolvable without altering a single safety template used on firing ranges.
We provided the centre's weapons systems section with a team holding the required security clearances, registered under the Controlled Goods Program, and acted as product owner.
Version 2.0 produces identical results on every test case, with documented code ready to take on new weapons. The centre now has standards and a test suite that protect every future change.
A defence research centre runs an R&D platform for intelligence production, serving Canadian Forces Intelligence Command. It helps analysts build an understanding of a situation from multiple, uncertain sources. Canada's defence policy gave it a new goal: anticipate flashpoints and emerging threats before they escalate. Its all-source unified data space was the platform's least mature component.
Over two successive mandates, we advanced the platform on two fronts.
High-level information fusion
Forecasting and threat intelligence
The platform now has a working fusion and reasoning layer and a tooled foundation for conflict forecasting R&D. The centre's researchers can start their work on proven infrastructure instead of building it first.
In integrated air and missile defence, every decision cycle is getting shorter: faster, more adaptive threats, more and less certain data, coordination across domains, nations and command levels. Largely manual information processing increases operator workload and the risk of error. Through its continental defence program, a defence research centre develops automation and decision support concepts for Canada and NORAD.
We designed and demonstrated visualization components that let operators understand and steer automation, rather than simply receive it.
The centre has validated concepts and working components to speed up the continental defence decision cycle. Their modular design allows reuse in other demonstration environments, including partners'.
Military operations increasingly take place in dense urban areas, where buildings, vegetation and population make weapon effects harder to estimate. For Canadian Forces Intelligence Command, a defence research centre studies how to better understand a city across its physical, human and information dimensions. It needed an accurate digital model of a real urban area, usable by the centre's own collateral damage estimation tool.
With a partner specialized in digital imaging, we handled the full chain, from raw data to delivered model.
The centre has 3D models of a real urban area, ready for its experiments on weapon effects in dense terrain. The documented method can be reapplied to other cities.
Leading continuous improvement projects on aeronautics cabling production lines, in an industrial environment under heavy pressure.
Reorganizing workstations, eliminating overproduction and putting in place simple indicators to track day-to-day performance, all without interrupting production for a single day.
A 50% productivity gain on the line, achieved through method rather than equipment investment.
A food-processing plant looking to improve performance and reduce costs, without major investment capacity.
A full assessment of the production chain, identifying and eliminating bottlenecks, then laying the foundations of a performance management system to anchor the gains over time.
13% additional capacity unlocked without buying new equipment, and a restructured maintenance department better equipped to execute preventive maintenance: a base for continuing to hunt waste and unlock further capacity.
Following the acquisition of one manufacturer by another, management practices across four plants had to be aligned quickly to deliver the expected synergies.
Diagnosing operations across the four plants to identify inconsistencies, then working directly with the plant directors, through coaching, to align their practices with the acquirer's model, the goal being a common way of working, anchored in the teams.
Four plants aligned on the same management practices. The directors now operate with a shared framework and shared governance. Operational integration kept pace with the acquirer's expectations, without interrupting operations.
The financial planning and analysis (FP&A) function of a major Canadian bank relied on heavy budgeting processes and an end-of-life accounting system.
Redesign of the FP&A financial planning and budgeting processes, and migration to SAP Analytics Cloud (SAC) through the decommissioning of the legacy accounting system, a platform that centralizes data, automates consolidation and gives teams a real-time view of financial performance.
Strengthened planning capabilities: FP&A teams now work with a solid ERP system rather than scattered Excel files. In the banking sector, this type of migration typically cuts the time spent on budgeting cycles by two-thirds (for example, from 3,000 to 1,000 hours per cycle).
A major financial group wanted to build a deep understanding of all its customers across several business lines, in a highly regulated environment with strict confidentiality, security and data-integrity requirements.
Integrating the business lines into a centralized customer-knowledge ecosystem: secure high-volume loading pipelines with continuous updates, data profiling and correlation to the target model, contributions to business-intelligence solutions, under automated testing and delivery governance.
Significantly improved customer data quality, a reliable consolidated view, and a durable, robust solution maintainable by internal teams: 18 million customers unified across 5 end-to-end integrated business lines.
As part of its anti-money-laundering efforts, a major financial group relies on a specialized SaaS platform to screen customers and partners for risk. The legacy integration fed this platform from contract lifecycle events rather than from a source guaranteeing customer uniqueness. Result: the same customer, present across multiple contracts, was repeatedly duplicated in the SaaS platform, undermining the reliability of risk screening, adding to the compliance teams' workload and driving up costs.
Rebuilding the integration to connect it directly to the central customer master data repository (MDM), the source that guarantees a customer exists only once across the organization: an event-driven architecture consuming customer and contract events, processed by versioned handlers able to evolve without breaking compatibility with existing events; an asynchronous, idempotent synchronization mechanism to the compliance platform, isolating external calls from database transactions to prevent any blocking; and an initial-load process able to absorb massive volumes of historical data without degrading performance, a necessary condition to retroactively clean up the duplicates already present.
Elimination of more than 6 million duplicates and of new duplicates generated by future subscriptions, improved reliability of the data used by compliance teams to identify at-risk customers, and a 50% reduction in operating costs tied to this integration.
A metropolitan transit authority launched a major program to modernize its regional fare collection: replace the existing system, simplify access to public transit for all riders and lay the foundations of an integrated mobility-as-a-service (MaaS) offering.
Enterprise-grade application services: cloud solution architecture and technical roadmap, development of the transactional web portal and of the reduced-fare application (seniors, students) compliant with accessibility standards, data migration to a modern cloud infrastructure, and technical guidance of the teams on engineering best practices.
The proposed delivery approach was a progressive rollout: launch first with riders aged 65 and over, the segment with the most to gain, before extending the solution to other eligibility categories (students, minors) and, eventually, to other transit authorities.
A secure, multi-tenant SaaS platform that validates a person's identity and eligibility and processes a transit-card request entirely online, with no visit to a service centre required. A progressive rollout delivered value to users quickly, who can now renew their card without ever having to travel to a service centre, thanks to a fully electronic identity check, reaching 2 million trips per week with an enhanced experience.
A growing network of 15 private clinics had launched a digital transformation program to modernize its accounting, inventory and medical-support systems.
Development of a modern web billing platform integrated with the accounting system: needs analysis, API integration, migration of data from legacy systems and near-real-time synchronization to eliminate manual re-entry, on a scalable cloud architecture.
Reduced double entry, a modernized experience for front-line teams, strengthened financial accuracy and an architecture aligned with the growth strategy. The platform now processes more than 250,000 transactions per year.
An international NGO depended on a critical 735,000-line accounting application, maintained by a single developer and without source control. The sustainability risks were major.
The classic temptation: rewrite everything. We instead recommended understanding, stabilizing and modernizing progressively, at a fraction of the risk and cost.
In-depth source code study and reverse engineering, architecture and security risk analysis, complete documentation, stabilization and fixes, then a progressive, realistic and safe modernization roadmap (source control, continuous integration, governance).
A clear view of the risks, a prioritized mitigation plan, a stabilized application and upgraded internal practices. Sustainability secured without a rushed rewrite.
A major retail chain operates a highly integrated digital ecosystem: more than 200 satellite systems, a hybrid cloud and on-premises environment, under strict PCI compliance constraints.
Modernization, stabilization and continuous evolution of the e-commerce platform and inventory management: secure development, integration of points of sale with back-end systems, quality governance, automated and performance testing, controlled delivery.
Increased robustness and performance, reduced technical debt, and proof that a critical, highly interconnected system can evolve for years without service interruption.
A wood-products manufacturer wanted to modernize its operations by centralizing the management of orders, customers and transport, until then scattered across manual processes.
Design, development and implementation of an integrated management system: order, customer and transport management, digitization of sales and logistics processes, testing, support through user acceptance and go-live, with continuous follow-up and optimization.
Centralized, structured management, better logistics traceability and a tool that became central to the company's daily operations.
Let's start with an honest diagnostic of your architecture.