Danny Santiago
IT & OT Consultant | Cybersecurity Specialist

About Danny Santiago
Danny Santiago is a seasoned IT and OT consultant with over 20 years of experience helping businesses navigate the complex world of technology. Based in Lewiston, Idaho, Danny brings a passion for technology that transforms the 'what ifs' into tangible solutions.
Core Expertise
- IT & OT Integration - Bridging IT and OT environments
- Cybersecurity - CJIS-certified security for government and enterprise
- SCADA Systems - Industrial control system security and modernization
- AI & Custom Software - Bespoke AI solutions and workflow automation
- Physical Security - Camera systems, access controls, firewalls
- Blueprint Engineering - Technology roadmaps and architecture design
Operating Technology & Industrial Controls
Securing and modernizing the systems that run critical infrastructure — from water treatment plants to manufacturing floors.
SCADA Security & Hardening
- NERC CIP compliance for bulk electric system operators
- Legacy PLCs and RTUs — VLAN segmentation, firewall rules, access controls
- Modbus/TCP and DNP3 protocol security assessment
- HMI and engineering workstation hardening
- Remote access VPN with MFA for field technician connectivity
Industrial Network Design
- Purdue model implementation — Levels 0-5 segmentation
- OT-aware firewall policy design (no random internet exposure)
- Industrial DMZ architecture for enterprise-to-plant data exchange
- Network monitoring with passive OT protocol analyzers
- Wireless industrial (ISA100.11a, WirelessHART) security review
Legacy Equipment Integration
- RS-232/485-to-Ethernet gateway deployment
- Serial-to-modern-protocol bridges for aging PLCs
- OLE for Process Control (OPC) — Classic to OPC UA migration planning
- Protocol conversion for mixed-vendor environments
- Patch management where vendors don't provide updates
Compliance & Auditing
- NERC CIP-002 through CIP-014 audit preparation
- NIST SP 800-82 (Guide to Industrial Control Systems Security) alignment
- ISA/IEC 62443 cybersecurity assessment
- Documentation and network diagramming for regulatory submissions
- Incident response planning for OT environments
AI Development & Custom Software
Building custom AI-powered applications and software solutions tailored to your business workflow — not off-the-shelf tools that don't fit.
Custom AI Applications
- LLM-powered chatbots and internal knowledge assistants
- Document processing — OCR + summarization + classification pipelines
- Predictive maintenance models from sensor and operational data
- Computer vision for quality control and safety monitoring
- Natural language interfaces for existing business systems
AI Rigging & Prompt Engineering
- Structured prompt design for repeatable, reliable outputs
- RAG (Retrieval-Augmented Generation) pipelines over your own documents
- Fine-tuning open-source models on proprietary data
- Agent orchestration — chaining multiple models and tools
- Evaluation frameworks to measure output quality and drift
Custom Software Development
- Full-stack web applications in Python, JavaScript, and Go
- Mobile apps — iOS native and cross-platform
- API design and integration with existing ERP/CRM/HRIS systems
- Workflow automation — replacing manual spreadsheet processes
- Data pipeline engineering — ETL, warehousing, analytics
Blueprint Engineering
- Technology roadmaps aligned to business goals and budget
- System architecture diagrams and documentation
- Vendor selection and technology evaluation
- Implementation planning — phased rollouts with milestones
- Training and knowledge transfer to your internal team