Langhorne, PA (Greater Philadelphia Area) | 215-499-7131 | dan@giacomelli.com | https://linkedin.com/in/giacomelli
Principal Enterprise Architect with cross-domain experience spanning business architecture, process, data flow, applications, infrastructure, cloud, identity, security, GRC, and ITSM. Leads modernization by translating operating needs into scalable architectures, governance models, roadmaps, and execution plans that improve control maturity, reduce complexity, and move teams from reactive support to proactive operations. Applies structured architecture methods, PMP delivery discipline, and ITIL/ITSM operating practices to connect people, process, technology, risk, service ownership, and operational accountability. Current focus includes enterprise modernization, AI-enabled systems, LLM governance, Responsible AI, and practical control models for secure, scalable, and supportable adoption.
- Architecture: Enterprise Architecture, Business Architecture, Process Architecture, Solution Architecture, Application Architecture, Technical Architecture, Infrastructure Architecture, Data Flow Architecture, TOGAF, Catalyst
- Security & GRC: NIST CSF, NIST AI RMF, ISO 27001, SOC 2, COBIT, CIS Controls, PCI, HIPAA, TX-RAMP, Audit Readiness, Risk Management, Policy & Standards, Vendor Risk
- AI & Data: AI Governance, LLM Systems, Agent-Based AI, Responsible AI, Context Engineering, Agent Harness Engineering, RAG-informed Patterns, Data Governance
- Cloud & Platforms: Microsoft 365, Azure, AWS, IAM, Entra ID, OT/SCADA, ITSM, DevSecOps
- Leadership: Program Leadership, PMP, Stakeholder Alignment, Operating Models, Modernization Roadmaps, Cross-functional Execution
Principal Enterprise Architect specializing in aligning business architecture, people, process, and technology to deliver governed, scalable, and executable outcomes across enterprise environments.
My work sits at the intersection of business and technology architecture, IT leadership, security, GRC, and modernization. I am most effective where ambiguity, competing priorities, organizational friction, or control gaps are slowing progress and leaders need practical structure, clearer decisions, and outcomes that hold through execution.
Grounded in business architecture, I translate operating needs into people, process, and technology requirements supported by conceptual, logical, and physical models. I use architecture, governance, and decision-ready diagrams as practical tools to expose dependencies, clarify tradeoffs, strengthen alignment, and help teams move from reactive effort to more proactive, supportable operating rhythm.
I take a people-first approach. Technology matters, but most hard problems are rooted in leadership alignment, accountability, process, risk, priorities, budget, or organizational dynamics rather than in tools alone. My style is hands-on, structured, and cross-functional, with a consistent focus on making the invisible visible and turning complexity into practical direction.
Across healthcare, education, insurance, utilities, consulting, and service-intensive environments, I have led and supported work spanning business and technology architecture, governance, risk, compliance (GRC), infrastructure, cloud, identity (IAM), ITSM, OT/SCADA, HIPAA/HITECH, delivery leadership, and Responsible AI governance. I am known for reducing ambiguity, improving control maturity, mentoring teams, and translating complexity into operating models, roadmaps, and measurable progress.
Core areas include business and technology architecture, security and GRC, modernization, policy and standards, audit readiness, cloud alignment, identity and access management, data governance, IT and security governance, and Responsible AI enablement.
Recent work includes AI governance, agent-based systems, and LLM-enabled solutions focused on improving reliability, control, and practical enterprise adoption.
- Conceptual, logical, and physical architecture modeling that makes complexity executable
- System, data, and identity mapping across business and technology domains
- Current-state to future-state roadmaps that connect architecture to delivery sequencing
- Cloud, identity, segmentation, and security patterns for regulated environments
- AI-enabled architecture: safe integration patterns for data flows, access boundaries, and platform services
- Visual modeling and “decision support diagrams” for executives and cross-functional teams
- Translating business intent into technical models that teams can build and operate
- Builds governance that operates: policies to controls to evidence, on a predictable cadence
- Translates frameworks into execution (PCI, NIST, HIPAA, SOC 2, HECVAT, TX-RAMP) with embedded technical controls
- Establishes risk-based prioritization and modernization sequencing for highest-risk, highest-value.
- Creates audit-ready artifacts and operating rhythms that scale across teams and vendors
- Drives modernization programs across cloud, infrastructure, identity, and security with measurable risk reduction
- Extends governance discipline to Responsible AI: use-case intake, risk gating, vendor oversight, and documentation that stands up to review
I lead with structure and outcomes. I start by mapping the current state (people, process, technology, risk), define a practical future state, and build a roadmap that teams can execute. My work style is visual and decision-driven: I use architecture models to align stakeholders, expose dependencies, and translate requirements into buildable, audit-ready solutions. Whether I’m leading modernization, GRC, or AI initiatives, I focus on repeatable governance, measurable risk reduction, and delivery cadence that sticks. My approach is grounded in formal enterprise architecture methods and years of leading cross-functional delivery in complex environments.
Architecture is not something I do. It is how I think.
- Designed and executed enterprise and solution architectures that aligned business, security, and technology teams around a single future-state model and delivery roadmap.
- Established governance and evidence cycles that reduced audit friction and enabled continuous compliance across regulated environments.
- Led modernization initiatives spanning cloud, infrastructure, identity, and security with measurable risk reduction and operational readiness improvements.
- Built and operationalized GRC programs that embedded controls into day-to-day operations rather than treating compliance as a periodic event.
- Guided AI initiatives from intake through implementation with risk-aware architecture, governance guardrails, and audit-ready documentation.
- Acted as the connective tissue between executives, engineers, security, and delivery teams to move complex initiatives from intent to execution across multiple business units.
Organizations bring me in to create clarity and momentum in complex, high-risk initiatives. My typical engagement includes:
- Assessing current-state architecture, risk posture, and operating model
- Defining future-state models and prioritized roadmaps
- Establishing governance and delivery cadence across teams
- Partnering with executives and technical leaders to drive alignment
- Staying engaged through execution to ensure outcomes hold
- Producing decision-ready models and diagrams that make tradeoffs visible and execution measurable
I deliver the most value in environments with aligned leadership, clear accountability, and a culture that values clarity, integrity, mentorship, and continuous improvement. Best fit: roles with real scope where architecture-first governance and modernization translate into measurable outcomes.
- AI use-case intake and prioritization with risk-based gating and business alignment
- Responsible AI governance: policy, controls, model risk, vendor oversight, and audit-ready artifacts
- AI-enabled architecture patterns: data flows, identity, segmentation, and shared platform services
- Operationalization of AI: monitoring, change control, and evidence trails that hold under audit
- Technology-agnostic AI conceptual frameworks and shared ontology work to standardize language, decision models, and governance across vendors and platforms
- Enterprise Architecture (Solutions, Business, Process, Technical, Infrastructure, Application, Systems, Data)
- Conceptual to Logical to Physical Modeling
- Process Engineering/Reingineering; Data Flow Process Modeling
- Systems Mapping and Modernization
- People Process Technology Alignment
- Governance and Security Architecture
- GRC (ISC2, PCI, NIST, AI RMF, HIPAA, SOC 2, TX-RAMP, ISO)
- Risk Modeling, Remediation, and Management
- Continuous Assurance and Audit Readiness, Transforming Governance from Reactive to Proactive Operations
- IAM, SIEM, SOAR, Log Auditing Alignment
- Cloud and Infrastructure Transformation/Modernization
- Program and Portfolio Strategy
- Hybrid Agile / Waterfall Delivery
- Operational Maturity Improvement
- Incident Preparedness, BC/DR Planning
- AI Architectures and Frameworks; AL Governance and Compliance: Agent Harness, Context, and Prompt Engineering.
- Bachelor of Science, Business Administration (Operations Management) - West Virginia University
- Certifications/Attestations: PMI PMP, ITIL, MCSE, AZ-900, HIPAA/HITECH, PCI DSS, TX-RAMP, ISC2 CC (CISSP in progress)
- Board Member: Middletown Township Parks & Recreation; Efasce di Philadelphia; eCWusers.com Admin.
- Other Certifications: USSF Official, Assignor; AAHA Ice Hockey Official; USABH Official; advocate for youth sports.
- 3rd Degree Master Mason, F.&A.M — committed to integrity, service, and lifelong learning.