Joshua Ermert

Full-Stack & AI Engineer

Responsible, Governed AI · Human-in-the-Loop · Source-Verified Knowledge Systems

I'm a recent graduate focused on responsible, governed AI — human-in-the-loop systems with verified source-grounding and anti-fabrication discipline, backed by the secure full-stack engineering to ship them. I turn unstructured information into structured, source-verified, queryable knowledge. Everything below is something you can open, run, or read.

Joshua Ermert

About

I work both sides of the decision: the analytics that turn fragmented data into answers, and the secure engineering that puts those answers into production.

Education
B.S. Management Information Systems, CS minor — honors, cum laude. San Diego State University, Weber Honors College. Graduated May 2026.
Focus
AI & LLM integration · data analytics · secure full-stack delivery · operational decision-support.

My path into this wasn't a straight line, and that's where the value is. It began in defensive security: an NSA/NSF-funded cybersecurity camp at the University of San Diego, then a cyber-security internship with the City of San Diego. That foundation — thinking about how a system fails before thinking about how it ships — never left.

At San Diego State I layered a Management Information Systems degree with a Computer Science minor and an interdisciplinary Honors track. MIS taught me how systems serve a business, Computer Science gave me the depth to build them, and the Honors work kept both grounded in how real people actually use what I make. A 250-hour design internship in Rome added the part most engineers skip: how a system communicates its purpose is part of the engineering, not a coat of paint.

From there the work moved into data and AI. As an independent consultant I built governed-AI knowledge systems for private clients — turning unstructured professional expertise into searchable, source-verified, traceable research and operations libraries, with a human reviewer in control of every decision. A CDC public-health analytics project sharpened the statistical side — model comparison, honest evaluation, knowing when a headline number is misleading. A commercial-operations and AI-solutions internship at Celltrion put it to work inside a regulated environment: Power BI decision-support dashboards and an Azure OpenAI integration plan with human-in-the-loop review. Graduate-level reinforcement-learning coursework taught me to trust a design only after it survives adversarial validation.

What ties it together is one pattern I keep applying: take fragmented, unstructured information and turn it into governed, source-verified, queryable knowledge that stays dependable under real, messy use — with a human in the loop and an anti-fabrication discipline that refuses to invent what it can't cite. I'm equally comfortable surfacing the insight and architecting the governance layer that makes it trustworthy — and I hold all of it to a single rule: everything you see here, you can open, run, or read.

Work

Every status is exact — never rounded up.

Secure-by-construction web apps

Security here means specific, checkable things — not a credential I don't hold. This very site ships strict HTTP security headers and a per-app Content-Security-Policy, keeps zero secrets in the client bundle, and is deliberately inert (no database, no auth, no custom server route) to remove whole classes of vulnerability rather than patch them. Where input does exist, it's validated at the boundary.

LLM integration as governed decision-support

I wire LLMs into real workflows the way you'd run a system you're accountable for: outputs grounded in verified sources rather than left to fabricate, model output treated as untrusted, an explicit tool allowlist instead of arbitrary calls, a human in the loop for anything irreversible, and a design that keeps behavior predictable under real, messy use — not just in the demo.

Full-stack delivery & CI/CD

Front-end through deploy: typed React / Next.js interfaces, automated pipelines (GitHub Actions running lint, tests, build, and secret scanning), and supply-chain hygiene — pinned dependencies, lockfile-enforced installs. The projects below show the range end to end, not just the front of it.

Validated Research Library — architecture diagram: unstructured expertise structured into a source-verified, validated, queryable library, with end-to-end traceability.Validated Research Library

Validated Research Library

Independent consulting · delivered

A governed-AI knowledge system turning unstructured expertise into a source-verified, queryable library.

  • LLM orchestration
  • Source-grounding & traceability
  • Per-record metadata schema
  • Human-in-the-loop review
  • Validation suite
Details
Governed Operations System — architecture diagram: conversation history mined into a routed, queryable corpus (voice profiles, decision rules, records) with a human-in-the-loop commit gate.Governed Operations System

Governed Operations System

Independent consulting · delivered

A queryable operations knowledge library for a small-business client, with a human committing every change.

  • LLM orchestration
  • Conversation-corpus mining
  • Request routing
  • Controlled structure
  • Git-based tuning
Details
AlignFlow architecture diagram: multiple data sources reconciled through fuzzy matching into a master record, then impact scoring, producing unified trusted data.AlignFlow

AlignFlow

Design-stage prototype

A multi-source data-quality / master-data-management engine for reconciling records into one trusted view.

  • Python
  • pandas
  • fuzzy matching
  • Excel ingestion
  • Power BI
Details
CDC diabetes-risk analytics diagram: public-health data through three models and a held-out test to per-class evidence and a high-risk signal.CDC Diabetes-Risk Analytics POC

An academic ML proof-of-concept classifying three-class diabetes risk on a large CDC public-health dataset.

  • R (nnet, class, rpart)
  • Python (pandas, matplotlib, python-pptx)
Details
mediCalm — screenshot of the running appmediCalm

A beta, safety-bounded health PWA.

  • TypeScript
  • React 18
  • Vite
  • PWA (installable)
  • Vitest + Playwright
DetailsLive demo To verify
jacques

jacques

Shipped · full CI/CD

A client-side React music-artist site — one shared audio engine, a persistent player, album program-notes, and live dates.

  • React 19
  • Vite 8
  • Tailwind CSS 3
  • Vitest + Testing Library
  • GitHub Actions CI/CD
  • Vercel
DetailsLive demoSource To verify
VocaLattice wordmark — the project name set over a glowing audio waveform.VocaLattice

VocaLattice

Local CLI · v1.0

A local-first audio-ML pipeline for vocal processing.

  • Python
  • Demucs (stem separation)
  • RVC
  • pedalboard
  • pyloudnorm
  • pytest
DetailsLocal CLI To verify

Experience

Independent AI Consultant

Independent AI Consultant (2025 – Present) — building governed, source-grounded AI knowledge systems for private clients in two domains.

  • For a physical-therapy professional: a validated research library that turns unstructured expertise into searchable, source-verified, traceable records — a 30-day production run with 100+ deliverables, 28 source-verified citations, zero fabricated references, under human-in-the-loop review.
  • For a small-business client: a governed operations system — a layered private corpus surfaced through a routed assistant that recommends actions while a human commits every change.
  • System architecture is my IP; client content is confidential and not shown — the two systems are detailed in Work above.

Celltrion

Commercial Operations, Data Analytics & AI Solutions Intern (summer 2025) — built the analytics and decision-support layer for a commercial-operations team.

  • Built Power BI observability dashboards tracking commercial-operations KPIs across territory alignment, anomaly detection, and escalation workflows.
  • Developed an Azure OpenAI integration plan for AI-assisted operational analytics, with secret handling and human-in-the-loop review gating.

Iperdesign

Rome, Italy

UX/UI Design Intern — a 250-hour international internship in Rome, Italy (summer 2023).

  • Designed and built three client websites in WordPress and Figma.
  • Reviewed and updated English-language content across the firm's site and a client presentation, applying editorial QA for clarity across language audiences.

City of San Diego

Cyber Security Intern (2022) — defensive-security fundamentals and cohort learning operations.

  • Completed Linux lab exercises and cybersecurity fundamentals training, covering defensive primitives, command-line administration, and networking fundamentals (TCP/IP, DNS).
  • Coordinated mentorship sessions and weekly technical activities across the intern cohort, including explaining concepts to non-technical learners.

Education

B.S. Management Information Systems, CS minor — honors, cum laude. San Diego State University, Weber Honors College. Graduated May 2026.

By conversation

There's a deeper layer best seen in conversation

I've also built and run real, governed LLM systems for two paid clients in very different domains — an independent physical-therapy professional and a culinary operation. The systems I engineer turn each client's unstructured expertise into a validated, queryable knowledge library, with source-grounded outputs and a human reviewer in control of every decision. The system architecture is my work; the clients' content is theirs — so these are described here, never quantified or linked. I'm glad to walk through the architecture and the reliability engineering in a conversation.

Contact

The simplest path is best. A first message can just be “let's talk” — tell me the role and what you're building, and that's plenty to start.