Principal · Systems, Security & Technical Delivery
Kurt Wiedenhoeft
On an engagement
Infrastructure, security, EMR modernization, and agent-built software under human controls
Runs the technical sessions
Working sessions with the client’s engineers, architects and vendors on how the systems are built, where the work flows, and where it breaks down. Findings are written in technical terms the client’s own engineers can act on.
Builds and operates what the findings call for
Prototypes, integrations, migrations and the infrastructure under them, carried out by his team and verified before delivery. Clients keep working systems and the records that show they work, not a slide about them.
Writes the controls
Tiers of authority that apply to people and agents alike: what an agent may do on its own, what it may draft for a person to approve, and what remains a human decision. The same tiers have governed work on a production health record since early 2026.
Record
Current and recent work, described without client names.
Replacing a system of record while it stays in production
Leads the ground-up rearchitecture of a fifteen-year-old electronic health record used daily across a multi-center medical group: ASP.NET and SQL Server to Django, PostgreSQL and React, single sign-on migration for the existing users, X12 834 payer-eligibility pipelines, and a staged live cutover. Most of the new system is built by software agents working from written specifications, with independent review gates and a named person at every production step.
Agentic engineering operations
Designs and runs the build fleet behind that work: ticketed agent builders, automated and human review, a control plane for the tools agents may use, and per-agent observability. The discipline is the one Social Enterprise Advisors uses in its own operations and offers in engagements.
Production infrastructure for a regulated system
Multi-site colocation virtualization, a green and blue zero-downtime deployment pipeline, metrics and error-tracking observability, segmented networking with a site-to-site VPN mesh, and layered encrypted backup across disk, offsite object storage and tape, all serving a HIPAA-regulated production record.
AI under data constraints
Stood up dedicated on-premises GPU inference for workloads that carry personal information, in preference to third-party APIs, so that the data never leaves the covered boundary. The same custody-over-pooling posture shapes the AI governance work the practice does with clients.
Independent implementation of a consent specification
Ran the independent build lane that implemented the consent-gate specification of KISOP, Carmen Wiedenhoeft’s public-domain work on person-owned health records, from the written specification alone and in parallel with the reference implementation. The second implementation passed integration testing against the first, which is the evidence that the specification could be built without its author.
Certifications a clinical system had to pass
Wrote the original electronic health record for the same medical group in 2000 and led the platform through NCQA Patient-Centered Medical Home recognition and ONC Health IT certification.
Earlier
- Co-founder and president of Scholars Resource (2005 to 2007), with Carmen Wiedenhoeft: built the commerce platform for a marketplace licensing museum content to hundreds of colleges and universities.
- Senior web developer and team lead at Mortgage Systems International (2000 to 2004): loan-origination and broker-pipeline systems for lenders in the United States and Argentina.
- Consulting web development in New York for Scholastic and others; team leader for Windows NT and internet engineering groups in Denver; ISP network administration.
- Built one of the web’s first job-search engines in 1995, with a desktop package employers used to submit listings before they were online.
Credentials
- Computer science coursework, University of Colorado at Boulder.
- Engineering certifications from Microsoft, Bay Networks, Novell, and others.
- President of Social Enterprise Advisors; with Carmen since its founding in 2007.
Discuss your next priority.
Tell us what needs attention. In a 30-minute introduction, we’ll discuss your situation, relevant engagements, and possible next steps.