About
Who you're actually hiring
I'm Tim Lyons. I started Nubivance because I kept running into organizations that had been sold something complicated when what they needed was someone to sit down, look at what they actually had, and tell them the truth about it.
That's most of what this practice is.
Prefer email or phone? info@nubivance.com or 207-358-0999.
The work behind it
Most of my career has been spent in cybersecurity, cloud infrastructure, and the unglamorous work of keeping systems running when it matters. For eight years I led technology and security programs inside a state transportation agency - the kind of environment where a bad afternoon ends up on the evening news, and where procurement rules, public accountability, and budget constraints are as much a part of the job as the architecture.
Alongside that I've advised Fortune 500 companies, led projects across borders, built security operations from nothing, and spent a lot of time mentoring engineers who needed a map more than they needed instruction.
The through-line is that I've done the work I'm advising on. Not read about it. Done it, in production, with something real on the line.
A small practice, on purpose
When you hire Nubivance, you get me. Not a junior consultant working from a template with a senior name on the invoice.
That means the range of work is wider than most consultancies would admit to. In a given month I might design a multi-account AWS landing zone for an organization with a real engineering team, and then sit in a town office explaining to a select board why their backups don't actually work. Both of those matter. Both get the same person.
It also means I'll tell you when something isn't a fit. If what you need is smaller than what I do, or bigger, or just not my strength, you'll hear that instead of a proposal.
What I believe, so you know whether we'll get along
Security that slows delivery down gets routed around. Controls belong in the architecture, where the secure path is also the fast path. Policy that fights the deadline loses to the deadline every time.
If your infrastructure lives in someone's head, you don't own it. Everything should be written down, versioned, and repeatable - so the practice you hire can eventually leave without taking the knowledge with it.
You should know what something costs before you commit to it. Fixed scope, fixed price, quoted in writing. No meter running.
Handoff is the point. The goal is a team that owns the result, not a consultant who becomes load-bearing.
Credentials
CISSP. AWS Partner. Rapid7 Certified Partner.
Nubivance is also a General Member of ARIN, the American Registry for Internet Numbers - the organization that allocates IP address space and autonomous system numbers across North America. We hold a direct IPv6 allocation and our own ASN (AS402598), with RPKI route origin authorizations in place. I cast Nubivance's vote in ARIN elections.
That is an unusual thing for a consulting practice to bother with. It matters because it means the infrastructure advice comes from someone who operates at that layer, not just someone who rents space on top of it. When a conversation turns to routing, addressing, or how traffic actually reaches your systems, it isn't theoretical.
Nubivance Consulting LLC is a Maine S-Corporation, registered with SAM.gov, Maine VSS, New Hampshire DAS, and COMMBUYS, with a distributor relationship through Carahsoft.
Where I am, and what else I do
I live and work in Brownfield, Maine, in the western foothills near the New Hampshire line. Most of the work happens remotely, but for clients in western Maine, the Mount Washington Valley, greater Portland, and the New Hampshire Seacoast, I'll come sit at your table.
I also build and publish OSINTSights, a cybersecurity news and analysis site running on a custom pipeline I wrote myself. It's partly a public service, partly how I stay current, and partly because I like building things.
Start a conversation
Describe what's going on in a couple of sentences using the contact form, or email info@nubivance.com or call 207-358-0999 if you prefer. You'll get a straight answer about whether I can help.
Working out what you need? See small business security, cybersecurity for small towns, or the full list of services.