Portfolio
Work spanning cloud infrastructure, identity & security, and automation — across enterprise employers and personal projects.
Infrastructure & Cloud
Rackspace, 2018–2023
- Ran day-to-day operations on a 15,000+ host, 80,000+ VM estate across EMEA, APAC and the Americas.
- Delivered repeatable, compliance-aligned IaaS on Terraform across Azure, GCP and VMware.
- Designed and regularly tested disaster recovery and business continuity with Zerto across VMware data centres.
- Built monitoring, dashboards and automation in vRealize Operations and Automation (vROps/vRA); consolidated storage on vSAN.
- Promoted within the LATAM teams for critical-incident leadership.
Telcel, 2016–2018
- Secured access provisioning by orchestrating SSO with Active Directory and Group Policies.
- Managed VMware vSphere, vCenter, vROps and vRA.
- Evaluated OpenStack and RHV platforms during enterprise virtualisation assessments.
Security & Compliance
MEG, 2025–present
- Configured group-based SAML SSO and SCIM provisioning against Active Directory and LDAP, automating provisioning and de-provisioning.
- Administered Django permission groups (1,200+ permissions each, multi-institution scoping) and rolled out passkey authentication and BitLocker recovery.
- Contributed to ISO 27001, 9001 and 42001 programmes and HSE/NUH security reviews.
MEG, 2025–present
- Ran a simulated phishing campaign across 88 recipients (17% click rate), routed into follow-up training.
- Led the VPN replacement, benchmarking zero-trust network access vendors against a self-hosted Pritunl proof of concept built on AlmaLinux.
- Ran SSO, SCIM and SOC 2 reviews on vendor tools to settle buy decisions.
Automation & Integration
MEG, 2025–present
- Built a workflow pulling Xero data through Google Drive and Gmail, drafting chase emails with Gemini for review.
- Authored MEG's first company-wide AI Tool Guidelines policy, now referenced in ISMS work.
MEG, 2025–present
- Turned laptop lifecycle assessment from a manual audit into a one-command report across 72 devices with a PowerShell collector script.
- Stood up Device Enrollment Alerts in Google Workspace to cut the lag on new-device risk.
Personal project
- Self-built dashboard for visualizing and managing Redmine project data, built on personal time.
Skills matrix
Identity & Access Management
PAM · SSO · SAML · SCIM · LDAP · Active Directory · Google Workspace · Microsoft 365 · zero-trust / least-privilege · passkeys
Security & Compliance
ISO 27001 · ISO 9001 · ISO 42001 · SOC 2 · Vanta · ISMS · phishing simulation · BitLocker · NHS/HSE security checklists
IT Operations & Service Management
ITIL · incident & change management · hardware & device lifecycle · endpoint enrollment · asset register · IT support ticketing
Cloud & Virtualisation
Microsoft Azure · Google Cloud (GCP) · AWS · VMware (vSphere / vSAN / vRealize) · Terraform (IaaS) · Zerto disaster recovery
Scripting & Automation
PowerShell · Python · Bash / Linux shell · n8n · Google Apps Script · Django admin · Gemini AI integration
Leadership & Delivery
vendor evaluation & procurement · stakeholder management · cross-functional collaboration · mentoring · postgraduate lecturing