Sole IT owner across two operating entities. The interesting work is hardening operations and tightening controls – building a stack that's secure by default, not by reaction.
My foundation is in engineering. It taught me to think in structures, constraints, and repeatable processes. That mindset led me into IT, where I found the opportunity to turn complexity into clear, dependable systems.
I began that journey at 1Rivet, a US-based IT consultancy, where I moved from operations into IT and DevOps. I worked across Microsoft 365 and SharePoint administration, tenant migrations, and delivery pipeline automation using Jenkins and Ansible. That was where a core principle of my work became fixed: if a task repeats, it should be systemised.
In 2019, I moved to London to complete an MSc in Information Systems. My dissertation focused on early diabetic retinopathy detection using TensorFlow in Google Colab. It gave me hands-on experience applying machine learning to a real clinical problem, with a focus on detection at a stage where treatment can still make a difference.
I joined Hydro Cleansing in February 2022 as an IT Technician. In June 2024, I stepped into full ownership of the IT function. Today I manage identity and access, endpoints, security, networking, vendors, and day-to-day support for around 80 users and more than 100 devices. I run the function end to end, with an emphasis on clarity, documentation, stability, and systems that work quietly in the background.
Broke into IT from operations. Supported CI/CD pipelines with Jenkins, Ansible, Git and Nexus; handled M365 provisioning and SharePoint admin at scale; trained 50+ interns on source-control fundamentals.
Moved to London and studied through Covid. My dissertation trained a TensorFlow model in Google Colab to detect diabetic retinopathy early – my first real, hands-on machine-learning project, years before the current AI wave.
Joined on a Graduate visa. Delivered L1–L3 support across hardware, software, and M365, and took on Azure AD and Intune administration. Earned employer-sponsored Skilled Worker status in 2023 as my scope grew.
When my manager left, I took the whole function. I own infrastructure, identity, security, and endpoint management across two operating entities, running a fully cloud-native estate on Entra and Intune. Delivered Cyber Essentials Plus solo and migrated the company to a new phone system. Also manage vendors, support developers, and line-manage a small team across IT, design and social media.
A shared contact directory for the whole business, published as a live feed every desk phone reads on its own. Designed in the browser, built in React and TypeScript, deployed on Azure — one person, design file to production.
Moved the business off an unreliable phone system onto RingCentral without a single minute of downtime – 99.999% call uptime since – and gave operations a platform they can finally count on.
Took the organisation through Cyber Essentials Plus – the audited tier – and passed the hands-on assessment across the estate. Underneath it: Conditional Access, MFA enforcement, exception handling and break-glass accounts, all hardened, documented and audit-ready.
Retired on-prem Active Directory in practice and moved 100% of the Windows estate, plus ~30 mobile devices, onto Microsoft Intune with Autopilot. Then unified sign-on across every cloud app – Microsoft 365, Google Workspace and Apple work accounts – as Google admin alongside Azure AD: one identity, one set of controls.
Run the full UniFi estate – access points, firewall rules, VLANs and segmentation across sites – and improve it incrementally as the business grows, keeping the network fast, segmented and reliable.
Onboarding, offboarding, and access provisioning turned into SOPs and PowerShell-backed playbooks – the right access granted and revoked to a standard, documented, and no longer dependent on any one person.
Built the costing calculator in Excel – working with AI to get the logic right – to price the business's services. It worked well enough that the development team rebuilt it into an internal app and integrated it with Claude.
At 1Rivet, supported tenant-to-tenant moves across Microsoft 365 – mailboxes, SharePoint, OneDrive and identity – alongside provisioning and licence administration for a large user base, kept controlled and documented.
Own procurement, supplier relationships, renewals and licence management for core IT services across two entities – negotiating contracts and making the cost decisions, with spend kept lean and accountable.
When my manager left in June 2024, I took the entire IT function for two operating entities – infrastructure, identity, security, networking, vendors and support – with no gap in service. I also began line-managing a small team across design, social media and IT admin, and supporting the development team. I also run onboarding trainings for new starters.
I own a cloud-native Microsoft estate end to end – Entra ID, Intune, Conditional Access, Exchange Online – and delivered Cyber Essentials Plus as sole IT owner. I'm now moving deliberately into security architecture and governance, building toward the credentials and depth to own a security function.
Deepening identity and access governance across the Microsoft stack – Conditional Access, least privilege, auditable controls. (SC-300, booked August.)
Moving from operating the estate to architecting it – threat modelling, defence in depth, designing controls rather than just running them. (SC-100, CISSP.)
Building toward GRC ownership – frameworks, audit, and the leadership side of keeping an organisation secure. (CISM horizon.)
My direction is to own a security function end to end – the architecture, the governance, and the risk decisions behind a stack that stays safe and well run.
I build and secure systems, and I own the result. I'm heading into security architecture and governance – let's talk if that's the kind of person you need.