--:-- Vancouver

Work

Infrastructure, networks and IT leadership

A career spent mostly inside other organizations' IT: national health agencies, research funders, defence, film studios, and a multinational spread across Europe, North America and Asia. The common thread is infrastructure that holds up and teams that know how to run it.

IT Infrastructure Architect

Hybrid cloud, virtualization, identity and storage designed to stay up: planned for growth, built for failure, and documented so the next person can run it.

  • vSphere 8
  • Hyper-V
  • Azure
  • Entra ID
  • Windows Server 2025
  • HA clusters

Enterprise Network Engineer

Multi-site networks from the switch port to the firewall: routing, VLANs, site-to-site VPN, wireless and voice.

  • Cisco Secure Firewall
  • Meraki
  • HPE Aruba
  • WatchGuard
  • UniFi
  • Teams Phone

Executive IT Leader

Strategy, budget, vendors, risk and people. Sitting with leadership to pin down what the business actually needs, then making sure it gets built.

  • IT roadmaps
  • Virtual CIO
  • Vendor management
  • Security posture
  • AI governance

Career

  1. Independent IT consulting
    2026–now

    Cloud, security, AI and SaaS rollouts for organizations that want senior help without a full-time hire.

  2. Corporate IT and cloud architecture
    2023–now

    Enterprise infrastructure, Microsoft 365 and security leadership for a national health agency and an animation studio.

  3. Managed services and virtual CIO
    2012–2023

    Infrastructure, cloud migrations and IT strategy for dozens of organizations, some spread across 26 countries.

  4. Web and software development
    2007–2012

    Accessible websites and applications for the federal government, national museums and an arts festival.

  5. IT services, cabling and commercial AV
    2003–2012

    Founded and ran an IT services company for businesses and homes: networks, hardware installs, cabling and web hosting, then commercial AV system design and installation.

  6. School IT and LAN parties
    1998–2003

    Kept school computers running across Halifax and ran charity LAN parties on networks built from scratch.

The day-to-day toolkit, grouped the way the work actually splits.

Microsoft 365 & Azure22

  • Entra ID
  • Exchange Online
  • SharePoint Online
  • Teams
  • Teams Phone
  • OneDrive
  • Intune
  • Microsoft Defender
  • Defender for Identity
  • Defender XDR
  • Purview
  • Information Protection
  • Conditional Access
  • Microsoft Compliance
  • Copilot
  • Power Automate
  • Power Platform
  • Entra Connect
  • Azure Virtual Desktop
  • Azure
  • Microsoft Deployment Toolkit
  • Autopilot

AI & agents20

  • Claude
  • Claude Code
  • Microsoft 365 Copilot
  • Copilot Studio
  • Azure OpenAI
  • OpenAI API
  • ChatGPT
  • Gemini
  • Ollama
  • Qwen
  • Local inference
  • Model Context Protocol
  • Agent orchestration
  • Retrieval over tenant data
  • Prompt libraries
  • Microsoft Graph API
  • Otter.ai
  • Transcription & summarisation
  • Evaluation & guardrails
  • Data boundaries

Servers, directory & messaging17

  • Windows Server
  • Active Directory
  • Group Policy
  • Exchange Server
  • Hybrid Exchange
  • DNS & DHCP
  • Certificate Services
  • Failover clustering
  • Hyper-V
  • Linux
  • CentOS
  • RHEL
  • Ubuntu Server
  • Debian
  • Bash
  • PowerShell
  • Microsoft Entra Connect Sync

Virtualization, storage & backup16

  • VMware vSphere
  • vCenter
  • vSAN
  • VMware HCI
  • DRS & HA clusters
  • Hyper-V
  • HPE ProLiant
  • HPE MSA & Nimble
  • Dell PowerEdge
  • Enterprise SAN
  • Fibre Channel
  • iSCSI
  • Storage controllers
  • Veeam
  • Azure Backup
  • Site recovery & DR

Networking & firewalls19

  • WatchGuard Firebox
  • WatchGuard FireCluster
  • FortiGate
  • Cisco ASA
  • Cisco Meraki
  • Cisco Catalyst switching
  • HPE ProCurve / Aruba switching
  • Ubiquiti UniFi
  • VLAN design
  • Layer 3 switching
  • BGP & OSPF
  • SD-WAN
  • IPsec & SSL VPN
  • Site-to-site VPN
  • Wireless mesh & controllers
  • QoS
  • NAT & policy routing
  • Network monitoring
  • Structured cabling

Security & forensics25

  • Vulnerability assessment
  • Penetration testing
  • Qualys
  • PCI DSS readiness
  • Managed detection & response
  • 24/7 security monitoring
  • Firewall clustering
  • Intrusion prevention
  • Email & spam filtering
  • Endpoint detection
  • SIEM
  • MFA rollout
  • Zero trust
  • Privileged access
  • Data loss prevention
  • Encryption & PKI
  • Threat intelligence
  • Ransomware mitigation
  • Vulnerability management
  • Kill-chain analysis
  • Cybercrime investigation
  • Data-loss analysis
  • eDiscovery & legal hold
  • Pen-test remediation
  • Awareness training

Web, hosting & applications34

  • Apache
  • Nginx
  • PHP
  • MySQL
  • MariaDB
  • cPanel / WHM
  • VPS & shared hosting
  • WordPress
  • Drupal
  • Shopify
  • Square Online
  • HTML
  • CSS
  • JavaScript
  • Node.js
  • Static site generators
  • Cloudflare
  • Cloudflare Workers
  • CDN & edge caching
  • DNS architecture
  • TLS & Let’s Encrypt
  • SPF, DKIM & DMARC
  • Core Web Vitals
  • Lighthouse
  • Technical SEO
  • Schema & structured data
  • Search Console
  • GA4 & analytics
  • Information architecture
  • UI design & design systems
  • Responsive design
  • WCAG 2.2 AA
  • CI/CD
  • Git

Management & business platforms14

  • N-able N-central
  • ConnectWise
  • RMM & MDM
  • Apple Business Manager
  • Salesforce
  • Monday.com
  • Planner
  • Telus Business Connect
  • Migration tooling
  • Licensing optimization
  • Document management
  • Identity governance
  • Workflow automation
  • Asset & lifecycle tracking

Start a conversationOrganizations I’ve supported

NextPractice