- Bachelor of Computing Systems (BCS)
- Certificate in Architectural Draughting (CAD)
Summary
Highly accomplished IT professional with over 25 years of experience designing, implementing and managing secure, scalable enterprise solutions. Proven track record in optimising infrastructure, cloud, and modern workplace environments to enhance operational efficiency and security. Adept at leading cross-functional teams, driving digital transformation and enhancing security and resilience through well-architected modern technology solutions. Strong expertise in cloud migrations, modern workplace, emerging AI solutions, IT security and governance.
Work History
Oct/2017Present
Senior Technical Lead – Infrastructure & Architecture
Loyalty New Zealand
- Oversight of technical delivery, maintenance, and monitoring of Loyalty NZ’s IT infrastructure to ensure seamless operation and adherence to organisational goals.
- Led the architectural design and technical implementation for key migrations, including Datacenter to VMware on AWS production migration (completed March 2022) and VMware on AWS to full AWS production migration (completed November 2024).
- Designed, built, maintained, and documented infrastructure and cloud services while managing vendor resources for effective execution.
- Collaborated with CIO, Head of IT, other cloud architects, data engineers and consultants to establish and execute strategic plans for Loyalty NZ’s IT roadmap.
- Designed and deployed modern desktop solutions OS upgrades and deployments across Mac and Windows platforms using Intune, Autopilot, Workspace ONE, Jamf, and other MDM tools. Extensive experience delivering modern workplace solutions through Horizon View and Microsoft AVD VDI deployments.
- Led the migration of SCCM workloads to Intune, ensuring a seamless transition for modern device management.
- Extensive experience with Microsoft 365, including Defender, Exchange Online, SharePoint, Teams etc, ensuring secure and efficient collaboration. Skilled in Azure SSO implementation using SAML and OAuth, to enable seamless and secure authentication across enterprise applications.
- Collaborated with the Chief Security Manager to architect and implement technical security solutions, aligning with the organisation's security strategy. Provided technical expertise to translate strategic security goals into practical, scalable solutions.
- Designed, implemented, and configured enterprise security solutions, including email filtering, anti-phishing, antivirus/malware, EDR, and application control. Managed DMARC, SPF, and DKIM to enhance email security and prevent spoofing.
- Worked in partnership with internal teams, managed service providers, and security risk managers to scope projects, review proposals and statements of work, ensure compliance with security standards, challenge inefficiencies in upgrades or implementations, and efficiently minimise business risks.
Dec/2016Oct/2017
Architect
Ministry of Education
- Provided architectural direction, design, and documentation for the ESTI programme, enabling shared hybrid infrastructure and ICT services for sector organisations and Ministry of Education business groups.
- Created Solution Architecture Descriptions (SADs) and associated documentation to support the onboarding of Education Sector agencies to the ESTI platform.
- Conducted analysis and requirements gathering to facilitate datacenter migrations and onboarding processes for sector agencies.
- Developed conceptual migration methods for sector agency datacenters, translating logical designs into actionable technical processes and producing detailed designs for implementation.
- Designed solutions and produced documentation for on-premise and Azure toolsets, including Identity Management, Privileged Access Management (PIM), Advanced Threat Analytics (ATA), Security Information Event Management (SIEM), and Operations Management Suite (OMS).
- Prepared cost estimates, business case documentation, installation guides, run procedure manuals, testing plans, and scripts to ensure service readiness for various cloud-based and on-premise tools and services under the ESTI platform.
Jul/2016 Dec/2016
Solution Architect / Technical Lead
Ministry of Education
- Development and documentation of the Solution Architecture Description (SAD) and associated detailed design for the re-platforming project.
- Comprehensive technical design covering both front-end IIS/UI components and back-end SQL systems, ensuring seamless integration with Ministry student applications and other systems.
- Leadership of the technical implementation team, providing direction to align with Ministry infrastructure, processes, and security requirements.
- Oversight of external vendors managing elements of Ministry infrastructure, including collaboration with Datacom and F5 on relevant solution design aspects.
- Coordination and support for solution penetration testing in conjunction with internal and external security teams, identifying risks, controls, and implementing mitigations where necessary.
- Steering the project through Certification and Accreditation (C&A), including risk assessments related to security/privacy management; guiding one application into production as an interim Project Manager.
Jun/2013 Jul/2016
Senior Systems Administrator
Dimension Data
- Led the design, build, maintenance, support, and documentation of the Ministry of Education's IT infrastructure across two Datacom-managed data centres, Kapua (Production) and Orbit (DR and Pre-Production), encompassing over 100 physical servers and over 2000 virtual servers, appliances, and desktops.
- Contributed as a technical resource for an award-winning server migration project from Wellington to Kapua and Orbit data centres.
- Played a key role in the development and implementation of New Zealand's first two-way Disaster Recovery capability between Kapua and Orbit using VMware SRM.
- Served as architect and technical lead on the Airwatch MDM project for Special Education mobile users, including the design, deployment, maintenance, support, and documentation of an on-premise VDI solution.
- Oversaw multiple VMware-related initiatives such as ESX host cluster design/management, vSAN sizing/configuration/maintenance, VM capacity planning via vRealize, and Horizon View Desktop Services infrastructure with AppVolumes/User Environment Manager.
- Collaborated in F5 solution design with Datacom for load balancing (GTM/ASM/LTM), while providing expert guidance on diverse projects like datacenter relocations, building transitions, DR failover testing processes, SCCM-to-MDM migration efforts, and Windows desktop VM SOE management.
Nov/2008 Jun/2013
Senior Infrastructure Specialist
NZTA
- Managed the design and implementation of IT infrastructure for key projects, including Johnston’s Hill, Victoria Park, and Waterview Tunnels.
- Designed, built, administered, and supported VMware ESX host and guest server clusters to ensure reliable operation.
- Played a pivotal technical role in constructing a scalable video wall system within the new traffic management center.
- Developed change management processes and designed workflows to enhance operational efficiency.
- Administered network security protocols, including patching, firewall configuration, and backup/restoration systems using Commvault.
- Oversaw Hitachi SAN administration, Brocade fiber switching for redundancy and zoning, as well as IBM Blade/XSeries server hardware support.
other WORK HISTORY
2008-2008 - Senior Technical Specialist - Vector Ltd (Contract)
2007-2008 - System Specialist - Unisys (Contract)
2005-2007 - Desktop, Infrastructure and Network Specialist - Ministry of Justice
2000-2005 - Regional IT Support Advisor - Ministry of Justice