01
Security operations
Enterprise threat-visibility platform
Manufacturing · East Africa · 2025 – Present · CloudIT Limited
Led the design and deployment of a centralised threat-visibility and infrastructure observability platform for a major East African manufacturer, unifying endpoint, network, and security telemetry into a single operational architecture.
Integrated Sophos XDR with Cisco Meraki, Cisco ISE, Cisco Firepower, and endpoint telemetry so that the client's IT team could detect, investigate, and correlate events across network and endpoint from one console. Layered ManageEngine OpManager and Firewall Analyzer alongside for performance monitoring, log analytics, and firewall-policy governance.
Notable troubleshooting. Resolved a three-week log-ingestion failure by tracing the fault to Nutanix network isolation dropping traffic to the collector's secondary syslog IP — an easy fault to misdiagnose at the application layer. Root cause identification and controlled whitelisting restored ingestion.
- Sophos XDR
- Cisco Meraki
- Cisco ISE
- Cisco Firepower
- ManageEngine
- Nutanix
02
Modern workplace
Microsoft 365 & endpoint security transformation
Compliance consultancy · Multi-country · 2023 – 2024 · Ethical Trade Services Africa
Led the end-to-end Microsoft 365 modernisation and security programme for a distributed compliance consultancy — 60+ users across multiple East African countries, migrated from legacy on-premises messaging to a fully governed Microsoft cloud workplace.
Delivered Exchange Online, SharePoint Online, and Microsoft Teams; configured Microsoft Entra ID with Conditional Access, MFA, and identity governance; deployed Intune across ~100 Windows endpoints with compliance and configuration policies; implemented Microsoft Defender for Endpoint and Purview DLP. Configured SPF, DKIM, and DMARC for authenticated mail flow.
Approach. Staged Conditional Access in report-only mode with clear rollback paths, aligned compliance policies to device reality before enforcing access restrictions, and treated adoption and support as part of the technical implementation rather than a post-project activity.
- Microsoft 365
- Entra ID
- Intune
- Defender for Endpoint
- Conditional Access
- SPF/DKIM/DMARC
- Microsoft Purview DLP
03
Cloud-native software
Cloud-native financial management platform
Compliance consultancy · 2023 – Present · Ethical Trade Services Africa
Architected and built a cloud-native financial management platform on Google Cloud Platform and Firebase / Firestore to replace spreadsheet-driven budgeting, approvals, and reconciliation across 5+ departments.
Designed the data model, workflow states, permissions, and validation rules from the underlying business processes, then developed the platform end to end. Implemented request-approval-reconciliation flows with role separation, timestamps, and traceability. Added AI-driven forecasting as decision support — deliberately positioned as an aid to management judgement, not a substitute for financial approval.
This is the pattern I most enjoy: identifying an operational problem, translating it into a secure and supportable architecture, and building the platform when packaged tools do not fit.
- Google Cloud Platform
- Firebase
- Firestore
- Data modelling
- RBAC
- AI integration
04
Greenfield delivery
Greenfield enterprise technology foundation
Manufacturing · 2022 – 2023 · Origen Fresh Africa EPZ
Delivered the complete technology foundation for a new manufacturing operation — infrastructure, security, ERP, VoIP, networking, and cloud workplace — from cabling and rack-and-stack through domain configuration, Group Policy design, and ongoing administration.
Scope included Windows Server and Active Directory (AD DS, GPOs, OU design, Kerberos), Sophos firewall/VPN and XDR, Odoo ERP, Grandstream VoIP, structured cabling and switching, backup and disaster recovery, and Google Workspace onboarding for 50+ users with automated provisioning that cut deployment time by 60%.
Delivered at full operational readiness and 15% under the allocated budget — a result of disciplined scoping, phased implementation, and honest trade-off decisions on procurement.
- Windows Server
- Active Directory
- Group Policy
- Sophos
- Odoo ERP
- Google Workspace
- Backup & DR
