I help teams build resilient infrastructure

Technical

• Architected, designed, and configured the complete infrastructure of an electronic voting platform operated in a highly sensitive environment, covering hardened Linux hosts, strict network segmentation, and fully automated provisioning.
• Configuring self-hosted, open-source large language models (LLMs) for client use cases in education and the public sector.
• Conducted a complete audit of a network and infrastructure architecture, probing for vulnerabilities and segmentation bypasses to verify that the isolation designed on paper was comprehensive and actually enforced.

Business

• Safeguarding public trust in a democratic process by making the voting platform verifiably secure, available, and auditable.
• Bringing AI capabilities to schools and public institutions without handing sensitive data to third-party cloud providers.
• Giving the client documented assurance of where its network segmentation held, where it could be bypassed, and what to fix first.
• Coaching engineering teams on SRE practices, SLO definition, and production incident readiness.

Technical

• Managing a fleet of 1,200+ Linux servers in a fully automated manner, from provisioning and deployment to rolling updates, driven by infrastructure as code.
• Running the large-scale observability and alerting stack on Prometheus, Grafana, Fluentd, Alertmanager, and Karma, keeping every server observable and every incident actionable.
• Tuning Linux systems for NVIDIA GPU and machine learning workloads.

Business

• Keeping a platform of 1,200+ servers evolving safely with a small team, because no change depends on manual work.
• Standardised server configuration so environments stayed consistent and changes rolled out the same way everywhere.
• Shortening detection and resolution times so that platform issues stay invisible to end users.
• Enabling machine learning teams to exploit GPU capacity without owning the infrastructure complexity.

Technical

• Built monitoring of the CentOS / Debian server farm with Telegraf, InfluxDB, and Grafana.
• Authored Ansible-driven deployment automation for Prod and Preprod environments.
• Deployed master/slave pfSense firewall pairs and hardened the platform with the OSSEC IDS.

Business

• Modernised an early-stage fintech platform under day-one regulatory and uptime expectations.
• Made releases predictable and repeatable, shrinking the gap between development and production.
• Strengthened the security posture expected of a payment institution through redundant firewalls and intrusion detection.

Technical

• Migrated legacy Puppet modules into Ansible roles, reducing configuration drift across the estate.
• Centralised log gathering and analysis across Apache, Postfix, Dovecot, and WebLogic including Oracle DB sources.
• Configured and administered FreeIPA servers and a RHEL/CentOS observability stack on Collectd, InfluxDB, and Grafana.

Business

• Turned scattered application and database logs into one searchable place, making incident diagnosis faster.
• Improved day-to-day operations with clear metrics dashboards and centrally managed user access.

Technical

• Built and operated a large-scale virtualisation platform spanning Belgian and UK data centres.
• Designed redundant LDAP and DNS platforms with monitoring, reporting, and clear failover behaviour.
• Set up the proxy platform powering the Hosted Microsoft Exchange (HMC) service at Easynet scale.

Business

• Ran security audits and risk assessments across customer-facing platforms; administered both internal and customer-facing fleets.
• Reduced hardware footprint and time to provision by consolidating customer workloads onto a shared virtualisation platform.
• Removed single points of failure from the naming and directory services every customer connection depends on.

Technical

• Designed and ran secure mail services for nationwide ISP scale on free and open-source software.
• Operated centralised LDAP for secure access management and software load-balancing with LVS.
• Built MySQL clusters powering the IDOOL Flemish TV show and managed Network Appliance storage clusters.

Business

• Cut licensing costs by running nationwide mail infrastructure entirely on free and open-source software.
• Scaled consumer services on commodity hardware and open-source load balancing instead of expensive proprietary appliances.

Technical

• Operational tooling in KornShell, Bash, and Perl; backup management for the platform.

Technical

• Designed and administered SMTP / POP3 / IMAP mail services for ~100 000 mailboxes.
• Built the free hosting web server estate and the entire monitoring platform from the ground up.

Business

• Powered the first free internet access provider in Belgium, bringing the web within reach of every household.