Career
Work Experience
Jomacs IT Solutions · Remote, Canada
- Own the full CI/CD lifecycle — designing, shipping, and maintaining pipelines in GitHub Actions and Jenkins that teams actually rely on, with 99.9% uptime across managed services.
- Architect and manage AWS environments (EC2, S3, ECS, EKS, VPC) entirely in Terraform — infrastructure that's repeatable, auditable, and cost-optimised through automated resource management.
- Wire up cross-system integrations end-to-end: API deployments, gateway connections, and real-time Slack notifications so engineers always know what shipped and when.
- Run the observability stack (Prometheus, Grafana, Nagios) — set the SLOs, hold the on-call rotation, and make sure every incident ends with a fix that sticks.
- Teach GitHub Actions to DevOps and dev teams — covering pipeline architecture, secrets hygiene, SAST gates, self-hosted runners, and production deployment patterns.
- Co-founded FirstByte — a free, community-driven bootcamp that gets beginners into systems engineering and DevOps without the paywall.
Celonis / Make · Prague, Czech Republic
- Ran hybrid infrastructure across AWS, Azure, and on-prem data centres (HPE, Qumulo) — all provisioned and version-controlled with Terraform, CloudFormation, and Ansible.
- Automated the full identity lifecycle for 5,000+ accounts spanning AD, Azure AD, GPO, Intune, and Workday — PowerShell, Bash, and Python scripts enforcing least-privilege at scale so nothing slipped through manually.
- Designed and maintained 30+ GitHub Actions pipelines pushing configuration changes directly into Azure Automation Runbooks — turning manual ops work into repeatable, auditable deployments.
- Held full ownership of SSO and SSL/TLS certificate lifecycles for enterprise SaaS in Azure — zero unplanned downtime on my watch.
- Stood up CheckMK monitoring across 1,000+ hosts and services, with Slack-routed alerting that gave the team eyes on the environment before users noticed anything.
- Coordinated incident response across teams against SLAs tracked in Jira and ServiceNow — focused on resolution speed and making sure the same issue didn't come back.
Concentrix (ex Webhelp Ent. Sales Solutions) · Prague, Czech Republic
- Kept the network and server estate running — responsible for stability, performance, and availability across a busy enterprise environment.
- Managed the full endpoint fleet: software deployment via EDR tooling, asset tracking with Lansweeper, and keeping the estate clean and accounted for.
- Owned Windows infrastructure day-to-day — upgrades, troubleshooting, domain management, and making sure systems stayed current and stable.
- Handled on-site and remote support across the organisation, triaging incidents quickly and escalating the right things to the right people.
Microsoft via Concentrix · Prague, Czech Republic
- Worked directly with UK SMBs to assess their M365/O365 environments — finding the security gaps that internal teams had missed and turning them into clear, actionable recommendations.
- Ran Active Directory security assessments that surfaced real vulnerabilities, then worked with clients to map out structured remediation rather than just handing over a report.
- Advised on M365 architecture and licensing — helping organisations phase their rollouts across Exchange, SharePoint, and Teams in a way that made sense for their size and budget.
- Brought Zero Trust and IAM principles into client conversations, translating security best practices into adoption plans that stakeholders could actually follow through on.
Numeto (ex Tabella) · Prague, Czech Republic
- First point of contact for technical issues — installing, configuring, and troubleshooting hardware and software across the organisation.
- Tested and evaluated new hardware and software before rollout, writing up assessments and upgrade recommendations that informed purchasing decisions.
- Ran daily backup operations and handled system upgrades, keeping everything compatible and nothing left to chance.
