callum. Let’s talk
IT infrastructure & network technicianManchester, UK

Good systems.
Better
connections.

I’m Callum. I work on the networks, servers and services that keep people connected and businesses moving.

Explore my work
Behind the connectionFIG. 01
From people to platformsA conceptual diagram connecting users through secure access to identity, servers and applications. These are the areas I work across, not a live network map. People & devices Secure accessNETWORKS · ZTNA · VPN IdentitySystemsApplications AD / ENTRA IDWINDOWS / LINUXHOSTING / CI/CD
Different layers. One connected system.Conceptual overview
Hands-on work. Carefully documented.Systems · Networks · Security · Automation↓
01 / Selected work

The work behind
the working day.

Projects and responsibilities across business infrastructure, internal platforms and technical exploration.

01 — SystemsCompleted
A stronger
foundation.
01ValidateDNS · replication · SYSVOL
02TransferFSMO roles · Server 2022
03DocumentControlled legacy removal
Active Directory / Modernisation workflow
Infrastructure modernisation

Moving the domain
forward.

Modernising Active Directory domain controllers with Windows Server 2022, from health checks to role transfers and a documented path away from legacy servers.

Windows ServerActive DirectoryPowerShell
Inside the project

My contribution

  • Promoted Windows Server 2022 domain controllers.
  • Verified DNS, replication and SYSVOL health, and investigated DFSR issues.
  • Transferred FSMO roles and documented the controlled removal of legacy controllers.

Scope: domain controller modernisation and supporting documentation.

02 — SecurityImplemented
IDENTITY
Access,
with intention.
POLICY → APPLICATION
Sophos ZTNA / Application access
Secure remote access

Zero trust, from the start.

Planned and implemented Sophos ZTNA within an existing network and identity environment, defining application resources and access policies.

Sophos ZTNAAccess policiesNetworking
Inside the project

My contribution

  • Planned, configured and implemented the platform from scratch.
  • Integrated the network and identity environment.
  • Validated secure remote access and investigated connectivity and session behaviour.
03 — PlatformsOperational
REQUEST / HTTPS
NGINX TLS & routing
Gunicorn Application server
Flask Internal applications
SERVICES MANAGED BY SYSTEMD
Linux / Conceptual hosting stack
Internal application hosting

A home for useful tools.

Supported internal Flask applications behind NGINX, bringing together application services, TLS and routing on Linux.

NGINXFlaskLinuxsystemd
Inside the project

My contribution

  • Supported applications served by Gunicorn and systemd services.
  • Worked with TLS termination and path-based routing.
  • Supported authentication forwarding and extended proxy timeouts.

Also on the workbench.

Projects, responsibilities & exploration
04Hybrid identity & managed endpointsIdentity / In use

I supported an environment connecting on-premises Active Directory with Entra Connect and Entra ID, with hybrid-joined Windows devices managed through Intune configuration, compliance and application policies.

Entra IDEntra ConnectIntuneHybrid join
05Self-hosted GitLab & deployment pipelinesAutomation / Deployed

I deployed and administered a self-hosted GitLab instance, configured repositories, SSH access and a shell runner, and created a test pipeline for controlled deployment to an internal Linux server.

GitLab CI/CDLinuxSSHYAML
06Making sense of an acquired networkNetworking / Documented

I produced structured discovery documents to support acquisition integration planning: IP ranges, VLANs, routing, IPsec tunnels, SSL VPN access, firewall and switching ownership, hardware, accounts and third-party dependencies.

VLANsIPsecSophosCiscoDocumentation
07Operational monitoringObservability / Concept

I scoped an internal dashboard for Windows logon activity, server health and operational status, identifying the events and data needed to bring that information into one place. This work is a concept, rather than a deployed monitoring platform.

Windows eventsServer healthDashboards
08Authentication without a phoneSecurity / Investigated

I investigated a FIDO2 security-key-only authentication model for people unable to use mobile phones, considering Entra authentication-method policies, enrolment and account recovery.

FIDO2Entra IDMFA
02 / Expertise

Comfortable across
the layers.

The platforms and practices I’ve used in day-to-day support and project work.

01

Networks
& security

TCP/IP, VLANs, routing, DNS, DHCP, NAT, IPsec and SSL VPN.

Sophos Firewall, Sophos Central, ZTNA, MFA and FIDO2.

02

Systems
& platforms

Windows Server, Active Directory, Group Policy, DFSR and Linux.

VMware vCenter, ESXi, NGINX, systemd, Flask, Gunicorn and Tomcat.

03

Identity
& endpoints

Entra ID, Entra Connect, hybrid join and Intune enrolment.

Configuration profiles, compliance policies, application management and Microsoft 365.

04

Automation
& operations

PowerShell, Python, Git, GitLab runners and YAML pipelines.

Incident diagnosis, change planning, monitoring concepts and technical documentation.

03 / A bit about me

It started with
“can you take
a look at this?”

Callum / Manchester, UK

Support taught me to start with the person. Infrastructure taught me to see the whole system.

I started in first-line IT support: helping users, setting up devices, administering accounts and troubleshooting Microsoft 365. Moving into second-line support meant more complex incidents and more responsibility for the systems behind them.

That’s where my interest in networking and infrastructure grew. My work now spans server modernisation, hybrid identity, secure access, network discovery and internal application hosting.

I’m working toward an Infrastructure Engineer role, with broader ownership of design, implementation and long-term operation. I like getting hands-on, understanding how the pieces fit, and leaving clear documentation behind.

01 / Foundation

First-line support

People, devices, accounts and everyday troubleshooting.

02 / Progression

Second-line support

Servers, virtualisation, policies and escalated incidents.

03 / Current focus

Infrastructure & networks

Systems, secure access, identity and platform projects.

04 / Next direction

Infrastructure Engineer

Growing toward wider technical ownership.

04 / Still learning

Curiosity doesn’t
stop at the network.

Other areas I’m developing through practical work and experimentation.

Build

Web design
& development

Responsive websites with HTML, CSS and JavaScript. Exploring accessible interfaces, clear structure and getting projects onto live hosting.

Explore

AI & technical
workflows

Using context, constraints and validation to make AI useful for troubleshooting, research, documentation and planning.

Connect

Cloud telephony
& communications

Hands-on experience with Twilio and Ascend: users, handsets, numbers, call routing, queues and day-to-day troubleshooting.

05 / Get in touch

Let’s make
a connection.

Have an infrastructure, networking or systems role in mind? I’d like to hear about it.

Employment & professional enquiries

Rate my website

— / 5Loading ratings…

Choose a star to leave your rating.

Jump to a section