cloud infrastructure engineer: systems administration & automation
I keep infrastructure running, secure, and out of your way.
5+ years administering cloud, identity, and endpoint environments for SaaS and enterprise teams. I'm usually the reason nothing broke in the first place, but I still answer the call when it does.
// about
Background
I'm Louis, a systems administrator based in the UK. I started out on a service desk, and the years since have been a steady move toward owning infrastructure outright rather than just fixing it. The same instinct that had me chasing down individual tickets now goes into closing the process gaps that caused them in the first place: an automation script here, an access policy there, sometimes just documentation nobody had got round to writing.
I hold a BSc in Computer Science from the University of Hertfordshire and I'm currently studying for the Microsoft Certified: Azure Administrator Associate (AZ-104). Outside of paid work I run a personal, Terraform-provisioned monitoring stack on GCP to stay hands-on with tools I don't get to use day to day.
// skills
Systems status
The platforms, tools, and disciplines I work in day to day.
Cloud Platforms
● operational
- Microsoft Azure: IaaS/PaaS, VMs, networking, storage, App Services
- AWS: EC2, VPC, S3, IAM
- GCP: VM management, IAM
Identity & Access
● operational
- Entra ID / Azure AD, Active Directory, Okta
- RBAC, conditional access, MFA, SCIM provisioning
- Access control policy & identity lifecycle management
Endpoint Management
● operational
- Microsoft Intune, Autopilot, SCCM
- Jamf, Samsung Knox, ChromeOS, Google Workspace
- Windows Server, DNS, DHCP, Group Policy
Automation & Scripting
● operational
- PowerShell, Python, Bash, Node.js
- Provisioning, diagnostics, operational tooling
Monitoring & Incident
● operational
- Prometheus, Grafana, New Relic, CloudWatch
- Alerting pipelines, 24/7 on-call, SLA-driven ops
Security & Compliance
● operational
- ISO 27001, Cyber Essentials
- Vulnerability management, pen-test coordination
- Simulated phishing & security awareness
// experience
Where I've worked
System Administrator
Inspiro Learning Jul 2024 – Present- Administer and maintain Azure cloud infrastructure across a distributed enterprise environment, including an Azure-to-Azure migration of approximately 500 users, while managing security posture, governance controls, and platform improvements alongside an external MSP.
- Manage Entra ID for the full identity lifecycle: user and group provisioning, conditional access policies, RBAC, MFA enforcement, and SCIM-based SSO integrations.
- Contribute to ISO 27001 and Cyber Essentials compliance, supporting evidence packs, control mapping, and audit readiness.
- Develop PowerShell automation scripts for provisioning, diagnostics, and operational reporting.
- Manage Intune and Autopilot for Windows device fleet management; administer Samsung Knox for Android devices; coordinate Windows 11 enterprise migration.
- Maintain technical documentation and runbooks for infrastructure processes and stakeholder handoffs.
System Administrator
Bob's Business Limited Jun 2022 – Apr 2024- Managed AWS cloud infrastructure (EC2, VPC, S3, IAM) as the primary cloud platform for a cybersecurity SaaS business, maintaining reliability, security, and performance across production environments.
- Used Terraform for infrastructure-as-code deployments across development, staging, and production environments.
- Implemented monitoring and alerting using Prometheus, Grafana, and New Relic; participated in 24/7 on-call support, consistently resolving critical incidents within SLA.
- Contributed to ISO 27001 and Cyber Essentials compliance; provided 3rd line technical support across infrastructure, identity, and access control.
- Administered Jamf for macOS and iPad device management; managed ChromeOS and Google Workspace.
- Developed Python and Node.js automation scripts in production for incident response and operational workflows.
IT Support Analyst
Utility Warehouse (Telecom Plus PLC) Jun 2018 – Nov 2021- Administered Active Directory, SCCM, and Jamf across a 1,500+ user enterprise estate; managed DNS, DHCP, Group Policy, Hyper-V, and Windows Server environments.
- Administered Okta for identity and access management across permissions and devices.
- Developed PowerShell automation scripts to reduce manual administration overhead.
- Supported AWS infrastructure migration using Terraform and Desired State Configuration (DSC).
- Delivered Tier 1 and Tier 2 support across hardware, software, and connectivity issues.
- Worked within ServiceNow and Jira for incident management, queue administration, and escalation tracking.
// services
What I can take off your plate
Focused engagements for small teams and businesses that need infrastructure handled properly without a full-time hire.
Cloud infrastructure setup & administration
I build, migrate, or take over Azure and AWS environments and get them stable, then keep handling the networking, storage, and compute day to day.
Identity & access management (IAM)
I set up and harden Entra ID, Active Directory, and Okta environments, covering conditional access, MFA enforcement, RBAC, and SSO integrations.
Endpoint fleet management (MDM)
Intune, Autopilot, Jamf, and Knox deployments across Windows, macOS, and mobile fleets, handling enrolment, policy, and the whole device lifecycle.
Security & compliance support
ISO 27001 and Cyber Essentials readiness, vulnerability management, pen-test coordination, and phishing-simulation programmes.
Automation & scripting
PowerShell, Python, and Bash tooling to cut out repetitive admin work like provisioning, diagnostics, and reporting.
IT systems audit & documentation
A clear-eyed review of your current setup, with runbooks and documentation your team can actually use.
// projects
Currently deploying
Automation tools and infrastructure scripts I actually run day to day. More on the way.
cloud-monitoring-stack
Terraform / Docker / Grafana
A self-hosted Prometheus + Grafana stack on a free-tier GCP e2-micro, provisioned entirely by Terraform with GCS-backed remote state. Alertmanager routes real alert rules for host resource pressure, probe failures, and container restarts to a configurable webhook; per-container memory limits and a tuned swapfile keep it stable inside 1GB of RAM. It also watches this site's own uptime and TLS cert.
aws-python-toolkit
Python / boto3 / pytest + moto
A CLI for two things a cloud/DevOps engineer is asked to do constantly: find IAM permissions that are broader than they need to be, and see what's actually running across an AWS account. iam-audit walks every IAM user, role, and group, reading their policy documents to flag Allow statements with a wildcard action or resource; inventory lists EC2, RDS, and S3 resources across one or more regions along with their state. The full test suite runs against moto's mocked AWS backends, so it needs zero real credentials and costs nothing to run, and GitHub Actions runs ruff, mypy, and pytest on every push.
k3s-observability-lab
Kubernetes / kind / GitHub Actions
Kubernetes manifests for a Prometheus + Grafana observability stack, built as a companion to cloud-monitoring-stack after a feasibility check found k3s's control-plane memory footprint doesn't fit alongside the existing Docker Compose workload on that free-tier 1GB VM. Every container defines resource requests and limits plus readiness and liveness probes. Tested on every push via an ephemeral kind cluster spun up fresh in GitHub Actions, with no live cloud resource and no ongoing cost.
win10-setup-script
PowerShell
A repeatable PowerShell build script for provisioning a clean Windows 10 install, handling debloating, privacy hardening, and standard tooling installs in one run instead of a dozen manual steps.
steam-blocker
C#
A lightweight Windows utility that blocks Steam's network access via Windows Firewall rules, letting multiple people use Family Sharing offline on the same network at the same time.
// contact
Let's talk
Open to full-time roles, contract work, and freelance engagements.