Experience
Cables to AI,
the long way up.
MSP technician to IT operations to Head of IT, founder the whole way through. Each role compounded into the next, and each one left behind a system that ran without him and people who ran better because of him.
Work
The record, role by role.
2023 – Present
LottoStar (Pty) Ltd
Head of Information Technology
Sandton · on-site · promoted from Senior System Engineer in seven months
He joined to fix infrastructure and rebuilt the entire IT function, turning a reactive break-fix team into an engineering unit. He reports directly to the CEO on technology strategy and investment, and sits in HOD meetings. The step up to Head of IT came seven months in, after he rebuilt the infrastructure foundation everything downstream depended on.
- ▸Built a production conversational AI agent from zero, running daily under his ownership. 1.6 million customer conversations handled in a year at eighty-five percent satisfaction, higher than the human team it replaced. A full system: custom tooling, conversation flows, integrations, live monitoring, and two trained generations, every layer built in-house.
- ▸Seventy-plus infrastructure, security, internal-tooling, and automation projects shipped or in flight, in under two years. Some inherited, most he started. The register includes a full ISO 27001:2022 compliance programme, network switching upgrades, a guest WiFi captive portal, a PABX and progressive-dialer replacement, a company-wide Windows 11 migration, automated onboarding, offboarding, and role-change, a firewall rebuild with modern VPN and single sign-on, a virtualisation project, an endpoint-protection migration, cloud backup automation, workflow automation with data-loss prevention, server automation and playbooks, RMM automation, merchant reconciliation automation, automated ticketing, self-service process automation, server-room environmental monitoring, DNS and addressing hygiene, a naming and addressing-convention programme, an HR CV-parser, a chat-QA monitoring tool, a self-built automated asset register, an internal intranet, SOPs, imaging, and offsite backups.
- ▸Overhauled the cybersecurity stack end to end and brought it into ISO 27001:2022 alignment. Passed audits with no high-risk findings.
- ▸Saved millions by migrating vendor-locked tooling to open-source equivalents.
- ▸Runs penetration testing against his own production systems. Found things, fixed things, sleeps better.
- ▸Built the IT team from the ground up. Hired, trained, and put process where there was none, then handed real ownership to engineers who now carry large projects on their own name. The department ships at a pace the old team could not have imagined, and it runs at full speed on its own.
- ▸Executed a critical firewall upgrade in a tight overnight maintenance window with zero issues.
2022 – Present
Imbertech (Pty) Ltd
Founder, Director & CEO
Remote · imbertech.co.za · reg 2022/260393/07
He started it as a one-person consultancy after watching too many South African businesses get locked into proprietary software they could not afford. It began as a way to save and modernise companies the way he had already pulled two businesses back from disaster, because that kind of save is the work he is built for. It is now an active engagement house. One small Johannesburg team, one relationship per client, the senior on the keyboard.
- ▸Open-source migration: mapped three hundred-plus proprietary tools to open-source replacements. The public savings calculator at imbertech.co.za lets anyone drop in their own stack and see the exit number, across 300+ apps and 30+ currencies.
- ▸AI automation builds: custom agents, workflow automation, and integration architecture for clients across logistics, advertising, and telecoms. Production systems, shipped and running.
- ▸Security consulting and penetration testing, scoped end to end, with reports written for executives.
- ▸Device forensics for legal proceedings, with a specialisation in iOS forensics. Chain of custody, data recovery, expert analysis.
- ▸vCIO services: executive-level technology strategy without a full-time hire.
- ▸Product line: a private GitHub organisation of twelve repositories, an IT-support suite across backend, client, admin, engineer, and iOS, the Imbertech web systems, and a real-time tracking platform family spanning healthcare and asset-tracking deployments. TypeScript and React across the front ends, React Native on mobile, NestJS and Prisma over PostgreSQL behind them.
2021 – 2023
Ornico
IT Operations Manager
Johannesburg
His first role owning the full IT stack and the budget. He ran 24/7 IT where downtime meant breached client SLAs, oversaw a team of IT professionals, and modernised so many things it is genuinely hard to list them all.
- ▸Rebuilt the entire server room over a single weekend: new servers, a full virtualisation cutover, and a complete migration of the legacy infrastructure.
- ▸Implemented and maintained the container, virtualisation, and clustered-storage platforms that ran the estate.
- ▸Deployed network monitoring and cut incidents by fifteen percent.
- ▸Managed the full stack end to end: firewalls, switching, wireless, cloud, telephony, databases, web hosting, and security monitoring.
- ▸Ran company-wide training on AI literacy and phishing awareness, keeping a room of non-technical staff engaged with a bag-of-chocolates reward for correct answers.
- ▸Authored and co-signed two formal audit-and-remediation registers documenting the inherited environment and the remediation he drove, each structured as problem, cause, effect, fix, and downtime.
2019 – 2021
PCManiacs (PCM Group)
Senior Systems Engineer / Field Lead
Full MSP and fibre · Gauteng
Full MSP work plus fibre rollouts, every tier from L1 to L3, remote and on-site, with after-hours standby. He drove stock around in the morning, installed switches and servers in the afternoon, and terminated cables on weekends. This ran through the Covid lockdowns, where he was placed on the essential-services list so he could keep clients running when most people could not move.
- ▸Sole dedicated resource on a total ransomware compromise. Recovered ninety-eight percent of the data when servers, backups, and snapshots were all encrypted. The company stayed open instead of folding.
- ▸Ran fibre ONT installations across multiple residential developments.
- ▸Built and supported infrastructure for thirty-plus clients across legal, finance, manufacturing, automotive, and education.
- ▸Implemented centralised RMM and reporting for continuous monitoring ahead of failures. Worked across cloud and endpoint-protection platforms.
- ▸Supported large managed client bases across the region.
- ▸Conceived and led IoTManiacs here, an IoT sensor, dashboard, and monitoring venture that grew out of the MSP. It was my idea and baby.
2018 – 2019
Ubuntu Technologies
IT Engineer
MSP · Centurion
Internal support plus client work across a broad client base managed simultaneously, every tier from L1 to L3.
- ▸Led a corporate email migration to the cloud that improved communication and reduced operational cost.
- ▸Did tender-document work and sat in SITA tender meetings.
- ▸Ran regular security audits, identifying and remediating vulnerabilities.
- ▸Installed hundreds of brackets and screens at a corporate client's offices over a weekend, with a crew he recruited on his own initiative, on Ubuntu's account.
2016 – 2018
Gobananaweb (GBW)
Field Technician / Systems Engineer
First MSP · Gauteng
His first role owning whole client relationships end to end, from the first call to the sign-off. Schools, HVAC companies, manufacturing, and anything that could plug in. He did the servers, the networking, the cabling, and the access-point installs himself.
- ▸Designed and managed client networks across enterprise firewall, switching, wireless, and security platforms.
- ▸Still consults for clients from that era years later, including a 2025 emergency RAID recovery routed through an ongoing relationship. The incident is in the Rescues record below.
2016 – 2017
Axiz (Pty) Ltd
Desktop Engineer / EXCO First-Line Support
IT distributor · Midrand
Internal desktop support for four hundred-plus employees, plus support for Pinnacle and Data Centrix. The IT manager's right hand, and dedicated IT for the executive committee.
- ▸Implemented a new helpdesk system that improved ticket tracking and user satisfaction.
- ▸Led an imaging rollout that automated desktop deployment and enforced configuration uniformity.
- ▸Managed the corporate directory: users, group policy, and security.
- ▸Ran morning generator and inverter-room checks and covered warehouse IT.
- ▸Handled hardware diagnostics and repair at distributor level, across thousands of units.
2015 – 2016
AOS (Automated Outsourcing Services)
Desktop Engineer
Ferndale
Internal onsite desktop support for three hundred-plus employees, with Active Directory and GPO administration, user training, and documentation.
- ▸Spent a weekend recabling and relabelling the entire server room.
- ▸Helped contain a ransomware scare before it became a crisis.
- ▸Renovated an open-plan office floor in between.
2014 – 2015
Incredible Connection
Computer Technician
Retail
Walk-in clients, hardware and software diagnosis, and retail sales, from chargers to anti-virus packages. Opened up a PlayStation once or twice.
- ▸Learned to explain complex things to people who do not care about the technical details. He still calls it the most useful skill he has, and it is the origin of the make-complex-simple discipline that runs through everything after.
2011
CEOS Technologies
Vacation Technician
First IT job · school holidays · age 16
Deployed and updated virtual-desktop environments across three private hospitals while still in high school. Most people start their IT career after studying. He started his during it.
- ▸Earned a Certificate of Appreciation for the work, at sixteen.
Work he has built or run on his own initiative, outside any single employer. Client-confidential systems are described generically.
- ▸A personal AI operating system. A harness-agnostic core built on an append-only event log, reducers, a contract-audit layer, and heartbeat timers, with systemd and cron as the scheduler it drives. Roughly thirty custom integration servers, Node.js and Python on FastAPI, wire an AI into real systems: memory and knowledge-graph, personal finance and accounting, DNS, four messaging channels, a career engine, web scraping, e-ink notes, car diagnostics, a device-fleet presence server, and a security-research server, more than three hundred tools in total. Fail-visible by design.
- ▸A distributed personal-compute fleet. A Tailscale mesh coordinating a server, a GPU workstation used for batch embedding, a laptop sensor node, a work node, and an Android phone, all driven from one control plane over SSH.
- ▸A hybrid retrieval engine. Unified search over roughly forty-eight thousand mixed documents, combining dense e5 embeddings, BM25 lexical search, reciprocal rank fusion, and a cross-encoder reranker, GPU-batch-embedded, lifting recall to near-total.
- ▸An OBD-II car-diagnostics platform. ELM327 and python-obd over both WSL and Windows COM ports, live-streaming every engine sensor and per-cylinder misfire monitor, managing diagnostic trouble codes and logging trips, built to instrument his own tuned car.
- ▸A real-time IoT tracking backend. BLE beacons and gateways into an MQTT broker, a PostgreSQL database enforcing per-tenant row-level security, and a proximity-and-egress rules engine, with React and Next.js front ends on AWS infrastructure. Deployed for healthcare and asset-tracking settings.
- ▸A floor-plan digitiser. PDF and raster plans turned into vector ward maps, a FastAPI service over OpenCV, Tesseract, and pdfplumber, containerised so it can run inside a tenant's own network with egress blocked.
- ▸A water-metering platform. Rust and axum over PostgreSQL with sqlx, hand-written migrations covering estates, meters, tariffs, role-based access, and tenancy, with a React front end.
- ▸A personal automation bridge. A messaging-driven assistant with automated daily briefings, calendar-based meeting reminders, task capture, and research, plus nightly self-audit timers.
Authorised, defensively-scoped reviews. Findings on live systems stay confidential to the owner; only the type and rigor of each engagement is described here.
- ▸Perimeter-firewall security audit. A read-only assessment of an enterprise next-generation firewall: firmware and version currency against live CVE advisories, admin-plane exposure, remote-access and VPN exposure, and internet-facing port-forwards, ranked by severity.
- ▸Multi-site corporate WAN review. Hub-and-spoke IPsec topology, VLAN segmentation for data and voice, routing and DHCP validation, wireless, and application-control policy across several branches.
- ▸Multi-tenant data-isolation audit. A live, read-only row-level-security review of a production multi-tenant database, verifying every tenant table enforces per-tenant isolation and that the application role cannot cross tenants.
- ▸Passive OSINT footprint assessment. Mapped an organisation's external attack surface, infrastructure, technology stack, exposed documents, and credential exposure, from public sources only.
- ▸Adversarial self-audit methodology. His own design: a bounded, refute-by-default audit harness against his own systems, one evidence-graded prober per domain, then a prover-skeptic-judge adjudicator per domain, diffed against the previous run and hard-capped so it cannot run away, with a second independent AI as adversarial reviewer.
- ▸Attack-range lab. A honeypot environment stood up to test detection and exercise tooling against real attack telemetry.
- ▸Governance authored. A firewall-rule review cadence, annual penetration test plus random spot-checks plus change-triggered reviews, and two formal audit-and-remediation registers structured as problem, cause, effect, fix, and downtime.
The defensive toolkit spans reconnaissance, OSINT, digital forensics, web-application testing, and cloud-configuration auditing across AWS, Azure, GCP, Kubernetes, and Docker, with compliance checks for ISO 27001 and POPIA.
Founded · Organisations
What he built outside the day job.
2016 – 2018
GenX Gaming (Generation X)
Founder & Director
Competitive esports
It went back to the school LAN parties he organised, cabled, and sometimes won. GenX turned that instinct into an organisation, founded from nothing. It started on a TeamSpeak server and ended on a national stage. It grew to twenty-one teams and roughly one hundred and forty operators, multi-generational and multi-racial, with departments he stood up for recruitment, team management, marketing, and YouTube production.
- ▸Fielded multiple teams across nearly every major title of the era: League of Legends, Dota 2, CS:GO, Call of Duty, Rocket League, StarCraft, Tekken, Battlefield, and Hearthstone. Competed across DGL (later VS Gaming), MSSA, and ACGL, and played on the Coca-Cola Dome main stage.
- ▸Ran a YouTube channel producing tournament footage and highlights.
- ▸Took back-to-back MSSA South African national titles in League of Legends, in 2016 and 2017, earning National Federation Colours from Mind Sports South Africa both years. The 2017 run, at the 31st MSSA National Championships, put GenX Nightwalkers first and GenX Prominence second.
- ▸The people he recruited and led reached the top of South African esports. He handed whole departments to people he had developed, and several of them ran those functions on their own name. Building teams is harder than building systems, and more rewarding.
Rescues · the anonymised record
When it was on fire.
Four separate emergencies. Four different employers. Four companies still standing. The incidents are true and referenceable; by agreement, the client-to-incident links stay separate on the public record.
2025
Full recovery, zero data loss
A business suffered a RAID failure with no working backup path. He gave up a long weekend and brought it back with not one byte lost, routed through an ongoing consulting relationship.
2022
57 TB, all recovered
A company lost fifty-seven terabytes to a failed array with no functioning backups. He was the sole dedicated resource. Every byte came back online, and the owner offered him the senior IT role on the strength of it.
2020
98% recovered
An operator was hit by a total ransomware compromise, servers, backups, and snapshots all encrypted. He recovered ninety-eight percent as the sole dedicated resource. The business survived.
2015
Lower-stakes scare, contained
A corporate ransomware scare contained during an earlier internal role before it became a crisis.
The pattern under all four: he prepares for the version of reality polite planning avoids. Backups, documentation, observability, segmentation, disaster recovery, single-point-of-failure tracking, ransomware playbooks. The boring work that looks excessive until it becomes the only thing that matters.
Mentorship
He builds operators.
2023 – Present
Coach / Mentor
Sundays
Sundays are coaching days, with three mentees in active rotation. He treats mentorship as the actual job, and he has been doing it since the Ornico and Imbertech era.
- ▸He took one junior he had hired and gave him the full treatment: CV work, mock interviews, study plans, standing weekly one-on-ones, and moved him into a specialist role.
- ▸Mentees promoted into specialised roles. Every team he has run, every junior he has hired, ends up a better operator than when they started.
I go further by lifting the people around me.
- ▸Built the IT team from the ground up, hiring, training, and elevating engineers who now own major projects independently.
- ▸Grew a volunteer crew into roughly one hundred and forty operators and twenty-one teams, delegated whole departments, and the people he led became back-to-back national champions.
- ▸Ran company-wide security-awareness training that lifted the whole company's posture.
- ▸Mentees promoted into specialised roles. Three mentees in active rotation. Sundays are coaching days.
School years
Real-estate IT consulting
Independent · while at school
IT consulting for real-estate firms while still in school, for Re/Max, Pam Golding, Century 21, and Jawitz.
Early years
Casa Do Sol
Volunteer IT
Volunteer IT at a school for children with special needs. One month that taught me more about patience and perspective than most jobs ever did.
Early years
Agent 2000: Die Laksman
Extra
Appeared as an extra in the South African film.
Education
Formal where it mattered.
Certifications
2024
AWS Certified Cloud Practitioner
AWS
2024
AI Prompt Engineering
Internal programme
2023
First Aid Level 1
AETA Training Solutions
2021
Sophos ET01 · ET15 · ET80 · MSP01 · SC01
Sophos Certified Engineer
2021
Redstor: Agent · Console · Pre-Sales · Sales · Technical Support
Redstor
2019
AWS Solutions Architect
Udemy
2019
IoT Engineering & Marketing
Udemy
2017
Firefighting Level 1
RiskCom
2015
CompTIA Linux+ (International)
CTU Training Solutions
2014
CompTIA Network+ (International)
CTU Training Solutions
2014
CompTIA A+ (International)
CTU Training Solutions
Online courses & self-study
Machine Learning & Neural NetworksData ScienceDevOps EngineeringFull-Stack DevelopmentMicrosoft Azure AdministratorPythonIoT EngineeringISO 27001:2022ISO 9001:2015Advanced Driving Course
Languages & licence
Licence
Code B (EB) · Advanced Driving Course completed
2009 – 2013
Randburg High School
National Senior Certificate
Subjects: English, Afrikaans, Mathematics, Information Technology, Physics & Chemistry, Engineering & Graphics Design.
- ▸Ran IT consulting on the side throughout, including the Citrix hospital deployments at sixteen and work for real-estate firms.
- ▸Went straight into building production systems out of school, and has spent every year since stacking industry certifications and shipping the work in this record.
SA National Federation Colours
Mind Sports South Africa. League of Legends. The first of back-to-back national titles.
SA National Federation Colours
Mind Sports South Africa. League of Legends, 31st MSSA National Championships.
Certificate of Appreciation
CEOS Technologies. After his first vacation IT contract.