Experience

Cables to AI,
the long way up.

MSP technician to IT operations to Head of IT, founder the whole way through. Each role compounded into the next, and each one left behind a system that ran without him and people who ran better because of him.

Work

The record, role by role.

2023 – Present

LottoStar (Pty) Ltd

Head of Information Technology

Sandton · on-site · promoted from Senior System Engineer in seven months

He joined to fix infrastructure and rebuilt the entire IT function, turning a reactive break-fix team into an engineering unit. He reports directly to the CEO on technology strategy and investment, and sits in HOD meetings. The step up to Head of IT came seven months in, after he rebuilt the infrastructure foundation everything downstream depended on.

  • Built a production conversational AI agent from zero, running daily under his ownership. 1.6 million customer conversations handled in a year at eighty-five percent satisfaction, higher than the human team it replaced. A full system: custom tooling, conversation flows, integrations, live monitoring, and two trained generations, every layer built in-house.
  • Seventy-plus infrastructure, security, internal-tooling, and automation projects shipped or in flight, in under two years. Some inherited, most he started. The register includes a full ISO 27001:2022 compliance programme, network switching upgrades, a guest WiFi captive portal, a PABX and progressive-dialer replacement, a company-wide Windows 11 migration, automated onboarding, offboarding, and role-change, a firewall rebuild with modern VPN and single sign-on, a virtualisation project, an endpoint-protection migration, cloud backup automation, workflow automation with data-loss prevention, server automation and playbooks, RMM automation, merchant reconciliation automation, automated ticketing, self-service process automation, server-room environmental monitoring, DNS and addressing hygiene, a naming and addressing-convention programme, an HR CV-parser, a chat-QA monitoring tool, a self-built automated asset register, an internal intranet, SOPs, imaging, and offsite backups.
  • Overhauled the cybersecurity stack end to end and brought it into ISO 27001:2022 alignment. Passed audits with no high-risk findings.
  • Saved millions by migrating vendor-locked tooling to open-source equivalents.
  • Runs penetration testing against his own production systems. Found things, fixed things, sleeps better.
  • Built the IT team from the ground up. Hired, trained, and put process where there was none, then handed real ownership to engineers who now carry large projects on their own name. The department ships at a pace the old team could not have imagined, and it runs at full speed on its own.
  • Executed a critical firewall upgrade in a tight overnight maintenance window with zero issues.

2022 – Present

Imbertech (Pty) Ltd

Founder, Director & CEO

Remote · imbertech.co.za · reg 2022/260393/07

He started it as a one-person consultancy after watching too many South African businesses get locked into proprietary software they could not afford. It began as a way to save and modernise companies the way he had already pulled two businesses back from disaster, because that kind of save is the work he is built for. It is now an active engagement house. One small Johannesburg team, one relationship per client, the senior on the keyboard.

  • Open-source migration: mapped three hundred-plus proprietary tools to open-source replacements. The public savings calculator at imbertech.co.za lets anyone drop in their own stack and see the exit number, across 300+ apps and 30+ currencies.
  • AI automation builds: custom agents, workflow automation, and integration architecture for clients across logistics, advertising, and telecoms. Production systems, shipped and running.
  • Security consulting and penetration testing, scoped end to end, with reports written for executives.
  • Device forensics for legal proceedings, with a specialisation in iOS forensics. Chain of custody, data recovery, expert analysis.
  • vCIO services: executive-level technology strategy without a full-time hire.
  • Product line: a private GitHub organisation of twelve repositories, an IT-support suite across backend, client, admin, engineer, and iOS, the Imbertech web systems, and a real-time tracking platform family spanning healthcare and asset-tracking deployments. TypeScript and React across the front ends, React Native on mobile, NestJS and Prisma over PostgreSQL behind them.

2021 – 2023

Ornico

IT Operations Manager

Johannesburg

His first role owning the full IT stack and the budget. He ran 24/7 IT where downtime meant breached client SLAs, oversaw a team of IT professionals, and modernised so many things it is genuinely hard to list them all.

  • Rebuilt the entire server room over a single weekend: new servers, a full virtualisation cutover, and a complete migration of the legacy infrastructure.
  • Implemented and maintained the container, virtualisation, and clustered-storage platforms that ran the estate.
  • Deployed network monitoring and cut incidents by fifteen percent.
  • Managed the full stack end to end: firewalls, switching, wireless, cloud, telephony, databases, web hosting, and security monitoring.
  • Ran company-wide training on AI literacy and phishing awareness, keeping a room of non-technical staff engaged with a bag-of-chocolates reward for correct answers.
  • Authored and co-signed two formal audit-and-remediation registers documenting the inherited environment and the remediation he drove, each structured as problem, cause, effect, fix, and downtime.

2019 – 2021

PCManiacs (PCM Group)

Senior Systems Engineer / Field Lead

Full MSP and fibre · Gauteng

Full MSP work plus fibre rollouts, every tier from L1 to L3, remote and on-site, with after-hours standby. He drove stock around in the morning, installed switches and servers in the afternoon, and terminated cables on weekends. This ran through the Covid lockdowns, where he was placed on the essential-services list so he could keep clients running when most people could not move.

  • Sole dedicated resource on a total ransomware compromise. Recovered ninety-eight percent of the data when servers, backups, and snapshots were all encrypted. The company stayed open instead of folding.
  • Ran fibre ONT installations across multiple residential developments.
  • Built and supported infrastructure for thirty-plus clients across legal, finance, manufacturing, automotive, and education.
  • Implemented centralised RMM and reporting for continuous monitoring ahead of failures. Worked across cloud and endpoint-protection platforms.
  • Supported large managed client bases across the region.
  • Conceived and led IoTManiacs here, an IoT sensor, dashboard, and monitoring venture that grew out of the MSP. It was my idea and baby.

2018 – 2019

Ubuntu Technologies

IT Engineer

MSP · Centurion

Internal support plus client work across a broad client base managed simultaneously, every tier from L1 to L3.

  • Led a corporate email migration to the cloud that improved communication and reduced operational cost.
  • Did tender-document work and sat in SITA tender meetings.
  • Ran regular security audits, identifying and remediating vulnerabilities.
  • Installed hundreds of brackets and screens at a corporate client's offices over a weekend, with a crew he recruited on his own initiative, on Ubuntu's account.

2016 – 2018

Gobananaweb (GBW)

Field Technician / Systems Engineer

First MSP · Gauteng

His first role owning whole client relationships end to end, from the first call to the sign-off. Schools, HVAC companies, manufacturing, and anything that could plug in. He did the servers, the networking, the cabling, and the access-point installs himself.

  • Designed and managed client networks across enterprise firewall, switching, wireless, and security platforms.
  • Still consults for clients from that era years later, including a 2025 emergency RAID recovery routed through an ongoing relationship. The incident is in the Rescues record below.

2016 – 2017

Axiz (Pty) Ltd

Desktop Engineer / EXCO First-Line Support

IT distributor · Midrand

Internal desktop support for four hundred-plus employees, plus support for Pinnacle and Data Centrix. The IT manager's right hand, and dedicated IT for the executive committee.

  • Implemented a new helpdesk system that improved ticket tracking and user satisfaction.
  • Led an imaging rollout that automated desktop deployment and enforced configuration uniformity.
  • Managed the corporate directory: users, group policy, and security.
  • Ran morning generator and inverter-room checks and covered warehouse IT.
  • Handled hardware diagnostics and repair at distributor level, across thousands of units.

2015 – 2016

AOS (Automated Outsourcing Services)

Desktop Engineer

Ferndale

Internal onsite desktop support for three hundred-plus employees, with Active Directory and GPO administration, user training, and documentation.

  • Spent a weekend recabling and relabelling the entire server room.
  • Helped contain a ransomware scare before it became a crisis.
  • Renovated an open-plan office floor in between.

2014 – 2015

Incredible Connection

Computer Technician

Retail

Walk-in clients, hardware and software diagnosis, and retail sales, from chargers to anti-virus packages. Opened up a PlayStation once or twice.

  • Learned to explain complex things to people who do not care about the technical details. He still calls it the most useful skill he has, and it is the origin of the make-complex-simple discipline that runs through everything after.

2011

CEOS Technologies

Vacation Technician

First IT job · school holidays · age 16

Deployed and updated virtual-desktop environments across three private hospitals while still in high school. Most people start their IT career after studying. He started his during it.

  • Earned a Certificate of Appreciation for the work, at sixteen.

Independent builds & research

Built on his own initiative.

Work he has built or run on his own initiative, outside any single employer. Client-confidential systems are described generically.

  • A personal AI operating system. A harness-agnostic core built on an append-only event log, reducers, a contract-audit layer, and heartbeat timers, with systemd and cron as the scheduler it drives. Roughly thirty custom integration servers, Node.js and Python on FastAPI, wire an AI into real systems: memory and knowledge-graph, personal finance and accounting, DNS, four messaging channels, a career engine, web scraping, e-ink notes, car diagnostics, a device-fleet presence server, and a security-research server, more than three hundred tools in total. Fail-visible by design.
  • A distributed personal-compute fleet. A Tailscale mesh coordinating a server, a GPU workstation used for batch embedding, a laptop sensor node, a work node, and an Android phone, all driven from one control plane over SSH.
  • A hybrid retrieval engine. Unified search over roughly forty-eight thousand mixed documents, combining dense e5 embeddings, BM25 lexical search, reciprocal rank fusion, and a cross-encoder reranker, GPU-batch-embedded, lifting recall to near-total.
  • An OBD-II car-diagnostics platform. ELM327 and python-obd over both WSL and Windows COM ports, live-streaming every engine sensor and per-cylinder misfire monitor, managing diagnostic trouble codes and logging trips, built to instrument his own tuned car.
  • A real-time IoT tracking backend. BLE beacons and gateways into an MQTT broker, a PostgreSQL database enforcing per-tenant row-level security, and a proximity-and-egress rules engine, with React and Next.js front ends on AWS infrastructure. Deployed for healthcare and asset-tracking settings.
  • A floor-plan digitiser. PDF and raster plans turned into vector ward maps, a FastAPI service over OpenCV, Tesseract, and pdfplumber, containerised so it can run inside a tenant's own network with egress blocked.
  • A water-metering platform. Rust and axum over PostgreSQL with sqlx, hand-written migrations covering estates, meters, tariffs, role-based access, and tenancy, with a React front end.
  • A personal automation bridge. A messaging-driven assistant with automated daily briefings, calendar-based meeting reminders, task capture, and research, plus nightly self-audit timers.

Security audits & assessments

Authorised, defensively scoped.

Authorised, defensively-scoped reviews. Findings on live systems stay confidential to the owner; only the type and rigor of each engagement is described here.

  • Perimeter-firewall security audit. A read-only assessment of an enterprise next-generation firewall: firmware and version currency against live CVE advisories, admin-plane exposure, remote-access and VPN exposure, and internet-facing port-forwards, ranked by severity.
  • Multi-site corporate WAN review. Hub-and-spoke IPsec topology, VLAN segmentation for data and voice, routing and DHCP validation, wireless, and application-control policy across several branches.
  • Multi-tenant data-isolation audit. A live, read-only row-level-security review of a production multi-tenant database, verifying every tenant table enforces per-tenant isolation and that the application role cannot cross tenants.
  • Passive OSINT footprint assessment. Mapped an organisation's external attack surface, infrastructure, technology stack, exposed documents, and credential exposure, from public sources only.
  • Adversarial self-audit methodology. His own design: a bounded, refute-by-default audit harness against his own systems, one evidence-graded prober per domain, then a prover-skeptic-judge adjudicator per domain, diffed against the previous run and hard-capped so it cannot run away, with a second independent AI as adversarial reviewer.
  • Attack-range lab. A honeypot environment stood up to test detection and exercise tooling against real attack telemetry.
  • Governance authored. A firewall-rule review cadence, annual penetration test plus random spot-checks plus change-triggered reviews, and two formal audit-and-remediation registers structured as problem, cause, effect, fix, and downtime.

The defensive toolkit spans reconnaissance, OSINT, digital forensics, web-application testing, and cloud-configuration auditing across AWS, Azure, GCP, Kubernetes, and Docker, with compliance checks for ISO 27001 and POPIA.

Founded · Organisations

What he built outside the day job.

2016 – 2018

GenX Gaming (Generation X)

Founder & Director

Competitive esports

It went back to the school LAN parties he organised, cabled, and sometimes won. GenX turned that instinct into an organisation, founded from nothing. It started on a TeamSpeak server and ended on a national stage. It grew to twenty-one teams and roughly one hundred and forty operators, multi-generational and multi-racial, with departments he stood up for recruitment, team management, marketing, and YouTube production.

  • Fielded multiple teams across nearly every major title of the era: League of Legends, Dota 2, CS:GO, Call of Duty, Rocket League, StarCraft, Tekken, Battlefield, and Hearthstone. Competed across DGL (later VS Gaming), MSSA, and ACGL, and played on the Coca-Cola Dome main stage.
  • Ran a YouTube channel producing tournament footage and highlights.
  • Took back-to-back MSSA South African national titles in League of Legends, in 2016 and 2017, earning National Federation Colours from Mind Sports South Africa both years. The 2017 run, at the 31st MSSA National Championships, put GenX Nightwalkers first and GenX Prominence second.
  • The people he recruited and led reached the top of South African esports. He handed whole departments to people he had developed, and several of them ran those functions on their own name. Building teams is harder than building systems, and more rewarding.

Rescues · the anonymised record

When it was on fire.

Four separate emergencies. Four different employers. Four companies still standing. The incidents are true and referenceable; by agreement, the client-to-incident links stay separate on the public record.

2025

Full recovery, zero data loss

A business suffered a RAID failure with no working backup path. He gave up a long weekend and brought it back with not one byte lost, routed through an ongoing consulting relationship.

2022

57 TB, all recovered

A company lost fifty-seven terabytes to a failed array with no functioning backups. He was the sole dedicated resource. Every byte came back online, and the owner offered him the senior IT role on the strength of it.

2020

98% recovered

An operator was hit by a total ransomware compromise, servers, backups, and snapshots all encrypted. He recovered ninety-eight percent as the sole dedicated resource. The business survived.

2015

Lower-stakes scare, contained

A corporate ransomware scare contained during an earlier internal role before it became a crisis.

The pattern under all four: he prepares for the version of reality polite planning avoids. Backups, documentation, observability, segmentation, disaster recovery, single-point-of-failure tracking, ransomware playbooks. The boring work that looks excessive until it becomes the only thing that matters.

Mentorship

He builds operators.

2023 – Present

Coach / Mentor

Sundays

Sundays are coaching days, with three mentees in active rotation. He treats mentorship as the actual job, and he has been doing it since the Ornico and Imbertech era.

  • He took one junior he had hired and gave him the full treatment: CV work, mock interviews, study plans, standing weekly one-on-ones, and moved him into a specialist role.
  • Mentees promoted into specialised roles. Every team he has run, every junior he has hired, ends up a better operator than when they started.
I go further by lifting the people around me.

People he grew

  • Built the IT team from the ground up, hiring, training, and elevating engineers who now own major projects independently.
  • Grew a volunteer crew into roughly one hundred and forty operators and twenty-one teams, delegated whole departments, and the people he led became back-to-back national champions.
  • Ran company-wide security-awareness training that lifted the whole company's posture.
  • Mentees promoted into specialised roles. Three mentees in active rotation. Sundays are coaching days.

Volunteering & early life

Time he gave back.

School years

Real-estate IT consulting

Independent · while at school

IT consulting for real-estate firms while still in school, for Re/Max, Pam Golding, Century 21, and Jawitz.

Early years

Casa Do Sol

Volunteer IT

Volunteer IT at a school for children with special needs. One month that taught me more about patience and perspective than most jobs ever did.

Early years

Agent 2000: Die Laksman

Extra

Appeared as an extra in the South African film.

Education

Formal where it mattered.

Certifications

2024

AWS Certified Cloud Practitioner

AWS

2024

AI Prompt Engineering

Internal programme

2023

First Aid Level 1

AETA Training Solutions

2021

Sophos ET01 · ET15 · ET80 · MSP01 · SC01

Sophos Certified Engineer

2021

Redstor: Agent · Console · Pre-Sales · Sales · Technical Support

Redstor

2019

AWS Solutions Architect

Udemy

2019

IoT Engineering & Marketing

Udemy

2017

Firefighting Level 1

RiskCom

2015

CompTIA Linux+ (International)

CTU Training Solutions

2014

CompTIA Network+ (International)

CTU Training Solutions

2014

CompTIA A+ (International)

CTU Training Solutions

Online courses & self-study

Machine Learning & Neural NetworksData ScienceDevOps EngineeringFull-Stack DevelopmentMicrosoft Azure AdministratorPythonIoT EngineeringISO 27001:2022ISO 9001:2015Advanced Driving Course

Languages & licence

English

Native · Fluent

Afrikaans

Native

Licence

Code B (EB) · Advanced Driving Course completed

School

Where it started.

2009 – 2013

Randburg High School

National Senior Certificate

Subjects: English, Afrikaans, Mathematics, Information Technology, Physics & Chemistry, Engineering & Graphics Design.

  • Ran IT consulting on the side throughout, including the Citrix hospital deployments at sixteen and work for real-estate firms.
  • Went straight into building production systems out of school, and has spent every year since stacking industry certifications and shipping the work in this record.

Recognition

Three recognitions.

Each one mattered. He does not chase awards.

2016

SA National Federation Colours

Mind Sports South Africa. League of Legends. The first of back-to-back national titles.

2017

SA National Federation Colours

Mind Sports South Africa. League of Legends, 31st MSSA National Championships.

Age 16

Certificate of Appreciation

CEOS Technologies. After his first vacation IT contract.