curriculum vitae
Senior IT System Engineer — automation, identity, and infrastructure
Automation-first infrastructure engineer — VMware/PowerCLI, identity & PKI, and data-driven security auditing, in place of one-off manual fixes.
Bachelor’s degree, Network and System Administration — Katholieke Hogeschool Leuven, 2005–2008 · Cum Laude
Amateur photographer · scuba diver · drone pilot · explorer · foodie
Experience
Started as Senior Administrator (External) in Louvain-la-Neuve, converting to Senior System Engineer in Jul 2023.
Challenge
Manual SSL/TLS certificate requests and issuance through AD CS were repetitive and error-prone at scale.
Solution & outcome
PowerShell automation handling the full request-to-issuance flow, removing manual intervention for standard certificate types and cutting the risk of configuration errors.
Challenge
Years of ungoverned AD group sprawl — unclear ownership, empty groups, overlapping memberships — blocked a move to proper RBAC.
Solution & outcome
A C# / EF Code First tool extracting users, groups, memberships and reporting hierarchy into a queryable database, surfacing dead groups and natural team-based access patterns that became the basis for a nested-group RBAC redesign.
Challenge
User provisioning was slow and manual, disconnected from ServiceNow, and prone to naming/group inconsistencies.
Solution & outcome
A backend service triggered directly by ServiceNow approvals, applying business rules and provisioning AD + Exchange Online accounts in one consistent, auditable flow.
Challenge
New hosts were sometimes enrolled without full monitoring coverage, and disk-partition checks in particular drifted out of configuration over time.
Solution & outcome
A PowerShell script against the Nagios XI API that enrolls missing hosts, verifies required services are present, and ensures every fixed partition is monitored — turning onboarding into a self-maintaining process.
Challenge
Locating every endpoint carrying a specific certificate (by thumbprint) across a large fleet was slow and unreliable during rotations or incidents.
Solution & outcome
A PowerShell script distributed via Tanium for fast, fleet-wide certificate discovery, speeding up incident response and compliance audits.
Challenge
Auditing NTFS ACLs on file shares across hundreds of servers didn’t scale with traditional methods.
Solution & outcome
Custom Tanium scripts — including a recursive file-share ACL mapper — for real-time, fleet-wide visibility into permissions and configuration state beyond standard Tanium sensors.
Part of a team responsible for daily management and monitoring of the server infrastructure — creating virtual machines, provisioning physical servers (memory, drives, racking, cabling, iLO, OS install), assigning IPs and DNS records, and implementing automated tasks. Used monitoring tooling to catch issues early, before they caused trouble.
Challenge
Multiple clients needed on-premises VoIP, each requiring FreePBX install, ISP coordination for fixed IPs, custom IVR/hunt groups/call routing, and number porting — repetitive to build from scratch every time.
Solution & outcome
A reusable base image on a standard SIP provider, then per-client tailoring of call flows and ISP/SIP integration — multiple customized deployments delivered with reduced setup time.
Homelab & Personal Projects
.NET MVC / C#
A self-hosted photo gallery that dynamically generates albums and navigation straight from the server’s folder structure — drop photos in, the site does the rest.
→ open the galleryAndroid · GPS · Local storage
A private GPS track logger with local-only storage and KML export for Google Earth — no third-party location services involved.
Android · PHP · MySQL
A self-built PHP/MySQL API plus an Android sender so trusted people can see a live position, without routing through a commercial tracking service.
Raspberry Pi · Python · PHP
A Pi Zero W, relay board, climate sensors and a 3D-printed enclosure replacing a stock thermostat — controllable remotely over VPN between “low temp” and “day” modes.
Postfix · Dovecot · SpamAssassin
Two Postfix + Dovecot mail servers for redundancy, with SpamAssassin filtering and Sieve rules that auto-sort catch-all addresses (xxx@myname.be) into matching folders.
Skills
Scripting & automation: PowerShell, C# / .NET, REST APIs — virtualization: VMware, PowerCLI, ESXi auditing, VMware→Azure Local migrations — identity & infrastructure: Active Directory, AD CS / PKI, Exchange Online, ServiceNow integration — monitoring & endpoint management: Nagios XI, Tanium — systems: Windows Server, Linux system administration, network administration & security — telephony & networking: FreePBX, Asterisk, SIP, firewalling — and, more recently: Docker, vLLM, and local-model agent tooling — see the local AI lab →