IT that just works.

• Run the IT and operations systems behind everything: communications, patient administration, staff collaboration, documentation, and day-to-day clinic workflows
• Own identity and access for every clinic system: user provisioning, role-based access, SaaS permissions, and security rules
• Took over an operation of 25 staff running on paper files and post-it notes. Digitised the filing system and had the paper shredded, put BitLocker on every machine, and automated the daily, weekly, and monthly reminders people kept losing
• Built a knowledge base with role-based access, so an answer that took a day, or weeks if the one person who knew was on vacation, now takes seconds
• Automated payment tracking so we know who still owes for their dentures and how long it has been, plus reporting on top of DOMx because its own tracking wasn't good enough
• Built DentureFlow, the production system the labs run on. A patient's impressions open a case, barcodes follow it through every stage, and the work is routed with time estimates based on what the assignee already has on their bench. It syncs with the 3D hardware that prints the dentures, and reception can see where any case is and who has it
• Gave referring dental offices their own accounts on it, so they send us a patient's details before the first visit. The information is there when the patient arrives
• Moved the group off basic phone lines onto a VoIP system with one number and department routing, so a caller reaches the right clinic's reception
• Integrated Slack with the phone system so missed calls and voicemails reach the right people and actually get followed up
• Built the Notion knowledge base holding IT documentation, clinic procedures, onboarding guides, troubleshooting steps, and access rules
• Handle the patient-data privacy obligations that come with healthcare IT in Ontario

Stack: Google Workspace, Slack, Notion, Quo/OpenPhone, DOMx, BitLocker

• Built the automated onboarding/offboarding framework connecting HiBob, Okta, and Google Workspace. Provisioning went from about two and a half hours to about thirty minutes, an 80% cut
• Set up zero-touch device deployment and ran it for 250+ new hires. Hiring triggered an automation that told me who was joining and in what role, so I ordered the right Apple hardware and Miradore had it enrolled before it shipped. The machine arrived ready and the new hire just signed in
• Ran the Miradore MDM estate across macOS, Windows, iOS, and Android, including iPads provisioned for the marketing team, with FileVault and BitLocker encryption enforced
• Issued YubiKeys to every employee and provisioned them through Okta, so phishing-resistant hardware keys were the default way people logged in
• Designed the conditional access rules: sign-in only from managed devices, sessions capped at 24 hours before re-authenticating with a YubiKey, and geographic restrictions that stopped a device authenticating from a country outside our approved list
• For high-privilege accounts, device, country, and IP all had to match or the sign-in failed. Travel outside the approved list went through a review against the person's role and the data they handled, which either approved it or granted a time-boxed window. How strict it was depended on what the person could reach
• Built an assistant over the internal wiki that answered questions scoped to the asker's role, so people saw what they were entitled to see and nothing else
• Rolled out Okta SSO with role-based access control across 35+ enterprise services
• Led a multi-year Digital Workplace Infrastructure roadmap: standardised identity, access, and integration patterns with centralised governance
• Tracked 4,000+ assets in Snipe-IT: laptops, monitors, phones, iPads, keyboards, mice, docks, cameras, headphones, and the Logitech conference-room kit, with documentation solid enough to pass compliance audits without scrambling
• Ran IT procurement and vendor relationships with Lenovo, Apple, Microsoft, Adobe, and Google
• Looked after UniFi networking in offices around the world, each with a backup 5G modem so a local internet outage didn't stop the office working
• Ran the logistics behind all of it: ordering, shipping, and working around Apple supply delays when the world made that hard. A leaving employee's laptop went either to a new joiner or into storage and back out again, matched to whoever needed it by role, with the IT closet kept reconciled against Snipe-IT
• Built role-based ordering lists so peripherals went out without anyone deciding again each time. Pick the list for the role, and the mouse, display, keyboard, and camera ship to the new hire
• Set up Google Meet at the admin level and got the Logitech room hardware working with it
• Wrote the device buy-out policy and the instructions that went with it. Reach three years and the laptop, monitor, or phone is yours to keep. Leave before that anniversary and you have the option to buy it out at a calculated price, or return it. That meant fewer awkward conversations and fewer devices quietly disappearing
• Deployed KnowBe4's Phish Alert Button so anyone could flag a suspicious email in one click and send it to security to analyse
• Worked day to day with Security and HR on identity, access, and automation tied to compliance and the employee lifecycle

Stack: Okta (SSO, SCIM, lifecycle, YubiKey, conditional access and network zones), Miradore MDM, Google Workspace, HiBob, Snipe-IT, Jira, 1Password, Slack, SAML/OIDC across 35+ vendors · SOC 2

• Provided IT support across all dealership locations through Zendesk, covering 1,500+ employees
• Administered Active Directory, VoIP phones, printers, cameras, and Windows endpoints; looked after 15,000+ IT assets across the branches
• Owned the UniFi networking across 40+ dealerships, each of which needed its own build, managed mostly remotely through the UniFi controller
• Ran UPS units on the equipment that couldn't afford to drop, like cameras, so a power cut didn't take them offline
• Migrated roughly 1,500 machines across 40+ dealerships from Windows 7 to 10 with Kaseya, rolling it out by geographic cluster so that if something broke, the affected sites were close together and reachable rather than scattered across the province
• Some machines had to stay on Windows XP because the software they ran wouldn't work on anything newer, so I segmented those off the rest of the network while keeping management access through Kaseya
• Set up proactive monitoring and remote support tools that cut downtime and sped up incident response across all sites, including custom alerts on top of what Kaseya gave us out of the box
• Handled ordering and asset logistics across the branches, keeping the physical stock and the asset records telling the same story

Stack: Active Directory, Kaseya RMM, Zendesk, Windows fleet, UniFi across 40+ sites, 3CX VoIP, UPS

• Oversaw the daily performance of computer systems and provided technical support for hardware and software issues
• Entered and monitored system commands to catch errors early, before users felt them
• Developed training materials and guided users on systems and applications
• Used diagnostics, technical manuals, and user feedback to investigate issues and keep IT operations stable

• Maintained and administered computer networks for 800+ clients and a 10-person office: hardware, systems software, applications, and configurations
• Ran regular data backups and disaster recovery drills
• Diagnosed hardware, software, and network issues day to day
• Planned and implemented security measures for data, systems, and infrastructure
• Monitored performance from master consoles, coordinated network access, and tuned systems as needed

• Designed and maintained the databases behind business applications, with a focus on scalability, security, and reliability
• Planned and ran software upgrades, configured clusters, and set up backup and recovery
• Improved database performance with load balancing and monitoring
• Documented schemas and architectures in standard notation so other teams could work from them