JNNC$985.00▲3.43%|ESXI$996.00▼0.79%|VDI$907.00▲2.28%|INTUNE$115.00▲1.57%|PVE$233.00▲5.33%|VEEAM$123.00▼1.72%|GRAF$192.00▲1.45%|WAZUH$942.00▲4.04%|PSH$804.00▲3.33%|DOCK$870.00▼2.04%|IGEL$896.00▼2.01%|AD$192.00▼0.62%|M365$915.00▲5.28%|SOTI$720.00▲2.43%|CITRX$890.00▲5.40%|WIN11$336.00▼1.46%|JNNC$985.00▲3.43%|ESXI$996.00▼0.79%|VDI$907.00▲2.28%|INTUNE$115.00▲1.57%|PVE$233.00▲5.33%|VEEAM$123.00▼1.72%|GRAF$192.00▲1.45%|WAZUH$942.00▲4.04%|PSH$804.00▲3.33%|DOCK$870.00▼2.04%|IGEL$896.00▼2.01%|AD$192.00▼0.62%|M365$915.00▲5.28%|SOTI$720.00▲2.43%|CITRX$890.00▲5.40%|WIN11$336.00▼1.46%|
System Engineer
JNNC▲ 3.42%

Reliable infrastructure. Streamlined workflows.

Designing modern endpoint environments and automating the work behind them — so teams stay focused, and systems stay quiet.

▲View ProjectsContactLinkedIn
0+
Thin Clients▲ 12.4%
~0
Endpoints▲ 8.7%
~0
VDI Migrations▲ 15.2%
~0
Sites▲ 6.1%

The Prospectus

I'm a System Engineer with hands-on experience across virtualization, Infrastructure as Code, backup solutions, and Windows/Linux server environments.

My day-to-day spans geo-redundant stretched clusters, Citrix virtualization on NetApp storage, Terraform and Ansible automation, monitoring with Grafana, and backup operations on Commvault and Veeam.

I care about systems that stay reliable when nobody's looking — clear documentation, sensible automation, and infrastructure that scales without surprises.

Track Record

Roles and responsibilities.

System Engineer

UPZ Bern AG
Aug 2025 — Present

Planning and operating geo-redundant infrastructure, virtualization, and Infrastructure as Code for a multi-site clinical information system.

  • Built a geo-redundant stretched cluster with 4 nodes (~150 VMs) on NetApp NFS Storage for the clinical information system
  • Deployed XenServer hypervisors for Citrix Virtual Apps and Desktops (CVAD) on NetApp NFS datastores
  • Performing server backups and restores with Commvault
  • Introduced Infrastructure as Code: migrating VM creation from manual provisioning to versioned, reproducible deployments with Terraform and Ansible
  • Practical experience with AppVentiX, Cisco UCS Blade infrastructure, NetApp MetroCluster, and Grafana observability

Praktikant ICT

UPZ Bern AG
Feb 2025 — Jul 2025

Endpoint operations and rollout support within a clinical environment, while preparing for a planned transition into the System Engineering team.

  • Managed endpoint rollouts across approximately 20 sites
  • Performed endpoint staging for several hundred notebooks
  • Provided Tier 1 to Tier 3 ticket support across user-facing systems

Apprentice — Betriebsinformatiker EFZ

Technische Fachschule Bern
Aug 2021 — Jul 2025

Four-year Swiss IT apprenticeship combining structured technical training with hands-on infrastructure and operations projects across Windows and Linux environments.

  • Built an anti-malware infrastructure based on Microsoft Endpoint Configuration Manager (MECM)
  • Gained foundational knowledge in Microsoft on-premises infrastructure: AD, DHCP, DNS, and SMB/CIFS file sharing
  • Set up a Veeam backup server including tape backup
  • Core training in Python, Java, HTML/CSS/JS, and MySQL alongside Windows and Linux server administration
  • Operated an ESXi virtualization lab backed by Veeam — including long-term retention via tape library
  • Deployed a Moodle learning platform on Linux for internal training
  • Set up self-hosted GitLab CI/CD runners
  • Built a PRTG monitoring stack for pfSense firewalls

The Deal Sheet

Selected work.

Recent work across the stack.

Deal 01

Clinical Mobile Device Management

Designed and deployed an on-premises SOTI MobiControl platform managing a mixed fleet of Ascom rugged devices and Apple iPads for clinical and operational use. Ascom devices ship panic-button alerting for clinical staff and integrated scanners for logistics and medication workflows. iPads serve general clinical work and patient-facing applications such as digital intake forms.

SOTI MobiControlMDMAscomApple iPadHealthcare
Key Terms
  • On-prem SOTI MobiControl deployment
  • Mixed Ascom and Apple iPad fleet under a single management platform
  • Panic-button alerting for clinical staff
  • Barcode scanning for logistics and medication tracking
  • Patient-facing iPads for digital forms and clinical apps
  • Multi-user shared-device configuration
Deal 02

Unified Remote Support Workflow

Consolidated multiple disjointed remote-support tools into one unified solution for a 10-person helpdesk team. The new workflow simplified support across roughly 2,000 endpoints — FAT clients, VDI clients, and remote worker notebooks — and accelerated onboarding for new staff.

Remote SupportHelpdeskWorkflowEndpoints
Key Terms
  • Single tool replacing fragmented stack
  • Coverage for FAT, VDI, and remote endpoints
  • Faster helpdesk onboarding
  • Reduced licensing and tool overhead
  • ~2,000 endpoints, 10 helpdesk staff
Deal 03

Thin Client Fleet Rollout

Coordinated and executed the rollout of 800+ thin clients across roughly 30 sites in just two months with a small team — modernizing endpoint access and consolidating onto a centralized VDI delivery model.

Thin ClientsVDIRolloutMulti-Site
Key Terms
  • 800+ thin clients deployed
  • ~30 sites coordinated in parallel
  • Two-month delivery window
  • Small-team execution model
  • Centralized lifecycle and support
Deal 04

VDI Windows 11 Migration

Planned and executed the upgrade of roughly 700 VDI endpoints from Windows 10 to Windows 11. Coordinated application validation with business product owners across the organization and tuned the gold image specifically for the cluster's CPU and memory constraints.

VDIWindows 11MigrationImage Engineering
Key Terms
  • ~700 VDI endpoints migrated
  • Application validation with business product owners
  • Gold image tuned for constrained CPU and memory
  • Phased cutover with rollback path
  • Aligned with Windows 11 support lifecycle
Deal 05

5G Emergency Failover Network

Designed and built a 5G-based failover solution for remote sites, providing emergency network connectivity over an IPsec VPN tunnel back to the core whenever the primary uplink fails — keeping operations running through outages.

5GIPsec VPNNetworkingResilience
Key Terms
  • 5G mobile broadband as redundant uplink
  • IPsec VPN tunneling to core network
  • Automatic failover for remote sites
  • Operational continuity during primary-link outages
  • Reusable design across additional sites

Holdings

Tools and platforms.

Selected technologies grouped by where they live in the stack — from virtualization down to the endpoints in your hand.

Virtualization & Infrastructure

  • VMware ESXi
  • Proxmox
  • XenServer
  • Citrix CVAD
  • VDI
  • NetApp NFS
  • Cisco UCS
  • IGEL Thin Clients

Operating Systems & Servers

  • Linux Ubuntu
  • Linux Debian
  • Windows Server

Endpoint & Device Management

  • Microsoft Intune
  • Baramundi
  • SOTI MobiControl
  • Multi-User Shared Devices

Microsoft & Identity

  • Microsoft 365
  • On-Prem Active Directory
  • Hybrid IT Environments

Backup & Recovery

  • Commvault
  • Veeam

Automation & IaC

  • Terraform
  • Ansible
  • PowerShell
  • Process Automation

Monitoring & Security

  • Grafana
  • Wazuh
  • MECM
  • Infrastructure Visibility
  • Security Monitoring

Containers

  • Docker

The Trading Floor

Live from the homelab.

Offline

The lab is offline right now.

Check back in a bit — telemetry resumes when the agent reconnects.

Stats pushed from a Proxmox host on my LAN every ~5s. No inbound connection to my home network — the agent only sends curated metrics outbound over HTTPS.

Let's Do Business

Let's connect.

Open to collaboration, infrastructure conversations, and new opportunities.

EmailLinkedIn