Introductory
Terraform
Used Terraform with AI-assisted guidance to manage seven Cloudflare DNS records as code, working through plan, apply, validation and version control.
Azure · Infrastructure · Platform Engineering
Waqas Mohammad
Enterprise IT professional with 10+ years of experience, currently administering Entra ID, Intune and Microsoft 365 across a 2,000–2,500-user international estate.
Building deeper infrastructure ownership through hands-on Azure, Linux, virtualisation, storage, DNS and monitoring work, and moving deliberately towards Azure, infrastructure and platform-oriented roles.
- Enterprise IT across global organisations
10+ years
Enterprise IT across global organisations
- Azure, Entra ID and Intune administration across the Lockton estate
2,000–2,500 users
Azure, Entra ID and Intune administration across the Lockton estate
- Technical Support Region Lead at Gartner
6 EMEA sites
Technical Support Region Lead at Gartner
- Self-built platform with GPU passthrough, DNS, routing and monitoring
Proxmox → OMV → Docker
Self-built platform with GPU passthrough, DNS, routing and monitoring
Current role
Identity, endpoint and platform administration
Day-to-day administration of Microsoft cloud identity and device management in a large international estate, alongside platform ownership.
Lockton
IT Service Delivery Analyst
Oct 2024 — Present
Administering Entra ID, Intune and Microsoft 365 across a 2,000–2,500-user estate spanning the UK, Bermuda and Europe, with Azure, Active Directory and Citrix troubleshooting alongside.
- Identity & devices Entra ID and Intune administration, including device removal and re-enrolment, MFA and Conditional Access
- Autopilot endpoint provisioning with PowerShell hardware-hash import into Intune
- PowerShell remote remediation of cybersecurity-flagged devices via ControlUp
- Ownership sFTP platform product ownership and the out-of-warranty endpoint refresh
Hands-on infrastructure
Selected case studies
Azure administration, Linux troubleshooting, storage and network services, each written up from what was actually built and what went wrong.
Cloud administration
Microsoft Azure Administration Lab
Azure CLI provisioning in a PAYG DevTest subscription, with a monthly budget and Action Group, private blob storage and Storage Blob Data Contributor RBAC validated through authenticated upload and listing.
- Azure
- Azure CLI
- RBAC
- Blob Storage
Read the case study
Linux troubleshooting
Kernel, DKMS & GPU Passthrough Recovery
Root-caused a failed NVIDIA DKMS build after a kernel upgrade on the OpenMediaVault VM, restored the passed-through RTX A2000 on a pinned known-good kernel and validated Ollama, Docker and storage stage by stage.
- Linux
- DKMS
- NVIDIA
- Proxmox
Read the case study
Storage
Storage & Services Platform
OpenMediaVault on Proxmox with a two-disk mdadm RAID1 mirror and SMB shares, taken through a validated disk migration, filesystem recovery and SMART monitoring while hosting the Docker services.
- OpenMediaVault
- mdadm
- SMB
- SMART
Read the case study
Networking & services
DNS, HTTPS & Service Routing
Pi-hole and Unbound for recursive DNS with DNSSEC validation, Nginx Proxy Manager for TLS and HTTPS routing, and Cloudflare Tunnel for publishing services without exposing containers directly.
- Pi-hole
- Unbound
- Nginx Proxy Manager
- Cloudflare Tunnel
Read the case study
Enterprise background
Where the operational experience comes from
2019 — 2022
Gartner — Technical Support Region Lead
Primary escalation contact for around 200 users across six EMEA sites in four countries, coordinating support standards and service quality with other regional leads.
2022 — 2023
AEG Europe — Senior Technical Support Engineer
Supported around 1,500 users across major London sites, smaller offices and venues, working across endpoint, infrastructure and Entra ID identity systems and administering Exchange Online mailboxes.
2008 — 2013
PwC — Migration Engineer
Delivered large-scale endpoint deployments and Windows migrations, including annual graduate deployments of approximately 1,800–2,000 devices.
Building capability
Learning in public
Not every technology on this site is presented as production expertise. These are areas where I am building practical experience and say so.
Incomplete experiment
Kubernetes / k3s
Prepared three Raspberry Pi Linux nodes and installed k3s on the intended control-plane node. The multi-node cluster was not completed.
Go deeper
The technical detail lives in the case studies.
Each one covers the context, what was built or what broke, how it was investigated and what changed afterwards.