Paul Smurthwaite

• Hybrid Cloud: Architect and implement the integration of legacy on-premises Windows Server and Linux environments with Azure Cloud services; leveraging Azure Arc to extend Azure management, governance, and security across distributed hybrid estates.
• Azure Modernisation: Developing expertise across the Azure infrastructure curricula, simulating the migration of enterprise-scale on-premises workloads to Azure-native solutions.
• Infrastructure as Code (IaC): Leveraging Terraform and PowerShell to automate the deployment and configuration of hybrid cloud resources, ensuring consistency and scalability.
• Architecture Design: Bridging extensive infrastructure delivery experience with modern cloud design patterns to provide high-availability and cost-optimised digital services.

Certification: Microsoft Certified: Azure Fundamentals (AZ-900)

BSc (Hons) Cyber Security, focused on developing expertise in areas such as:

• Communications Technologies and Web Technologies: Developed expertise in Communication and Web Technologies, including Cisco Switching, Routing, Wireless Networking, and Enterprise Networking & Automation.
• Information Security Governance, Risk, and Compliance: Focused on Information Security Governance, Risk, and Compliance (GRC), aligning technical controls with organisational security frameworks.
• Cyber Security, Systems Penetration Testing, and Network Security: Specialised in Systems Penetration Testing, Network Security, and Cyber Security methodologies to identify and mitigate infrastructure vulnerabilities.

Final Year Project: Advancing Wireless Network Security: A Modern Toolkit for SMEs and IT Professionals:

• Objective: Designed a modern security toolkit for SME and IT professionals focused on wireless assessment and detection.
• Development: Built a modular CLI toolkit utilising Bash & Python to automate security workflows.
• Methodology: Integrated ethical, evidence-driven design practices with virtual lab configurations and open-source tool orchestration.

• Process Ownership: Served as the Process Owner for Continual Service Improvement (CSI) within a Governance, Risk, and Compliance function for a Managed Service Provider (MSP) supporting MoD Defence Digital.
• Service Transition: Managed the transition of services from project delivery to BAU (Business as Usual) as the primary "Run" resource, ensuring long-term operational stability.
• System Integration: Directed the service flow and process integration between the client (BMC Remedy) and the service provider’s platform (ServiceNow).
• Operational Oversight: Leveraged technical infrastructure knowledge to oversee service delivery for a global, security-cleared environment supporting 19,000+ users across all branches of the UK Armed Forces.
• Data-Driven Improvement: Analysed performance data from business service management systems to identify SLA/OLA failures and develop actionable Service Improvement Plans (SIPs).
• Risk & Compliance: Identified and mitigated service risks to ensure alignment with contractual requirements and regulatory standards.

Frameworks: ITIL, ISO 9001, ISO/IEC 20000, ISO/IEC 27001

• Operational Oversight: Managed 24x7 infrastructure monitoring and event management for a combined estate of approximately 75,000 nodes, supporting a diverse portfolio of 18+ public and private sector clients (including Ministry of Defence, Ministry of Justice, Environment Agency, EDF Energy, Heathrow Airport and SmartDCC).
• Cross-Platform Monitoring: Oversaw the monitoring of on-premises Wintel, UNIX, and Private Cloud environments, including full-stack infrastructure (OS, Database, Apps) and environmental monitoring via SCADA BMS.
• Automation & Integration: Identified and documented manual operational processes to enable Runbook Automation (RBA) via HP Operations Orchestrator; integrated data flows between disparate event sources and ServiceNow using Power Automate.
• Service Analysis: Utilised OpsView, Splunk, and SolarWinds to design operator dashboards and Power Query (M language) to analyse performance data; identified improvements that delivered a 12% reduction in manual effort (approx. 5 FTE).
• Maintenance & Security: Managed 24x7 server maintenance and security patching schedules, ensuring the identification, categorisation, and escalation of security events across the estate.
• Technical Workflows: Directed the operational workflows for a 24x7 IOC (Infrastructure Operations Centre) team of up to 20 staff, ensuring SLA/OLA adherence for mission-critical client infrastructure.

Certification: Harvard Business Publishing Connected Manager

• Multi-Platform Technical Oversight: Directed the delivery of BAU services for complex, multi-client enterprise estates, overseeing Windows Server and *UNIX/Linux (NIX) environments including RHEL, SUSE, AIX, and HPUX.
• High-Availability & Clustering: Managed mission-critical infrastructure featuring Windows Cluster Server, HA failover, and storage clustering, ensuring service resilience for government, energy, and defence clients.
• Virtualisation & Lifecycle: Led teams through the full infrastructure lifecycle, including Physical-to-Virtual (P2V) migrations, commissioning, and decommissioning within VMware Enterprise environments running on HP Blade hardware.
• Enterprise Messaging & Data: Oversaw the administration of Exchange, Skype for Business (OCS), and data replication strategies using FRS/DFS for branch-to-datacentre synchronisation and archival.
• HPI Incident Leadership: Acted as the technical escalation lead for High-Priority Incidents (P1/P2), coordinating resolution efforts between internal specialists, architects, and third-party vendors (Microsoft, BT, HPE).
• Security & Maintenance: Orchestrated complex 24x7 security patching and maintenance cycles across clustered environments, balancing failover requirements with strict compliance standards.

• Operational Recovery: Led the turnaround of a high-pressure infrastructure team, reducing a legacy incident backlog from 700+ to < 100 tickets within the first 100 days and eliminating all 30+ day-old incidents.
• High-Volume Incident Management: Directed 24/7 operations for a 2,500-server estate (75% Wintel / 25% *NIX), managing a throughput of 100+ incidents daily, including critical P1/P2 resolution and vendor escalation.
• Team Development & Scaling: Scaled the team from 6 to 15 specialists (12 Wintel, 3 *NIX), overseeing recruitment, onboarding, and technical training to align with enterprise service requirements.
• Technical Delivery: Supported major infrastructure initiatives, including server migrations, virtualisation, and refresh projects, and the implementation of reduced effort/automated patching workflows for clustered environments.
• Performance Analytics: Established daily and weekly performance reporting, utilising operational data to optimise resource allocation and ensure 24x7 coverage for high-priority event windows.

Certification: PCEP Certified Entry-Level Python Programmer

• Technical Escalation & BAU: Provided high-level resolution for a multi-tenant managed services environment, acting as the primary escalation point for complex issues across Windows Server, VMware vSphere, and Citrix XenApp/XenDesktop.
• Cross-Platform Administration: Maintained critical uptime for high-assurance government and private sector estates, managing a diverse Linux footprint including RHEL and SUSE Linux Enterprise Server (SLES).
• Infrastructure Modernisation: Contributed technical expertise to hardware refresh and migration projects, specifically focusing on HPE BladeSystem chassis and blade server deployments.
• Performance Optimisation: Diagnosed systemic infrastructure bottlenecks to enhance scalability and stability, ensuring rigorous adherence to client-specific SLAs in a high-pressure IOC setting.

Technologies: Windows Server, VMware, Citrix, Red Hat Enterprise Linux, SUSE Linux Enterprise Server, HPE BladeSystem

• Infrastructure Deployment: Delivered senior-level technical support and deployment of integrated server and network installations for SME clients.
• Field Service Leadership: Managed the full Field Service lifecycle, providing 3rd-line troubleshooting and infrastructure maintenance to ensure high-availability for mission-critical systems.

• Enterprise Design & Migration: Designed and implemented full-stack IT infrastructure solutions, specialising in Active Directory and Exchange migrations within VMware vSphere and Windows Server environments.
• Legacy Modernisation: Led high-impact initiatives to virtualise legacy physical servers (P2V), significantly improving performance, scalability, and resource efficiency for SME and global enterprise clients.
• Technical Consultancy: Delivered high-quality consultancy services across various sectors, providing 3rd-line support for complex infrastructure issues and maintaining critical system uptime.
• Mentorship: Acted as a technical lead for junior engineers, driving service delivery standards through expert knowledge sharing and hands-on guidance.

Technologies: Windows Server, Active Directory, Microsoft Exchange, VMware vSphere, HP ProLiant Servers

Education: Open University TM128 Microsoft Server Technologies, T155 Linux: An Introduction

Certification: Microsoft MCTS; Exchange Server 2010, Configuring, Microsoft MCTS; Windows Server 2008, Active Directory, Configuring, Microsoft MCTS; Windows Server 2008, Network Infrastructure, Configuring VMware VCA: Cloud, VMware VCA: Data Center Virtualization, VMware VCA: Workforce Mobility

• Full-Stack Business Leadership: Directed end-to-end IT infrastructure operations for a diverse portfolio of SME clients, delivering 360-degree solutions across server, network, and desktop environments.
• Architectural Lifecycle: Managed the complete project lifecycle - from initial architectural design to 3rd-line support - ensuring technical scalability and business continuity for a growing client base.
• Virtual CTO Services: Provided strategic technical roadmapping and managed services, aligning infrastructure investment with commercial growth for various small-to-medium enterprises.