Infrastructure & Network Engineering | Industrial Cold Storage Site

The Challenge:

Taking over a partially completed site to design and deploy a robust, multi-zone network capable of handling industrial environmental demands and high-security requirements.

The Solution:

• • Designed and implemented the full physical and logical network backbone, including VLAN segmentation for enhanced security and traffic management.

  • Deployed high-density Wi-Fi coverage across specialized storage chambers and administrative offices.

  • Engineered a comprehensive surveillance and live-monitoring ecosystem (32-node CCTV) integrated with production-line labeling stations.

  • Standardized IT governance by establishing user access policies, file server hierarchies, and administrative workflows.

The Result: 

A fully automated, "turnkey" operational site with 100% uptime for critical warehouse management systems and centralized security monitoring.

From Fragmented to Future-Proof: Architecting a Resilient, Enterprise-Grade IT Infrastructure 

The Challenge:
Taking ownership of an underdeveloped infrastructure that lacked centralized management, visibility, and resilience. The environment relied on minimal bandwidth, fragmented systems, and limited operational monitoring—creating constraints on scalability, security, and reliability.

The Solution:
Designed and built a complete network foundation from the ground up, starting with centralized wireless management using UniFi to unify access point control and client visibility across the site. Established a structured network architecture on MikroTik, implementing VLAN segmentation, routing control, and traffic isolation to ensure operational stability and security separation.

• Introduced full-stack observability through centralized Syslog aggregation and a purpose-built monitoring system using PRTG Network Monitor, enabling real-time insight into infrastructure health, network performance, and system-level events.

• Led ISP transformation from a single low-capacity connection into a multi-provider architecture with capacity expansion, redundancy, and failover design. Extended resilience further with cellular-based out-of-band access to ensure remote recovery even during gateway-level failures.

• Implemented secure remote connectivity through an IPsec VPN solution using IKEv2, supported by an internally managed PKI system—introducing certificate-based trust into the network for the first time.

• Modernized endpoint infrastructure through migration from HDD to SSD and NVMe storage, significantly improving system performance and user productivity. Established structured backup strategies using scheduled full and differential imaging at the workstation level.

• Built a layered virtualization environment to consolidate services, enabling rapid deployment of internal systems such as monitoring tools, VPN services, streaming proxies, and test environments.

• Engineered a scalable surveillance infrastructure using RTSP-based IP cameras, integrating streaming proxies and evolving the system from lightweight Live555 architecture into MediaMTX for improved performance and manageability.

• Finally, introduced centralized identity and governance using Active Directory, Group Policy, and Certificate Services, unifying authentication, access control, and endpoint policy enforcement across the entire environment.

The Result:
A fully integrated and resilient IT ecosystem with end-to-end visibility, centralized control, and multi-layer redundancy. The infrastructure evolved into a scalable operational platform capable of supporting critical business systems, secure remote administration, and continuous monitoring with high reliability and minimal downtime.

Infrastructure & Network Engineering | Logistics Site IT Buildout

The Challenge:
Led IT delivery for a new logistics site with near-zero infrastructure—owning end-to-end design, execution, and coordination while concurrently managing a larger primary site.

The Solution:
Conducted full site assessment and translated requirements into a complete IT blueprint covering server room design, network topology, wireless coverage, CCTV planning, and warehouse labeling structure.

Built the environment from the ground up: segmented network architecture, site-wide Wi-Fi, centralized monitoring (PRTG & UniFi), and baseline security with a next-gen firewall. Managed vendors, ISP procurement, and project milestones while directly executing deployment across all systems.

Deployment Scope:
16 CCTV • 6 APs • 3 Workstations • 1 Server + Rack • 3 UPS • 2 Industrial IoT Scales • Live Monitoring • DVR • Next-Gen Firewall

The Result:
Delivered a fully operational, secure, and scalable logistics site—transitioning from bare infrastructure to production-ready with full visibility, structured design, and reliable performance.

Digital Brand Governance & Platform Control

Deliver enterprise-grade governance over public digital assets by establishing verified presence, enforcing ownership control, and securing communication channels across platforms such as Google Business Profile, Meta Facebook Pages, Meta Instagram, Meta WhatsApp Business, Meta Facebook Business Suite, Linktree and YouTube.

Scope includes platform verification, account recovery, access control implementation, and risk mitigation—ensuring all external-facing channels operate under authorized ownership, compliant usage, and secured access frameworks.

Tech Stack: Google Workspace, AppSheet, Google Apps Script, Google Forms, REST APIs (WhatsApp Integration)

Overview

What began as a simple initiative to streamline daily necessities quickly evolved into a company-wide digital transformation. Recognizing the friction in everyday business operations, I took on an internal research and development role to proactively hunt down departmental bottlenecks and digitize them from the ground up.

The Catalyst

The journey started by introducing Google Forms for customer surveys and critical COVID-19 entry protocols. The immediate, positive impact these simple tools had on the staff sparked a larger mission: actively roaming between departments to ask, "What needs to be improved today?"

The Solution & Execution

Discovering Google AppSheet within our existing Google Workspace environment was the turning point. I dove deep into its framework, mastering its coding structures to build a massive, interconnected suite of enterprise applications tailored to the company's exact needs.

• Comprehensive Enterprise App Suite: Designed and deployed custom applications covering almost every operational facet. This included Health & Safety (Hydrants, Extinguishers, Fire Alarms, Sanitation), Warehouse Logistics (Cold Storage Cleanliness, Racking Inspections, Reach Trucks & Counterbalance Forklifts), and Human Resources (Patrol Apps, Employee Logs, Driver Management, Employee Profiling).

• Inventory & Asset Management: Built robust Enterprise Inventory Management systems to track and optimize internal resources.

• Advanced Automation & Integration: Pushed the boundaries of the Google ecosystem by writing custom Google Apps Script. I hooked the AppSheet databases to external endpoints, enabling automated WhatsApp notifications, custom-generated email reports, and dynamic document generation.

The Impact

Driven by a pure passion for building things that make people's jobs easier, I developed this entire operational ecosystem beyond the strict confines of my core IT role. The result was a highly automated, seamlessly integrated digital infrastructure that permanently modernized how MGM Bosco Logistics operated on a daily basis.

Cybersecurity & Infrastructure Transformation | Enterprise IT Environment

The Challenge:
Supporting a growing business with increasing security risks, inconsistent systems between branches, and no formal cybersecurity structure—while ensuring operations remain stable and uninterrupted.

The Solution:

•  Redesigned the company’s network to separate critical systems, reducing the risk of internal threats spreading across the organization.

• Introduced centralized user access, allowing employees to securely log in and work across systems with proper control and accountability.

• Deployed advanced network protection using FortiGate to monitor and filter traffic, ensuring only safe and authorized communication between systems.

• Replaced outdated remote access tools with secure, controlled connections based on modern “zero trust” principles—no access is assumed safe by default.

• Structured key business systems (file storage, monitoring, remote access, and operations tools) into controlled environments to improve stability and security.

• Implemented continuous monitoring using PRTG Network Monitor to detect unusual activity early and maintain system health.

• Improved business continuity by introducing reliable backup systems and faster recovery processes to minimize downtime during unexpected incidents.

• Established basic cybersecurity policies and conducted regular staff training to reduce risks like phishing and credential misuse.

The Result:

• A secure and reliable IT environment that supports daily operations without disruption.

• Reduced risk of cyber incidents through better system control, monitoring, and access management.

• Faster recovery from technical failures, minimizing business downtime.

• Improved employee awareness and accountability around cybersecurity.

• Adopted as a reference standard across the wider enterprise group.

Trucking Cold Chain Site Deployment & Infrastructure Integration

The Challenge :
A newly established trucking cold chain facility required a complete IT infrastructure deployment within a very limited budget during a company-wide efficiency initiative. The site needed operational CCTV, WAN connectivity, telephony, and supporting infrastructure while minimizing new capital expenditure and leveraging existing resources wherever possible.

The Solution :
Led the planning and supervision of the site’s end-to-end IT deployment, including physical topology, CCTV systems, network infrastructure, telephony integration, and relay/power systems. Existing assets from the primary cold storage facility were strategically repurposed to reduce costs, including legacy DVR units, spare and repaired CCTV cameras, HDD storage, and unused telephone cabling.

To provide WAN connectivity without introducing a new ISP contract, the new facility was integrated into the existing cold storage network through a fiber extension using media converters. An organized acrylic-based relay and network panel system was also designed and installed as a cost-efficient alternative to traditional server racks while maintaining accessibility and structured deployment standards.

The project was executed in close collaboration with engineers and field technicians, with oversight focused on deployment quality, operational readiness, and infrastructure reliability.

The Result : The entire deployment was completed within one month and successfully delivered operational CCTV, networking, and telephony systems for the new facility. Despite operating under significant budget constraints and relying heavily on optimized legacy equipment, the site has continued running without major infrastructure issues for more than two years.

This project demonstrated effective infrastructure leadership, cost-efficient deployment strategy, practical problem solving, and successful execution in a constrained operational environment.