Menuxer
Dynamic QR codes for menus, prices, and promotions: no reprinting.
- React
- Node
- MongoDB
Hi there! I'm Carlos Philips.
System Administrator · Full-Stack Developer · AI Automation
Five-plus years deploying critical systems across industrial, banking, and enterprise environments, with a zero-incident record on mission-critical work. Currently an MSc Enterprise & IT Security candidate, and a full-stack developer who automates everything he can.
01.
About
I'm a system administrator and IT infrastructure engineer with five-plus years keeping critical systems running across banking and FinTech, oil and gas, and software development. My work sits where security and reliability meet: dependable infrastructure you can trust, hardened end to end.
The through-line of my career is zero-error delivery on mission-critical systems. I've kept a national check-clearing network alive across more than a hundred bank workstations, modernized endpoint and identity management with Microsoft Intune and Entra ID for hundreds of users, and secured the systems behind oil and gas operations, all while enforcing the same discipline that earned a zero-incident record.
Today I'm deepening that with an MSc in Enterprise and IT Security, because the systems I build have to be safe as well as stable. When I'm not hardening infrastructure, I'm building full-stack applications, or popping balloons on this very site.
English
Native
Twi
Native
German
B1, actively improving
02.
Experience
Where I've kept critical systems running: data centers, banking, and oil & gas, newest first.
Full-Stack Web Developer @ Belzir
Dec 2024 – Mar 2025
- Built a multi-tenant SaaS platform with role-based access control, REST APIs, JWT authentication, and AES encryption.
- Delivered an asset-tracking system with thorough documentation and performance testing.
- React
- Node
- RBAC
- JWT
- AES
IT Support Technician (Executive) @ Marshall Oil and Gas Services
May 2021 – Jul 2024
- Ran Intune/Entra ID device management: enrollment, compliance policies, conditional access, MFA, and app deployment.
- Administered the M365 tenant: Exchange Online, SharePoint, Teams, OneDrive, and licensing.
- Owned user onboarding/offboarding workflows end-to-end under Intune and M365.
- Maintained UPS systems, PLC racks, I/O modules, and SCADA monitoring with zero incidents.
- Managed multi-site LANs: firewalls, Active Directory, and group policies.
- Linked remote sites via Ubiquiti EdgeMAX point-to-point radio links and fiber-optic cabling.
- Supported IP cameras, printers, and peripherals; climbed towers for antenna installations.
- Ran security audits and shaped data-protection policies.
- Managed the IT procurement budget and vendor/SLA relationships.
- Wrote SOPs and MOC documentation; trained 20+ staff.
- Intune
- Entra ID
- M365
- SCADA
- Active Directory
- FortiGate
- Sophos
- Fiber
IT Support Specialist / Check Processing System Technician @ Clydestone
May 2018 – Apr 2021
- Lead technician for the national check-clearing system across 100+ bank workstations.
- Operated GTU data center duties: monitoring, incident response, and escalation.
- Performed FRU maintenance and automated rack provisioning.
- Resolved 200+ tier-2/3 tickets with a 40% faster average resolution time.
- Fixed network faults: IP conflicts, DNS/DHCP issues, and physical-layer problems.
- Enforced cybersecurity policies for 50+ users and trained end users.
- Check clearing
- Data center
- Networking
- Python
Education
M.Sc. Enterprise and IT Security
Offenburg University of Applied Sciences · Oct 2025 – present
B.Sc. Information Technology
University of Ghana · 2018
03.
Projects
A mix of production systems, security research, and experiments, from bank check-scanner operations to AI tools.
Multi-Tenant SaaS Platform
Multi-tenant SaaS with RBAC, JWT auth, and AES-encrypted data.
- React
- Node
- Express
- MongoDB
Time Tracker
Real-time time tracking for teams, with role-based access and reporting.
- MongoDB
- Express
- React
- Node
Explain It Easy AI
An AI tool that explains complex topics simply.
- AI
- JavaScript
SBOM Attack-Chain Prediction
Predicting attack chains from software bills of materials.
- Python
- Security Research
Secure Device Onboarding
Automated, security-first device onboarding.
- Security
- Automation
- PowerShell
First Bounty
First bug bounty: the journey and the findings.
- Security
- Reconnaissance
Microsoft Intune / Entra ID Rollout
Endpoint management modernization with Intune and Entra ID.
- Intune
- Entra ID
- Microsoft 365
- PowerShell
Enterprise-Wide Network Deployment
Multi-site LAN/WAN build-out for an oil & gas operator.
- FortiGate
- Sophos
- Active Directory
- Ubiquiti EdgeMAX
- Fiber
Check-Scanner Management Web App
Full-stack web app that tracks check-scanner deployments across banks in Ghana.
- JavaScript
- PHP
- MySQL
04.
Skills
Data Center & Infra
UPSPLC racksSCADA/BMSStructured cablingFiber opticsRack mountingFRU maintenance
Microsoft Endpoint & Cloud
IntuneEntra IDM365Defender for EndpointActive DirectoryOnboarding/offboarding
Networking
TCP/IPDNS/DHCPLAN/WANVPNFortiGateSophosSwitches & routersUbiquiti EdgeMAXGroup policies
Virtualization
VMware ESXivCenter
Operating Systems
UbuntuCentOS/RHELWindows Server 2016–2022macOS
Security
Security auditsVulnerability scanningSIEMIncident responseISO 27001NISTOWASPIAMEncryption
AI & Automation
Power Automaten8nHermes Agent orchestration
Development
PowerShellBashPythonJavaScriptPHPReact.jsNode.jsExpress.jsVue/Nuxt.jsMERN
Databases
MySQLPostgreSQLMongoDBRedis
Cloud & VCS
AWSGitGitHubGitLabBitbucket
Soft Skills
Security awarenessVendor coordinationProblem-solvingTechnical documentationTeamworkTraining & mentoring
05.
Certifications
Courses and mastery awards that back up the work.
IBM
Application Security Analyst Mastery Award
Mastery award covering the core skills of an application security analyst: secure development practices, threat modeling, and common vulnerability classes.
IBM
Mobile Application Development Mastery Award
Mastery award covering the end-to-end lifecycle of mobile application development, from design and build to testing and deployment.
More certifications incoming as I progress through my MSc.
06.
Automation Lab
The machines I build to do the boring parts, so I can do the interesting ones.
Publish pipeline
AI Agent Orchestration
Autonomous agents that draft content, run checks, and deploy, coordinated by an orchestrator that keeps each step honest.
Instead of one long prompt, a team of specialised agents builds, verifies, and ships while I review the pull request.
n8n
Visual workflow automation for everything that repeats: my publish pipeline is a chain of small, testable steps.
Trigger → draft → commit → deploy: one webhook starts the whole run and each step only fires when the last one passes.
Power Automate
Microsoft 365 flows that grease the daily grind: approval chains, onboarding automation, and the paperwork nobody wants to redo.
A new starter gets accounts, docs, and equipment assigned by one flow, with every approval tracked in the audit trail.
Automation is how I multiply my time; the workflows above run my day-to-day.
Blog
Notes from the trenches: AI automation, infrastructure, networking, and security.
Intune onboarding & offboarding, done right
A practical walkthrough of user lifecycle management with Intune and Entra ID: enrollment, compliance, licensing, and clean revocation on day one.
I update my blog with AI agents
How I automate publishing, monitoring, and admin workflows with n8n, Power Automate, and orchestrated AI agents, with one concrete example flow.
Hello, World
Welcome to my corner of the internet: who I am, what I do, and what this blog will be about.