Vibin Varghese — Head of Infrastructure & Technology Lead

01 — PROFILE

A senior operator across
infrastructure, security & AI.

Hands-on technology leadership across the layers most organisations only buy. Equally comfortable architecting a Hyper-V cluster, hardening a FortiGate edge, deploying Copilot Studio agents, leading a phishing incident in real time, or assembling a workstation from parts when the deadline demands it.

I lead enterprise technology operations end-to-end — server-side topologies, networks, voice platforms, cybersecurity, cloud and the AI/automation layer that ties them together. Most engagements span infrastructure design, project delivery, vendor and MSP management, ISO-aligned governance and team leadership.

Over the last decade I have delivered hybrid Azure environments, multi-emirate office rollouts, Zero-Trust and Business Premium / E5 migrations, IP-PABX modernisation, Xerox XWC cloud-print topologies, and an AI orchestration layer combining Copilot Studio, Claude, Gemini, Grok, Vertex AI and MCP services — applied across Finance, HR, Architecture, Facilities, Fleet, Voice Operations and Task Operations.

"Tell me the requirement. I'll show you the working answer."

Currently serving as Head of Infrastructure & Technology Lead at Archcorp Creative Technologies — leading a 6-member technology team across infrastructure, cybersecurity, in-house application development, digital transformation, and AEI research. Delivering: Hexnode MDM for 120 users with full patch management and 1Password + YubiKey advanced credential security; FortiGate SD-WAN replacing traditional site-to-site VPN across 4 offices; 3CX AI reception with smart call routing; Zycoo audio ambiance solution; Ray-Neo & HTC VR with LED panel smart-screen meeting rooms; WhatsApp Business integration into ERP and project workflows; DKIM domain protection; Hikvision CCTV with biometric attendance; custom ATS recruitment platform; fleet management and manning planner; and in-house PDF tools and document control system. Open to Head of Infrastructure, Technology Lead, and Digital Transformation Director roles across the UAE.

99.9%

Uptime — multi-site infrastructure

35%

IT operating cost reduction

Remote office expansions delivered

12+

Years in enterprise technology

02 — KEY ACHIEVEMENTS

What I’ve actually
shipped.

Concrete deliveries from the last few years — the platforms, programmes and incidents that make up the working portfolio behind the title.

/01

Network revamping — re-architected the entire site

Infrastructure · Cabling · Topology

Replaced an unstructured legacy fabric with a redundant, segmented topology — clean rack layout, labelled patching, FortiGate edge, Cisco core, and proper documentation. Before/after evidence in the project gallery.

/02

Remote expansion — Lisbon, Portugal, Egypt, Sri Lanka

Multi-site · Cloud connectivity

Stood up four overseas extensions of the company — secure connectivity, identity, M365 provisioning, MDM enrolment and ISO-aligned data governance, delivered remotely as sole project lead.

/03

AI orchestration with Copilot Studio + MCP

Copilot · Claude · Gemini · Grok · Vertex

Moved automation beyond Power Automate into Copilot Studio agents, deployed MCP services connecting internal data and tools, and integrated Claude, Gemini, Grok and Vertex AI behind a single flow-maker interface for the business.

/04

Custom ITSM platform — MSP-grade in-house

Ticketing · Assets · SLA · Knowledge

Built a tailored ITSM system because off-the-shelf tools couldn’t match the workflow shape required at MSP service-level — multi-channel intake, asset-aware tickets, SLA engine and Power BI cockpit.

/05

DLP + data activity monitor — productivity capture

DLP · Activity monitoring · 360° protection

Designed and rolled out a Data Loss Prevention and activity-monitoring layer that captures productivity signals without intrusive surveillance — combined with EDR and identity controls for a 360° endpoint protection posture.

/06

Real-time phishing incident response

SOC · Containment · Recovery

Frontline lead during a live phishing campaign — containment, mailbox isolation, credential rotation and service restoration with minimal downtime, followed by hardening of identity and mail flow.

/07

M365 E5 migration in flight — Business Premium done

Licensing · Identity · Security

Currently leading the E5 migration after completing the Business Premium uplift — unlocking advanced security, eDiscovery and analytics while consolidating spend and rationalising add-ons.

/08

BYOD enabled organisation-wide

Hexnode · Intune · Conditional Access

Rolled out a managed BYOD framework for personal devices — work profile separation, Conditional Access, app protection policies and a clean joiner/leaver flow that does not touch personal data.

/09

Voice transformation — Panasonic TDA → Zycoo + 3CX + Teams

VoIP · Unified Comms

Decommissioned a legacy Panasonic TDA200 hybrid PBX and delivered a unified voice platform across Zycoo IP-PABX, 3CX and Microsoft Teams Voice with SIP trunking and meeting-room conferencing.

/10

Xerox XWC cloud printing topology

Cloud Print · Workflow Central · Topology

Designed and implemented a Xerox Workflow Central (XWC) cloud printing topology — secure pull-print, identity-bound release, mobile and BYOD support, and a print fleet that finally lives off-prem without the on-prem print-server fragility.

/11

Tech-led support for Autodesk Forma & Construction Cloud

Design Tech · ACC · Forma · Custom requirements

Acted as the technology lead supporting the design teams' custom requirements on Autodesk Forma and Construction Cloud — identity, access, integration and bespoke platform work to fit the way the studio actually wants to operate, rather than the way the tools default to.

/12

3CX AI reception & switchboard modernisation

Unified Comms · Voice · AI Routing

Replaced legacy switchboard with 3CX AI-powered reception — intelligent call routing, auto-attendant, skills-based queuing, call recording and CRM integration. Receptionist manual switchboard duties eliminated; role transitioned to admin responsibilities, optimising headcount without redundancy.

/13

Fleet management for admin operations

Vehicles · Renewals · Compliance

Brought fleet operations onto a single tracked platform — registration, insurance, fuel and driver records with renewal alerts, surfaced to admin and finance via Power BI.

/14

Task management & task parser

LLM · Workflow · Automation

Built a task parser that turns free-text instructions from email, chat and meeting notes into structured tasks — assigned, dated, dependency-linked — using Copilot Studio and an MCP-connected backend.

/15

Custom workstation builds for the visualisation team

Custom PC · GPU · Render workflows

Specced and assembled high-end workstations from parts — multi-GPU, fast NVMe arrays, balanced thermals — tuned for Revit, Twinmotion and real-time rendering pipelines.

/16

Vendor & MSP consolidation

Procurement · Renewals · Contracts

Renegotiated and rationalised the supplier base — 40% reduction in renewal cost and a 35% cut in operating expenses, with stronger SLAs and clearer accountability lines.

/17

Team leadership across infrastructure, support & projects

People · Roadmap · Cadence

Lead a small technology team — set roadmaps, run weekly operations reviews, and translate executive priorities into deliverable work packages, with a strong MSP and vendor network behind it.

03 — EXPERTISE

The working
stack.

Twelve domains I architect, deploy, harden, monitor and replace when they stop earning their keep — grouped roughly in the order I tend to address them on a transformation engagement.

◆

/01

Server & Infrastructure

Redundant on-prem and hybrid topologies — domain controllers, file/app servers, clustered Hyper-V and VMware estates, NAS and MSA SAN storage, with high-availability auth and print services.

Windows ServerHyper-VVMware Active DirectorySCCMNAS · SAN · MSA

◎

/02

Networks & Administration

Enterprise LAN/WAN, multi-site VPN, segmented VLAN topologies, structured cabling and controller-based wireless — designed, documented, and administered as a working day-job, not a project deliverable.

CiscoUnifiSD-WAN VLAN DesignSite-to-Site VPNGuest Wi-Fi

☎

/03

Voice & Unified Comms

IP telephony rollouts and unified communications across Zycoo, 3CX and Microsoft Teams Voice — SIP trunking, AI call routing, conferencing rooms, IP speaker systems and unified comms across all office sites.

Zycoo IP-PABX3CXTeams Voice SIP TrunkingYealink3CX AI Routing

▣

/04

Cybersecurity & SOC

Perimeter, endpoint and email security with live incident response. ISO 27001 ISMS preparation, third-party VAPT cycles and phishing-campaign containment with post-incident hardening.

FortiGate 200F · 120FSophosDarktrace GuardzSentinelOneMS Defender ISO 27001 · VAPT

☁

/05

Cloud & Identity

Hybrid cloud on Azure and AWS — IaaS workloads, M365 tenancy operations, identity governance, Conditional Access, and licensing migrations from Business Premium through to E5.

Azure (AZ-104)Azure VPSAWS Microsoft 365 E5Entra IDConditional Access

▦

/06

Multi-Endpoint Management

Unified management across corporate, BYOD and mobile estates — provisioning, app delivery, compliance, signature solutions and secure WFH onboarding. Plus hands-on custom PC assembly for visualisation teams.

Intune MDMHexnodeBYOD Signature SolutionsmacOS (ACSP)Custom PC Builds

▧

/07

DLP & 360° Protection

Data Loss Prevention, data activity monitoring and productivity capture — wired into the EDR, identity and mail layers for a single, end-to-end protection posture.

DLP PoliciesActivity MonitorInsider Risk EDR IntegrationM365 Purview

⟳

/08

Backup, DR & Resilience

3-2-1-1-0 backup designs, immutable repositories, replicated DR sites and tested failover runbooks — built around meaningful RPO and RTO targets, not theatre.

Veeam B&RVeeam ReplicationAzure Backup Immutable StorageDR Runbooks

⚙

/09

AI Orchestration & Flow Makers

Effective use of Copilot and Copilot Studio rather than scripted automations — combined with deployed MCP services and external models from Claude, Gemini, Grok and Vertex AI behind a single flow-maker interface.

Copilot StudioClaudeGemini GrokVertex AIMCP Services Flow MakersPower BI

□

/10

Design-Tech IT Support

IT lead for design teams running Autodesk Forma and Construction Cloud — identity, access, custom integrations and bespoke supporting platforms shaped to the studio’s actual workflow, plus Xerox XWC cloud-print topology for the wider organisation.

Autodesk Forma (IT Lead)Construction CloudXerox XWC ACC API integrationIdentity & Access

☷

/11

ELV & Low-Voltage Systems

Hands-on with extra-low-voltage infrastructure — structured cabling, fibre runs, CCTV cabling, access-control topologies, intercom, paging and barcode/document scanner integrations.

Structured CablingFibreCCTV ELV Access ControlPaging · IntercomScanners

◈

/12

ITSM & Service Operations

ITIL-aligned service operations and a custom-built ITSM platform designed at MSP service-level — ticketing, asset register, knowledge base and SLA reporting integrated with Azure AD and Teams.

Custom ITSM (in-house)Jira ITSMITIL v4 SLA DesignVendor MgmtMSP-grade

📱

/13

Unified Comms & Smart Audio

3CX AI reception with intelligent call routing replacing manual switchboard duties; Zycoo IP audio delivering zone-controlled background music, PA and emergency broadcast across all office sites; WhatsApp Business API integrated into ERP for project and HR notifications — eliminating personal channel usage.

3CX AI ReceptionZycoo IP AudioWhatsApp Business API ERP IntegrationCall RoutingSIP Trunks

🔓

/14

Advanced Credential & Identity Security

1Password Teams with YubiKey hardware MFA across the full user estate — phishing-resistant passkeys for privileged accounts, secrets management for in-house applications, and shared vault governance. Hexnode MDM across 120 users with full patch management, compliance enforcement, and BYOD policy.

1Password TeamsYubiKey FIDO2Hexnode MDM Patch ManagementBYOD PolicySecrets Mgmt

🎓

/15

HR-Tech, Recruitment & People Platforms

In-house AI-powered ATS built end-to-end: multi-channel job posting, AI candidate screening, interview scheduling, offer management and self-service digital onboarding. Biometric attendance integrated with Hikvision CCTV and HRMS for automated payroll data. WhatsApp Business notifications for HR workflows. Certified in UAE Labour Law 2026 and Master in AI for HR (UAE Programme).

ATS (in-house)AI ScreeningSelf-Onboarding Biometric AttendanceHikvision IntegrationHRMS UAE Labour Law 2026Master in AI for HR

📋

/16

Document Control & In-House PDF Tools

Purpose-built Document Control Centre (DCC): transmittals, revision tracking, drawing register, QR-linked document retrieval and automated distribution workflows. Custom in-house PDF toolset for generation, annotation, splitting, merging and controlled stamping — replacing third-party subscriptions across all design disciplines. Fleet management platform and manning planner for resource and vehicle lifecycle tracking.

Document Control CentrePDF Tools (in-house) Fleet ManagementManning Planner QR Document RetrievalTransmittal Automation

🎬

/17

VR, Smart Display & AI Meeting Rooms

Ray-Neo VR and HTC Vive immersive environments for architectural visualisation and client presentations; LED panel smart-screen solutions for boardrooms and presentation spaces; AI-tracking webcam systems for hybrid meeting rooms — auto-framing, speaker detection, and remote participant parity. FortiGate SD-WAN across all 4 sites replacing legacy IPsec VPN for resilient, policy-controlled WAN.

Ray-Neo VRHTC ViveLED Smart Screens AI Tracking WebcamFortiGate SD-WANDKIM/SPF/DMARC

04 — EXPERIENCE

Twelve years.
Five organisations.
One thread.

From trading-floor support in India and field engineering in Kuwait, to logistics IT for IKEA in Dubai, and now leading enterprise technology at a UAE design consultancy with overseas operations.

JAN 2024 — PRESENT

Head of Infrastructure & Technology Lead

Archcorp Creative Technologies — Dubai, UAE

Team Leadership: Manage a 6-member technology team spanning infrastructure engineering, cybersecurity, in-house application development, digital transformation, and AEI (Artificial & Emerging Intelligence) research.
MDM & Endpoint Security: Deployed and administered Hexnode MDM across 120 users — full device enrolment, compliance policies, patch management, OTA updates, BYOD enablement, and app distribution. Integrated with Intune for a unified endpoint management estate.
Advanced Credential Security: Implemented 1Password Teams with YubiKey hardware MFA across the organisation — phishing-resistant passkeys for privileged accounts, shared vault governance, and secrets management for in-house applications.
FortiGate SD-WAN: Designed and deployed FortiGate SD-WAN interconnecting all 4 office sites — replacing traditional site-to-site IPsec VPN tunnels with dynamic path selection, WAN health monitoring, and policy-based traffic steering; achieved 40% WAN cost reduction with improved resilience.
DKIM & Email Domain Protection: Implemented DKIM, SPF, and DMARC across all corporate domains to prevent spoofing, protect sender reputation, and ensure deliverability compliance — reducing phishing-originated domain abuse to zero.
3CX AI Reception & Unified Comms: Deployed 3CX with AI-powered reception and advanced call routing — automated attendant, skills-based routing, call recording, and CRM integration. Reduced receptionist dependency; role transitioned to admin-level tasks, optimising headcount.
Zycoo Audio & Ambiance System: Implemented Zycoo IP audio solution across all offices — centralised background music scheduling, zone-based ambiance control, PA announcements, and emergency broadcast capability across Sharjah, Dubai, and Abu Dhabi sites.
VR & Smart Display Experience: Led deployment of Ray-Neo VR and HTC Vive immersive experience environments alongside LED panel smart-screen presentation and meeting-room display solutions — enabling client-facing design walkthroughs, architectural visualisation, and AI-tracked camera-enabled meeting rooms for hybrid collaboration.
WhatsApp Business Integration: Integrated WhatsApp Business API into the ERP and project management system as a formal business communication channel — automated project notifications, procurement approvals, HR alerts, and inter-discipline coordination. Eliminated personal WhatsApp usage for business communication across all departments.
Hikvision CCTV + Biometric Attendance: Integrated Hikvision IP CCTV with biometric access control and attendance systems — face recognition terminals synced to HRMS for real-time attendance logging, automated payroll data, and perimeter security event correlation.
ATS Recruitment Platform: Designed and developed an in-house AI-powered Applicant Tracking System (ATS) — end-to-end recruitment pipeline from multi-channel job posting, candidate screening, interview scheduling, and offer management through to self-service digital onboarding. Eliminated dependency on third-party recruitment platforms.
Fleet Management & Manning Planner: Built a custom fleet management platform (registration, insurance, fuel tracking, driver behaviour, renewal alerts) and an integrated manning planner for resource allocation, leave, project staffing, and cross-discipline scheduling.
Document Control System & PDF Tools: Delivered an in-house Document Control Centre (DCC) and bespoke PDF toolset — transmittals, revision tracking, drawing register, QR-linked document retrieval, and automated distribution workflows replacing manual document management across all design disciplines.
VPS Infrastructure: Deployed and administered VPS servers for hosted internal services, custom application environments, and development/staging workloads — providing isolated, scalable compute outside the primary on-premises and Azure estate.
Re-architected the server topology and core network — clean rack layout, FortiGate edge, Cisco core, NAS and MSA storage, with Veeam-backed DR.
Sole project lead for four overseas expansion sites — Lisbon, Portugal, Egypt and Sri Lanka — delivering connectivity, identity, MDM and data governance remotely.
Built an AI orchestration layer combining Copilot Studio, Claude, Gemini, Grok, Vertex AI and deployed MCP services behind a flow-maker interface for the business.
Designed a Zero-Trust WFH framework purpose-built for the GPU rendering teams — secure remote access without sacrificing render performance.
Built a custom in-house ITSM platform at MSP service-level — multi-channel ticketing, asset register, SLA engine, knowledge base.
Specced and hand-assembled GPU-intensive workstations for the visualisation team; deployed Meta Quest VR walkthrough infrastructure.
Reduced IT renewal costs by 40% and operating expenses by 35% through MSP/vendor consolidation and licensing rationalisation.
Migrated 134 Microsoft 365 accounts from EU to UAE tenant with full data residency compliance.

NOV 2020 — DEC 2023

IT Specialist & WMS Coordinator

Emirates Logistics — IKEA Distribution Centre, Dubai

Owned IT operations and Tier 1–2 service desk for 500+ users in a 24/7 logistics environment.
Administered Active Directory, Microsoft 365 and Jira ITSM; maintained SQL-integrated WMS and Customs applications.
Delivered AED 120K annual saving through a paperless WMS initiative; built operational discipline around multi-priority, time-sensitive workloads.

MAY 2019 — OCT 2020

System Administrator

Benair Air-Conditioning LLC — Dubai, UAE

Full ERP implementation and network administration across head office and field operations.
Achieved a 20% uptime improvement through proactive monitoring and contract renegotiation savings.

FEB 2015 — JAN 2019

IT Field Support Executive

Otis Elevators & Escalators — Kuwait

Customer-facing IT field support across major commercial sites in a high-availability environment.
Reduced site downtime by 20% and increased customer satisfaction by 20%.
Bravo Award (2015–2017) and Service Excellence Award (2017).

DEC 2013 — DEC 2014

IT Support Executive

Acumen Group (Pvt) Ltd — Ernakulam, India

Remote support for 400+ broker clients across NSE, BSE and MCX trading platforms.
Team Lead for the Odin platform migration v8.1 → v10.2 across five major Indian stock exchanges.

06 — PROJECT GALLERY

Project library — for review.

Selected delivery photos from current and recent projects. Some content is sensitive; access is restricted to invited reviewers only.

Restricted — access by invitation

Enter the access code shared with you to view the project library.

// Demo access for reviewers

archcorp

// Access granted — project library unlocked Relock

Before

After

// Project · Network revamping

Server topology & rack rebuild.

Replaced an unstructured legacy fabric — tangled patching, mixed vendors, inconsistent labelling — with a clean, segmented topology. New patch panels, structured cable management, FortiGate edge, Cisco core, QNAP NAS, HPE servers, and a properly documented rack elevation.

The right-hand image is the as-built. The left-hand is the starting point.

FortiGate 200FCiscoQNAP HPE ServersAPC UPSCable Mgmt

// Architecture · Wireless network

Wireless network architecture.

The current Archcorp wireless design — FortiGate 200F → service switch → four ceiling APs (Idea Hub, Reception, Workplace, Lounge), monitored via Cisco Business Dashboard.

Policy-segregated SSIDs: AC_Enterprise and AC_Conference get authenticated access to internal resources; AC_Guest and AC_Mobile are constrained to internet-only with a captive portal — all enforced at the firewall, not the AP.

FortiGate 200FCiscoCaptive Portal VLAN SegmentationCisco Business Dashboard

Legacy Panasonic TDA200 PBX before voice transformation

// Project · Voice transformation

From legacy PBX to unified voice.

This is what was running the office voice estate when I arrived — Panasonic TDA200 hybrid PBX with a TVM200 voice processor and a Mediatrix C7 gateway, sitting on top of a wall-mounted Krone block. Functional, but fragile and impossible to extend.

Replaced with a unified voice platform across Zycoo IP-PABX, 3CX and Microsoft Teams Voice, with SIP trunking, meeting-room conferencing and IP speaker integration.

Zycoo IP-PABX3CXTeams Voice SIP TrunksYealink

TechnologyLead.

Everything you need in one card.

A senior operator acrossinfrastructure, security & AI.

What I’ve actuallyshipped.

The workingstack.

Server & Infrastructure

Networks & Administration

Voice & Unified Comms

Cybersecurity & SOC

Cloud & Identity

Multi-Endpoint Management

DLP & 360° Protection

Backup, DR & Resilience

AI Orchestration & Flow Makers

Design-Tech IT Support

ELV & Low-Voltage Systems

ITSM & Service Operations

Unified Comms & Smart Audio

Advanced Credential & Identity Security

HR-Tech, Recruitment & People Platforms

Document Control & In-House PDF Tools

VR, Smart Display & AI Meeting Rooms

Twelve years.Five organisations.One thread.

Head of Infrastructure & Technology Lead

IT Specialist & WMS Coordinator

System Administrator

IT Field Support Executive

IT Support Executive

Tap any card to open the discussion.

The "sell-the-solution-ready" playbook.

AP & Invoice Intelligence

JML, Attendance & HRMS Automation

Forma & ACC Custom IT Support

Smart FM, Fleet & Asset Hub

Custom ITSM at MSP-grade

Zero-Trust for Rendering Teams

Voice Modernisation

Xerox XWC Cloud Print Topology

Task Parser & Operations Co-pilot

3CX AI Reception & Voice Modernisation

Project library — for review.

Restricted — access by invitation

Server topology & rack rebuild.

Wireless network architecture.

From legacy PBX to unified voice.

Dashboard summary.

Certifications& education.

A system to design,secure or scale?

Technology
Lead.

A senior operator across
infrastructure, security & AI.

What I’ve actually
shipped.

The working
stack.

Twelve years.
Five organisations.
One thread.

Certifications
& education.

A system to design,
secure or scale?