Thierry Lafeber
IT Specialist — IT infrastructure, endpoint management and automation.
About
I'm Thierry Lafeber, an IT specialist with experience in systems administration and enterprise support. I work with Microsoft 365, Windows environments and PowerShell to keep systems reliable and reduce repetitive work.
At home I run a TrueNAS SCALE lab for Docker workloads, segmented VLANs, a NetBird/WireGuard mesh, Restic backups and a self-hosted Nextcloud. I break ideas there before I try them at work.
Core skills
- Windows 11/10
- Linux
- Ubuntu
- Debian
- Unraid
- TrueNAS Core/Scale
- Android
- iOS
- Hyper-V
- VMware
- KVM
- Docker
- Active Directory
- Microsoft Entra
- Office 365
- Intune
- SCCM
- Veeam
- ZFS
- RAID / Mirror / Parity
- FortiGate
- SonicWall
- HPE / Aruba
- WireGuard
Experience
- IT Support, Omni Bridgeway (03/2024 — Present) — Hybrid AD / Entra environment. PowerShell automation for onboarding, Office 365 tenant, Intune, Bitwarden, Mimecast, Netskope and SentinelOne. FortiGate firewalls, Microsoft Servers 2019/2022/2024 and full Windows 11 hardware compliance.
- Systems Administrator, Openbare Bibliotheken Amsterdam (OBA) (2021 — 2024) — Hyper-V cluster across multiple nodes, hybrid AD / Entra, HPE & Aruba switching, SonicWall and FortiGate firewalls. Built ZFS-based backup with Veeam, ran out-of-band WireGuard VPN and supported the organisation's Change Advisory Board.
- ICT Support Engineer, Openbare Bibliotheken Amsterdam (OBA) (10/2019 — 2021) — Frontline support and infrastructure for one of the largest public library organisations in the Netherlands. Promoted into the Systems Administrator role in 2021.
- ICT All-rounder (Self-employed), Busan, South Korea (2017 — 10/2019) — Lived in South Korea on a Working Holiday visa and studied Korean at Kyungsung University Busan. On the side I ran my own ZZP business doing on-site IT support and hardware repairs, and built and operated a personal multi-OS home server for hosting and self-learning.
- Powerservice Employee, MediaMarkt Amsterdam Centrum (08/2016 — 10/2017) — Frontline soft- and hardware support inside the store's Powerservice department, a team of 8 supporting customers across Windows, macOS and mobile.
- Internship, Web Development, Go2People Websites (01/2017 — 07/2017) — Graduation internship building WordPress websites and webshops for large clients. Completed my MBO graduation project on developing with WordPress.
- Internship, Local Support, CGI (2016) — Service desk internship supporting users across MS Office 365: Active Directory and Windows Server 2003–2016 environments.
- Internship, Junior Systems Administrator, Questcontrol (2015) — First systems internship at a multimedia and toy wholesaler, incident handling, Active Directory user management and hardware deployment.
Selected projects
- PowerShell Onboarding Automation — Replaced a manual onboarding process across five admin portals with a PowerShell workflow, reducing it from about 45 minutes to under five minutes.
- Windows 11 Fleet Migration & Hardware Compliance — Moved the whole organisation to Windows 11: hardware compliance audits, BIOS configuration, TPM management and boot integrity checks on every machine in the fleet.
- Hyper-V Cluster Migration — Rebuilt the OBA Hyper-V environment from a single legacy host into a multi-node failover cluster, with ZFS-backed Veeam backups and zero-downtime live migration.
- Multi-VLAN Network Segmentation — OPNsense-based network with isolated LAN, IOT and Guest VLANs, GeoIP blocking against high-risk countries, and a NetBird mesh VPN overlay for secure remote access.
- TrueNAS Storage Platform — Dual TrueNAS SCALE systems providing 98 TB raw storage across RAIDZ2 and mirror pools, hosting 40+ Docker containers.
- Docker Container Fleet — Containerized infrastructure of 40+ services, managed with Komodo and Portainer across multiple hosts. Personal cloud, password manager, databases: all of it runs in containers.