I'm a System Engineer working where Microsoft platforms, virtualization, resilience, and automation meet.
I build and operate hybrid environments, troubleshoot the problems that survive the first two support levels, and turn repetitive administration into reusable PowerShell, Bash and Python tooling.
My preferred kind of infrastructure is boring in production, recoverable under pressure, and still understandable at 03:00.
profile:
handle: "@xGreeny"
role: System Engineer
domain: Hybrid Infrastructure
default_mode: automate_then_document
platforms:
cloud:
- Microsoft 365
- Azure
identity:
- Active Directory
- Entra ID
compute:
- Windows Server
- VMware ESXi
- Proxmox VE
- Azure Virtual Desktop
workspace:
- MDM
- FSLogix
- Microsoft Teams Phone
resilience:
- Veeam
- Backup & Recovery
automation:
- PowerShell
- Bash
- Python
operations:
- infrastructure projects and migrations
- 2nd/3rd-level troubleshooting
- security-aware operations
- network segmentation
- standardization and technical documentation
| repo | what it does | built with |
|---|---|---|
| avd-landing-zone | Lean, opinionated Azure Virtual Desktop landing zone — Entra-only, FSLogix best practices built in, deployable in under an hour | Bicep |
| tenant-lens | Read-only Entra ID / Microsoft 365 tenant assessment — versionable snapshots, 51 best-practice rules with a CIS benchmark view, drift detection | PowerShell |
| hardening-lens | Read-only Windows security posture assessment with role-aware baselines, governed exceptions and drift detection | PowerShell |
| SPPermissionMatrix | Interactive permission matrix for SharePoint Online — resolves nested groups transitively, flags broken inheritance and sharing links; ships on the PowerShell Gallery | PowerShell |
| infra-pulse | Read-only infrastructure health checks with self-contained reports for Windows and hybrid environments | PowerShell |
| fslogix-doctor | FSLogix diagnostics toolkit — decodes error, status and reason codes into plain-English causes and fixes, finds locked, orphaned and bloated profile disks | PowerShell |
| incident-capsule | Windows first-response evidence collection with offline reporting and SHA-256 integrity verification | PowerShell |
| esxi-proxmox-migrator | Batch-migrates VMs from VMware ESXi to Proxmox VE — pre-flight checks, full config mapping, Windows VirtIO handling | PowerShell |
MIT-licensed. Read-only by default wherever "read-only" is a feature, not a limitation.
flowchart LR
U[Users] --> ID[Identity<br/>Active Directory · Entra ID]
ID --> EP[Endpoints<br/>MDM]
ID --> M365[Microsoft 365<br/>SharePoint · Teams Phone]
ID --> CMP[Compute<br/>Windows Server · ESXi · Proxmox · AVD]
CMP --> DATA[Profiles & Data<br/>FSLogix · NAS]
DATA --> BDR[Backup & Recovery<br/>Veeam]
BDR -. tested restores .-> CMP
AUTO[Automation<br/>PowerShell · Bash · Python] -. automate .-> ID
AUTO -. automate .-> EP
AUTO -. automate .-> M365
AUTO -. automate .-> CMP
AUTO -. automate .-> BDR
LENS[Assessment<br/>read-only lenses · drift detection] -. audit .-> ID
LENS -. audit .-> M365
LENS -. audit .-> CMP
classDef core fill:#071120,stroke:#00E5FF,color:#E6F7FF
classDef auto fill:#071120,stroke:#00E59D,color:#E6F7FF,stroke-dasharray:6 4
classDef lens fill:#071120,stroke:#8FB3C7,color:#E6F7FF,stroke-dasharray:2 3
class U,ID,EP,M365,CMP,DATA,BDR core
class AUTO auto
class LENS lens
[2026-07] INFO shipping read-only ops tooling in PowerShell (hardening-lens, infra-pulse, fslogix-doctor)
[2026-07] INFO declaring AVD environments as Bicep IaC (avd-landing-zone)
[2026-07] INFO leveling up Python for infrastructure automation
[2026-07] WARN idea backlog growing faster than free evenings
+ Automate repeatable work
+ Design for recovery, not only uptime
+ Keep changes traceable and reversible
+ Write runbooks for the person who gets paged
+ Prefer robust systems over clever complexity
- Snowflake servers
- Undocumented click-ops
- Changes without a rollback path
- "The backup job was green, so we're safe"# m h dom mon dow command
0 3 * * * pwsh -File Verify-Restores.ps1 # a green backup job is a claim, not proof
30 6 * * 1 ./plan-patch-window.sh # boring on purpose
0 7 1 * * ./review-runbooks.sh # docs rot silently
Or open an issue on one of the repos above — I read those faster than my inbox.
exit 0
Built with Markdown, caffeine, and a healthy distrust of manual click-ops.