Tao Huie-Miles

IT infrastructure engineer · servers, networks, Microsoft 365 and automation

Maidstone, Kent · [email protected] · seyta.ukseyta.uk

Enhanced DBS held: can start with no clearance delay

Open to hybrid roles in Kent and London

370+client businesses supported
400+devices refreshed across two school sites
0ports open to the internet on my AI platform
1,600+automated checks guarding my AI platform

Profile

I'm the engineer critical outages get escalated to. At an MSP supporting 370+ client businesses I look after Windows servers, firewalls and switching, Microsoft 365 and Entra ID, on site and remote, and take failures through to the fix.

Before that I ran a school campus network, led a 400+ device refresh across two sites and moved the school from shared drives to SharePoint Online and Teams. I automate repeat work with PowerShell and Power Automate.

Outside work I designed and run The Foundry, my own AI platform: zero open ports, failover to Azure and 1,600+ automated checks. I do my best work on a small in-house team, taking one problem at a time and staying on it until it's solved. I'm looking for an infrastructure role where I own one environment end to end and automate the repetitive work away.

Key skills

Servers & identity: Windows Server · Active Directory · Group Policy · Entra ID (hybrid join) · DNS · DHCP · RADIUS · Hyper-V
Microsoft 365 & cloud: Exchange Online · SharePoint Online · Teams · Intune · Windows Autopilot · Azure · Google Workspace
Networking & voice: SonicWall · FortiGate · Sophos · Cisco · HP/Aruba · Ubiquiti UniFi · VLANs · VPNs · 3CX · Teams Phone
Security & mail: Defender for Business · Huntress · Sophos Central · SPF, DKIM and DMARC · Smoothwall and Lightspeed filtering
Automation & monitoring: PowerShell · Power Automate · Python · n8n · OpenTelemetry · Azure Application Insights · Power BI
Backup, endpoints & service: Veeam · Synology and QNAP NAS · Mosyle · Jamf · Apple School Manager · PaperCut · ConnectWise · Freshdesk · ITIL SLA management
Platform & AI: Cloudflare Tunnel and Access · OAuth 2.0 / OpenID Connect · FastAPI · Azure AI Foundry · Model Context Protocol · local LLMs (LM Studio)

Experience

Technical Support Engineer · Akita IT

Feb 2025 – present · Maidstone, Kent

Second-line engineer and escalation point for 370+ client businesses, on site and remote. Part of the team named SDI MSP Service Desk of the Year (SME).

Own the outages. Critical server, network and cloud failures escalate to me, and I take them through to the fix.
Invisible maintenance. Out-of-hours patching of Windows servers, backup systems and critical kit, so nobody notices it happened.
Networks top to bottom. SonicWall, FortiGate and Sophos firewalls; Aruba/HP, Cisco and UniFi switching. Sometimes the fix is band steering on an access point; sometimes it's phoning the ISP and waiting politely.
Identity and devices. RADIUS failures, 2FA lockouts, and Entra ID / Intune enrolment faults fixed with targeted registry edits, profile repairs and broker account recovery.
Automate the boring bits. PowerShell scripts and Power Automate flows for onboarding and offboarding, tenant admin, reporting and repeat config changes across Exchange, Microsoft 365 and Entra ID.
First responder on security. Triage detections in Huntress, Defender for Business and Sophos Central: isolate affected machines fast, escalate the serious ones, and pick the quickest safe fix over the textbook one.
Mail that arrives. Deliverability across Microsoft 365, Google Workspace and third-party hosts, with SPF, DKIM and DMARC put right whenever mail lands in spam.
Into the cloud. Help clients deploy and maintain SaaS on Azure Resource Manager as their workloads move.
On site, hands on. Hardware provisioning, rack and patch work, NAS installs and enterprise print deployments (PaperCut, Universal Print).
Plan ahead. Advise on the fix today and the plan for next year: scoping upgrades and equipment changes before they turn into outages.

IT Network Technician · Tunbridge Wells Grammar School

Feb 2023 – Jan 2025 · Tunbridge Wells, Kent

Led a two-site hardware refresh. 400+ Windows desktops and laptops, interactive classroom touchscreens and iPads, planned and rolled out in stages.
Ran the campus network. Cisco and HP/Aruba switching, with separate VLANs for staff, student BYOD, VoIP and CCTV.
Moved the school off shared drives. Migrated to SharePoint Online and Teams, designed the new security groups and policies, then trained staff in person and stayed for the awkward questions.
400+ smart devices, many tools. Macs, iPads, iPhones and BenQ interactive panels, each family with its own management tool: Mosyle, briefly Jamf, and Apple School Manager for over-the-air profiles and app licensing.
Identity and recovery. Active Directory hybrid-joined to Entra ID, Group Policy, and disaster recovery when it was needed.
Safeguarding online. KCSIE-compliant web filtering (Smoothwall, Lightspeed), with SSL inspection certificates deployed to every workstation.
Physical security. Axxon CCTV and security sensors on isolated camera networks, with video storage kept within retention schedules.
The unglamorous essentials. Cat6 terminated and tested, patch panels and UPS systems maintained, storage health and backups always watched. Also trained staff on Bromcom, the school's new MIS.

Technical Support / Logistics Technician · Optomany (DNA Payments)

2022 – 2023 · Kings Hill, Kent

Kept shops taking payments. Support for EPOS hardware and payment terminals (Pax, Verifone, Ingenico).
Network detective work. Diagnosed payment faults across merchant LAN/WAN: DHCP conflicts, gateway dropouts, packet loss.
Ran the queue. High-impact retail outages first, replacement stock coordinated, gateway partners kept in the loop.

Project

The Foundry · my home AI platform

Live at seyta.uk ↗Live at seyta.uk

A multi-service AI platform I designed and run on my own hardware, with friends using it through a public web chat and Discord.

Zero open ports. Every service listens on 127.0.0.1 only. An outbound Cloudflare Tunnel is the one way in, with Cloudflare Access at the edge. Each private service then checks identity again itself: the Portal verifies Cloudflare's signed token, the gateway its own API key.
Access control. One gateway in front of the model enforces API keys, a rate limit of 120 requests a minute, and route and host allowlists. Friends sign in with Discord or Google (OAuth 2.0, OpenID Connect) and wait in an approval queue, with per-person limits and a daily cap on cloud replies.
Failover. A local model on one RTX 3090 answers first. When the GPU is busy or the model stalls, gpt-5-mini on Azure AI Foundry carries on the same conversation.
Monitoring. An owner dashboard with live service status, GPU memory history, p50 and p95 answer times and fallback rate, plus OpenTelemetry traces in Azure Application Insights. Telemetry never stores message text.
Operations. Seven services started, stopped and health-checked by idempotent PowerShell scripts, each managed by its recorded PID, with written reboot, key-rotation and troubleshooting procedures.
Change control. 1,600+ automated checks in 27 suites, attack tests included, gate every change. Every commit is scanned for secrets first.
Measured, not guessed. My own benchmark found a localhost/IPv6 delay and cut the wait for the first word from 4.15 s to 0.16 s.
Built by directing AI agents. Claude, Gemini and a local Qwen work from a shared ledger and task board under my rules.
Stack. Python, FastAPI, SQLite, Git, PowerShell, LM Studio, Azure AI Foundry, and a Model Context Protocol server with 11 tools.