Security leadership
Risk-aware strategy. Strong governance. Measurable outcomes.
01 Security · Infrastructure · Architecture
KELVIN
VELDMAN
Security Officer. Infrastructure Architect. Practical Builder.
I turn complex IT environments into secure, workable systems.
Explore my workSystem statusAll systems secure
Governance & risk
User & accessMFA · SSO · RBAC
Identity & securityPIM · CA · Policy
Platform & servicesCompute · Data · Network
InfrastructureHost · Virtualization · Backup
OperationsMonitor · Automate · Respond
Telemetry & feedback
Data protection
Microsoft cloud & infrastructure
Architecture that is secure, resilient and built to scale.
MSP engineering
Practical systems and automation that make teams effective.
// OPERATING PRINCIPLE
Security only works when
people can work with it.
I connect strategy to implementation: from identifying risk and setting direction to configuring the platform, documenting the control and helping the team own it.
02 // CAREER LOG
Built from the
engine room up.
My route into security leadership runs through hands-on engineering. That means decisions stay grounded in how systems—and the people using them—actually behave.
JUN 2026 — NOW
Managed Service Provider
Security Officer
Setting the security direction for a growing MSP while staying close to engineering, architecture and operational reality.Security strategyNIS2GovernanceZero Trust
2024 — MAY 2026
Westers Automatisering & Consultancy
Senior Network & Cloud Architect
Owned architecture choices and technical standards across networking, Microsoft 365 and Azure; led complex migrations, contributed to product development and guided engineers and interns.ArchitectureTechnical leadershipProduct developmentStandards
SEP 2021 — 2024
Westers Automatisering & Consultancy
Network & Cloud Engineer
Worked across the full MSP stack: customer support, Microsoft cloud, Windows Server, networking, security, telephony, migrations and the stubborn issues that did not fit neatly into one product box.All-round MSPMicrosoft cloudNetworkingInfrastructure
JUN 2019 — SEP 2021
Manetti IT
ICT All-round Engineer
Managed and troubleshot customer environments onsite and remotely, covering Windows Server, Microsoft 365, Exchange, Azure, VMware, networking, telephony, hardware lifecycle and monitoring.Customer engineeringVMwareWindows ServerSolarWinds
03 // SELECTED WORK
Case files
Representative work, generalized to protect customer environments.
A security baseline designed to scale across 250+ tenants
Initiated and developed a standardized Microsoft 365 architecture spanning Conditional Access, compliance, device management, security controls and automated PowerShell deployment.
Designing multi-site infrastructure across 60+ locations
Designed and optimized scalable network environments using segmentation, routing, switching, secure VPN connectivity, firewalling and proactive monitoring.
From inherited risk to a workable security roadmap
Mapped technical and process risks across endpoints, identities, networks and administrative access, then translated them into a prioritized improvement programme.
Multi-tenant Microsoft 365 detection concept
Designed a monitoring approach for identity, file, mail and application activity, with actionable alerts for risky sign-ins, OAuth abuse and persistence techniques.
Moving 100+ customers from on-premises to Microsoft 365
Delivered customer migrations ranging from large, full on-premises cutovers to smaller hands-on transitions, then designed secure Microsoft 365-only foundations that customers could grow into.
Deep experience in Dutch first-line healthcare infrastructure
Supported and modernized infrastructure for primary healthcare organizations, where availability, secure access, specialized applications and reliable local operations directly affect patient-facing work.
04 // CAPABILITY MAP
Where I operate
Broad enough to see the system. Deep enough to change it.
Security & governance
NIS2 readinessRisk & control designIncident responseZero TrustLeast privilegeSecurity roadmaps
Microsoft 365
Tenant architectureEntra IDConditional AccessIntune & AutopilotDefenderExchange OnlineTeams & SharePoint
Azure & hybrid cloud
Azure architectureHybrid identityRBACSecure networkingAVD & FSLogixCloud migrationsPowerShell deployment
Networking
CiscoFortinetMikroTikAruba & UbiquitiBGP & OSPFVPN & segmentationPacket analysis
Systems & MSP operations
Windows ServerActive DirectoryVMware & Hyper-VLinuxBackup & recoveryRMM toolingTelephony
Automation & improvement
PowerShellAPIsDockerMonitoringTechnical standardsProduct developmentProcess design
05 // PRODUCT KNOWLEDGE
The full
technical tree.
Search or explore the platforms, products and technical domains I have worked with throughout my MSP career.
Microsoft 365
23 nodesArchitecture & governance5
- End-to-end Microsoft 365 architecture
- Standardized M365 baseline architecture
- Security and governance frameworks
- Tenant governance and lifecycle management
- Compliance design
Baseline & standardization5
- Security and configuration baselines
- Conditional Access standardization
- Compliance and device policies
- PowerShell tenant deployments
- Scalable multi-tenant management
Core services4
- Exchange Online & hybrid mailflow
- SharePoint Online & OneDrive
- Microsoft Teams governance
- Power Platform integrations
Identity & security4
- Entra ID, IAM & RBAC
- Zero Trust implementation
- SOC / SIEM service development
- Defender configuration & response flows
Endpoint management3
- Microsoft Intune
- Windows Autopilot
- MDM & compliance policies
Innovation2
- Microsoft Copilot governance
- Security posture optimization
06 // CREDENTIALS
Built knowledge.
Proven practice.
A selected view of the technical education and certifications behind the hands-on experience.
012025
Certification
Fortinet NSE Level 1 & 2
022021
Certification
MikroTik Certified Routing Engineer
032021
Certification
MikroTik Certified Network Associate
042019
Certification
ITIL v3
052017 — 2020
LOI education
Server & Network Architect
062019
Technical education
System Engineer
07 // OUTSIDE THE RACK
A systems thinker,
even off the clock.
I’m a self-described geek from Lelystad who enjoys understanding how complicated things fit together. That shows up at work, but also in the worlds, games and small technical experiments I build for fun.
Direct, curious and practical: I like a difficult problem, honest communication and solutions that survive contact with reality.
Complex systems, improvisation and bringing different personalities through one shared story.
Designing progression, balance and mechanics for long-running personal projects.
Linux, servers, Docker and Raspberry Pi projects—because learning rarely ends at 17:00.
I enjoy mastery, iteration and the kind of challenge that makes the next attempt better.
AVAILABLE FOR A GOOD TECHNICAL CONVERSATION
08 // ESTABLISH CONNECTION
Have a complex environment
that needs clear direction?
Let’s talk security, architecture or the stubborn technical problem nobody has managed to untangle yet.