Victory Christian Centre

Systems Administrator & Infrastructure Lead

Cloud VoIP / SIP UniFi SDN Microsoft 365 Structured Cabling Live Broadcast

Network Backbone & TCO Strategy

The Bottleneck: Identified a legacy 100Mbps Fast Ethernet switch on Day One that was throttling the entire office campus.

I standardized the campus on a modern UniFi ecosystem. I chose to stick with UniFi specifically because it allowed for a "Single Umbrella" management style with zero ongoing subscription costs, protecting the Trust from the annual "hardware tax" common in enterprise networking.

  • Established a 1000Mbps Gigabit backbone, increasing throughput by 10x.
  • Decommissioned fragmented legacy gear in favor of a UniFi UDM-SE and PoE Switching.
  • Restored structured cabling in secondary buildings, terminating into a new 24-port patch panel.
Operational Wins
  • 10x Network Speed Increase
  • $0 Annual Hardware Subscriptions
  • Restored Reception-to-Accounts Link
  • 100% Mobile Workforce Ready

Cloud VoIP & Communication Logic

The Failure: Circular transfer loops meant Reception could not call the Accounts office due to "Shared Extension" collisions.
1:1 Extension Provisioning

Migrated the organization to a Cloud PBX with unlimited extensions for just $5/mo extra. Every staff member was given a unique digital identity, finally allowing seamless internal transfers and direct-dialing.

The Frustration: Legacy cordless phones were causing dropped calls due to failing batteries and poor range.
Softphone & Headset Migration

Eliminated physical technical debt by decommissioning all cordless phones. Transitioned the office to USB/Bluetooth headsets and softphone apps, ensuring reliability and allowing staff to take calls from any laptop.

Automation: Auto Attendant & Fail-Safe Queues

To reduce the administrative burden on reception, I engineered a logic-driven Auto Attendant (IVR). Callers can now select their destination (e.g., "Press 1 for Accounts"). I implemented a Fail-Safe Queue so if no option is selected, the system "blasts" all office phones, ensuring no call is ever abandoned.

Identity & Data Sovereignty

Entra ID & MFA

Replaced fragmented local accounts with centralized Microsoft Entra ID. Enabled Single Sign-On (SSO) and enforced MFA, securing the organization's digital perimeter.

SharePoint Governance

Moved the "Server" from a personal OneDrive to SharePoint Online. Implemented Role-Based Access Control (RBAC) to ensure departmental data remained secure yet accessible.

Endpoint Modernization & Autopilot

Transition to Zero-Touch Deployment
The Legacy Process: No standardized "Magic Image" or deployment plan existed. Every machine was manually configured, with software and security updates installed one-by-one—a process taking hours per device.

I modernized the asset lifecycle by implementing Microsoft Intune and Windows Autopilot. This allowed the organization to move from "Manual Setup" to a cloud-based provisioning model.

Automated Software Delivery

Configured Intune to push essential apps (M365, ProPresenter, Security Tools) automatically upon first login, ensuring every staff member had the exact same "Ready-to-Work" experience.

Value-Driven Procurement

Strategically sourced high-spec refurbished hardware, using Autopilot to "re-provision" them to enterprise standards, saving the Trust thousands in capital expenditure.

Modernization Impact
  • 90% Reduction in setup time per device.
  • Enforced Compliance: BitLocker and MFA are now mandatory, not optional.
  • Cloud-Ready: Machines can now be shipped directly to a remote staff member's home and be fully configured over Wi-Fi.

Managed Communications & Exchange Governance

Enterprise Mail & Data Sovereignty

I led the migration to Exchange Online, transforming a fragmented email setup into a governed enterprise environment.

  • Global Address List (GAL) Standardization: Audited and standardized all internal email addresses and display names, creating a professional, searchable company directory.
  • Shared Mailbox Optimization: Converted departmental accounts (e.g., accounts@, office@ info@) into Shared Mailboxes. This enabled collaborative access for the team while reducing licensing costs and improving security.
  • Automated Compliance: Implemented a Global Transport Rule to append a standardized legal disclaimer to all outgoing domain emails, ensuring professional branding and regulatory compliance.
Admin Impact
License Optimization Reduced monthly OpEx by utilizing Shared Mailboxes for non-human identities.
Staff Continuity Ensured department mail remains accessible during staff turnover without data loss.
Legal Compliance Automatic disclaimers protect the Trust from liability in external communications.

Hybrid Operations & Teams Room Integration

Value-Engineered Microsoft Teams Room (MTR)

To facilitate hybrid meetings, I engineered a custom Microsoft Teams Room system for the main meeting space, delivering a $5,000 enterprise experience at a fraction of the cost.

  • Hardware Recycling: Repurposed high-spec 2nd-hand Mini-PC hardware to act as the dedicated MTR compute module, running a specialized Windows IoT/MTR image.
  • Peripheral Integration: Sourced and calibrated professional-grade wide-angle cameras and omnidirectional microphones to ensure high-fidelity audio and video for both in-person and remote participants.
  • User Experience: Configured a dedicated "Resource Mailbox" in Exchange, allowing staff to book the room and join meetings with a single click—eliminating the "cable-swap" frustration of traditional laptop-to-TV setups.
Project Specs
Dedicated MTR Account Single Display Support One-Touch Join Simple operation

The "Cheap vs. Value" Argument:

"By leveraging refurbished enterprise hardware and specialized software configuration, I provided a seamless hybrid meeting experience that would typically require a significant capital expenditure, proving that technical skill can overcome budget constraints."

Live Broadcast & Media Production

Lead Broadcast Operator & AV Engineer

Beyond the IT infrastructure, I served as the primary technical operator for all live broadcast services, ensuring 100% uptime for high-traffic digital streams. This was a volunteery position. however i did do work during the week to support it.

  • Video Engineering: Selected and calibrated the multi-camera array, optimizing for low-light environments and ensuring color consistency across all broadcast feeds.
  • Live Vision Mixing: Operated the video switcher during live services, managing camera transitions, digital lower-thirds, and playback content via ProPresenter 7.
  • Digital Audio Engineering: Managed broadcast audio mixes, balancing live sound reinforcement with a dedicated "wet" mix for the digital audience to ensure studio-quality clarity.
  • Front of House Engineering: Steped in to Manage the front of house audio mixes, when people were sick.
  • ProPresenter 7: I managed the weekly creation of the presentation for the sunday service. this was done during the working week.
Production Stack
Signal Flow Management Configured NDI and SDI signal paths to link the production booth with secondary sanctuary displays.
Acoustic Optimization Tuned the digital audio console (EQ/Compression) to handle dynamic live speakers and musical performances.
Success Metric: 0 Stream Failures in 6 Months

Technical Stack utilized at VCC

UniFi UDM-SE SIP / VoIP IVR Logic Entra ID Intune Autopilot Exchange Online SharePoint Online Structured Cabling