Ifeanyi David Ndueze

IT Systems Manager

Ifeanyi David Ndueze

IT Systems Manager

IT professional with over twenty years in systems administration and support, and experience leading a technical team. I have run Windows Server and Active Directory environments, managed multi-site desktop and server estates, held responsibility for patching, backup and continuity, and led a team of seven technicians across concurrent client projects. I currently build and operate cloud platforms of my own, which keeps the technical judgement current — and I work in a safety-critical regulated environment where procedure is followed without deviation, which is the same discipline good change management asks for.

  • Wellington, New Zealand
  • NZ residence visa, full working rights
  • Open to NZ-remote
  • Twenty-plus years in IT infrastructure

Twenty years in systems administration and support

Every figure on this page comes from a repository or a migration I ran.

  • 9 services in the stack Trading SaaS platform
  • 0 mailboxes lost Cloud hosting stack
  • 300 GB mail migrated Cloud hosting stack
  • 10 Django applications Learning platform
  • SSM Parameter Store
  • AWS KMS
  • Oracle Cloud (Ampere ARM64)
  • HestiaCP
  • GitHub Actions
  • Docker Compose
  • Django migrations
  • pytest
  • restic
  • Backblaze B2
  • imapsync
  • Linux (Ubuntu, ARM64 and x86)
  • nginx
  • Passenger / WSGI
  • PostgreSQL
  • TimescaleDB
  • MySQL
  • MariaDB
  • Redis
  • FastAPI
  • Django
  • Celery
  • Next.js
  • Cloudflare (DNS, strict TLS, Email Routing)
  • SPF / DKIM / DMARC
  • Python
  • TypeScript
  • Bash

2001 — present

Experience

  • 2022–present

    Independent Cloud & Systems Engineering Consultant

    Wellington, New Zealand

    • Design, build and operate cloud platforms end to end: infrastructure, application, delivery pipeline and deployment are all mine.
    • Replaced a client’s managed hosting with a self-run stack on ARM64 cloud infrastructure, including a 300 GB mail migration completed with no mailboxes lost.

  • 2022–present

    Able Seafarer (Deck)

    Coastal passenger ferry operations, New Zealand

    • Concurrent with consulting work, in a safety-critical regulated environment operating 24/7.
    • Procedure is followed without deviation, and operational and defect records are kept accurately to regulatory standard — the same discipline good change management asks for.

  • 2019–2022

    Systems Support Engineer

    Port Harcourt, Nigeria

    • Diagnosed, resolved and escalated hardware, software and network faults across a multi-site estate.
    • Administered Windows systems, user accounts and access controls across sites.
    • Owned proactive monitoring, scheduled maintenance, patching and backups.
    • Documented configuration and known issues so work could be handed over and audited.

  • 2005–2018

    Systems Support Specialist

    Port Harcourt, Nigeria

    • A thirteen-year engagement supporting a diverse client base, including a media and entertainment group and a radio station.
    • Acted as trusted point of contact and technical advisor, translating business requirements into technical solutions.
    • Explained the impact and severity of issues to non-technical stakeholders, and recommended network improvements.
    • Managed shared hosting environments, domain configuration and web deployments.

  • 2003–2005

    Systems Support Technician

    Abuja, Nigeria

    • Led a team of seven technicians across concurrent client projects — assigning work, providing technical guidance and ensuring delivery to schedule.
    • Ran Windows Server and Active Directory environments: user accounts, group policy and network access controls.
    • Supported mixed Windows and macOS local area networks.
    • Delivered end-user training across varying levels of technical literacy.

  • 2001–2002

    Systems Technician

    Lagos, Nigeria

    LAN support and application training.

What I built, and why

Projects

Trading SaaS platform

Live in paper mode
  • 9 services in the stack
  • 32,926 lines · execution engine
  • 115 commits · web platform
  • 210,107 rows of market data backfilled

The constraint

One ARM64 host in a single region has to run the whole platform, and it holds other people’s exchange API keys.

The decision

Nothing on that server is changed by hand. Every change goes local → commit → push → server pull, and the production schema is committed to git as the single source of truth.

The evidence

  • Deploy protocol is local → commit → push → server pull. The server is never edited directly.
  • The same nine-service Compose stack runs locally as staging, so what is tested is the shape of what runs.
  • Runs on Oracle Cloud in Sydney, Ubuntu 22.04 on ARM64, live in paper mode.
  • Python
  • FastAPI
  • Next.js
  • TypeScript
  • Celery
  • PostgreSQL
  • TimescaleDB
  • Redis
  • Docker Compose
  • Oracle Cloud (Ampere ARM64)
  • SSM Parameter Store
  • AWS KMS
  • nginx
  • Cloudflare (DNS, strict TLS, Email Routing)
  • GitHub Actions

Cloud hosting stack

for a commercial hosting client Infrastructure — no repository
  • 300 GB mail migrated
  • 1 TB block volume
  • 0 mailboxes lost

The constraint

Outbound port 25 is blocked on the cloud provider, and 300 GB of live mail had to move off managed hosting without an outage.

The decision

Migrate incrementally with repeated imapsync passes so the cutover was a short final delta, and route outbound mail through an authenticated relay on 587 with SPF, DKIM and DMARC left intact.

The evidence

  • 300 GB of mail migrated off cPanel using incremental imapsync passes, so the cutover was a short final delta rather than an outage. No mailboxes were lost.
  • Backups run restic to Backblaze B2, and are verified by restoring from them rather than by checking a green tick.
  • HestiaCP
  • Oracle Cloud (Ampere ARM64)
  • Linux (Ubuntu, ARM64 and x86)
  • imapsync
  • restic
  • Backblaze B2
  • Cloudflare (DNS, strict TLS, Email Routing)
  • SPF / DKIM / DMARC
  • Bash

Learning platform

for a mission and training resources centre
  • 10 Django applications
  • ≈20,800 lines

The constraint

Shared cPanel under Passenger and WSGI: no root, no containers, no systemd, no persistent workers — and a live WordPress site whose users had to come across without anyone being asked to reset a password.

The decision

No LMS, CMS or e-commerce library. The quiz engine, grading, progress tracking and certificate generation are all first-party code, because the libraries that would have done that work could not survive the deployment target.

The evidence

  • Deployment is test-gated rsync over SSH, with a MariaDB 10.11 service container in CI matching production and a concurrency guard preventing overlapping deploys.
  • Django
  • Python
  • MariaDB
  • MySQL
  • Passenger / WSGI
  • Django migrations
  • GitHub Actions
  • pytest

Each one links to where it was used

Capabilities

Networking & Security

Observability & Operations

Cloud Platforms

IaC & CI/CD

Data & Storage

Application & Web

Languages

Formal training

Education & certifications

  • Level 7 Diploma in Cloud Engineering 2026
  • AWS Solutions Architect – Associate (SAA-C03)
  • Simplilearn training certificates AWS Solutions Architect – Associate track, completed 2025
  • CCNA 2010
  • Diploma in Computer Engineering 2000

The same record, a different emphasis

Other versions of this profile

By email or phone

Contact

Open to IT systems management and team lead roles.

david@ndueze.com +64 22 423 3173 github.com/DavidIfeanyichukwu