Mark Milenkovic

Grew from a contract Infrastructure Engineer role into the permanent Architect position, and now carry technical ownership of both the resilience/networking estate and, since late 2025, the identity & access governance programme.

• Redesigned the platform's disaster recovery architecture: an NSX-based metro cluster giving VM mobility across datacentres with no network reconfiguration, backed by synchronous Pure Storage replication in place of the previous asynchronous design — closing the gap between "recoverable" and "resilient."
• Led adoption of VMware NSX as the software-defined networking platform, now being extended into micro-segmentation across the estate.
• Led mapping of business and technical services into ServiceNow CSDM, giving the organisation a common model linking infrastructure components to the services they support for incident and change impact analysis.
• Led design and delivery of an Okta Identity Governance (OIG) access-governance rollout for a regulated business unit — role-based entitlement model, tiered certification design, and an automated revoke-to-ServiceNow workflow with built-in verification.
• Ran a capability assessment of Okta Privileged Access against the incumbent PAM tooling, producing an evidence-based phased replacement recommendation rather than one driven by vendor roadmap dates.
• Authored an Architecture Review Board paper and RFC on an identity-assurance gap in Service Desk-assisted credential recovery, presenting options against recognised assurance-level frameworks for board decision.
• Built Okta Workflows automation integrating HR, ServiceNow and Okta for joiner/mover/leaver processing, and reviewed a custom Okta↔IBM i SCIM connector, producing an improvement roadmap for its role-assignment and directory-provisioning logic.

• Technical lead for formulating the datacentre migration strategy, ahead of the metro cluster/DR redesign that followed.
• Designed and implemented the disaster recovery process across current and target-state platforms, selecting and integrating multiple vendor technologies to bring down RTO/RPO.
• Ongoing technical advisory role on emerging technologies and techniques for the Infrastructure team's roadmap.

• Delivered an SCCM and Windows 10 Enterprise-based streamlined desktop OS deployment platform, with planned upgrade lifecycles for ongoing maintenance.
• Packaged applications and defined criteria-driven device collections for targeted application rollout.
• Resolved legacy application compatibility issues and pre-requisites blocking the rollout.
• Built security-hardened Group Policy baselines aligned to Microsoft hardening recommendations, and rolled out BitLocker/MBAM disk encryption.

• Supported the infrastructure team through a server expansion project.
• Implemented a containerised Prometheus monitoring solution (Rancher/Docker) with a long-term storage backend.
• Provided general Linux environment support and BAU operations.

Technical and team lead responsible for maximum uptime of the hardware, hypervisor and SAN estate. Delivered several large projects and initiatives:

• vBlock matrix upgrades — coordinated across teams to upgrade production and DR vBlocks with no impact to business-critical trading platforms, fully compliant with VCE (Dell) matrix versions.
• EMC VNX / Unisphere — owned the critical block and file storage infrastructure: maintenance, system reviews, storage pool/RAID group and host group creation.
• vRealize monitoring & capacity planning — implemented vBlock/vCenter-integrated monitoring for stress points and fault-finding, and used it to drive capacity policy — reclaiming over-provisioned capacity and mitigating at-risk under-provisioning.
• P2V and V2V migrations — migrated critical business platforms into the virtual estate, and built out dedicated dev/test silos.
• VMware Horizon suite — led a team implementing Mirage and Identity Manager, enabling the End User Services team to roll out a new desktop estate.