Scott Drinkwater

Dirigí la gestión de incidentes en el TOC de Meta. Ahora mantengo infraestructura en producción para clientes internacionales desde un velero de 47 pies. Soy la persona que detecta lo que se ha roto antes que el sistema de monitorización.

Kia ora — I’m a Kiwi infrastructure engineer who’s built, secured, and run systems from hyperscale data centres to production web platforms. Autistic, which means I spot anomalies in complex datasets faster than most. It’s an operational superpower, not a limitation. Looking for roles where architecture meets implementation — remote UK, permanent or contract.

Scott Drinkwater, ingeniero de infraestructura y seguridad

Qué puedo hacer por tu negocio

Infrastructure engineer who spots what’s broken before the monitoring does

I ran incident command at Meta’s Technical Operations Center — managing SEVs (Severity Events), coordinating cross-team wake-up trees, and routing to DBA, networking, and power teams. That’s where I learned to stay calm when everything’s on fire. Before that: years of CCURE 9000 administration at Meta scale, physical security for critical national infrastructure at LSEG, and training teams on endpoint protection at Gallagher.

Today I run production infrastructure for international clients from my consultancy TechSquad London: 18 servers across Hetzner, DigitalOcean, and InMotion Hosting serving 10+ client domains. Self-hosted Coolify, Nextcloud 9, reNgine for security recon, and Kali Linux. Full email deliverability stack — DMARC, DKIM, SSL across the board. I understand AWS but I’ll find you the right tool at the right price. Cost-effective infrastructure that actually works, not what the vendor rep recommends.

I’m autistic — which means I spot anomalies in complex datasets faster than most. It’s an operational superpower, not a limitation. I live on a 47-foot Hanse 470e sailing yacht in Barcelona. She’s got her own Omada WiFi, Pepwave 5G cellular bonding, and a Raspberry Pi monitoring power and bilge. A floating micro-data centre. Living aboard has taught me more about systems thinking and resource management than any data centre ever could.

  • Experience
    18+ years
  • Location
    London / Barcelona
  • Authorisation
    UK Settled Status · Right to work UK & EU
  • Origin
    New Zealand — proud Kiwi
  • Values
    Teamwork · Knowledge sharing · Direct Kiwi attitude
  • Current
    Consultant · TechSquad London Ltd
  • Seeking roles
    Infrastructure Manager · Senior Security Engineer · SRE (infra focus)

What I bring

88 of 146 products and technologies audited across infrastructure, cloud, security, and physical systems. Full skills audit available on request.

18 years designing and deploying secure network architectures across enterprise, data centre, and maritime environments. Cisco switching, OSPF routing, SD-WAN multi-site bonding, Cloudflare Zero Trust, and structured cabling including fibre.

Cisco switchingPepwave SD-WAN/SpeedFusionOmadapfSenseWatchGuardDrayTekVPNs (IPsec, OpenVPN, WireGuard)Secure tunnelsSD-WAN platformsCloudflare Zero TrustVLANsOSPFStructured cablingFibre

Multi-cloud architecture across AWS, Azure, GCP, and bare-metal providers. 18 servers running production across Hetzner, DigitalOcean, and InMotion. Container orchestration with Docker and Kubernetes, self-hosted Coolify for PaaS, and CI/CD pipeline design for production deployments.

AWSAzureGCPDigitalOceanHetznerVercelCloudflare (WAF, Tunnel, DNS)Docker (Compose, networking)K8s/K9sPodmanOrbstackTerraformCI/CD (GitHub Actions, GitLab CI, Jenkins)Rancher

Zero Trust architecture design, enterprise endpoint protection (ESET training lead, Bitdefender, Defender), SIEM deployment (Splunk, ELK), compliance frameworks (SOC 2, PCI DSS, GDPR), penetration testing, and self-hosted security recon (reNgine, Kali Linux).

ESET Business ProtectionBitdefenderMicrosoft DefenderQualysSplunkELKPenetration testingThreat modellingSOC 2PCI DSSGDPRZero Trust architectureMFA & Identity FederationSSO / SAML / OIDC

Meta TOC — managed SEVs (Severity Events), coordinated cross-team wake-up trees, routed to DBA/networking/power teams. On-call operational leadership across EMEA, managing GSOC escalation and critical outage response across hyperscale infrastructure.

SEV managementTOC operationsCross-team coordinationWake-up treesGSOC escalationRoot cause analysisIncident responseOn-call rotationRunbook authoring

Full IT lifecycle management from procurement to decommissioning. MDM with Intune/Autopilot, service desk platforms (ServiceNow, Zendesk, Freshdesk), backup and disaster recovery with Veeam and Acronis.

ManageEngine SuiteMicrosoft Intune/AutopilotSolarWinds RMMFreshdeskServiceNowZendeskosTicketVeeamAcronisAWS Backup

Hypervisor management across VMware vSphere, Hyper-V, Proxmox VE, and Citrix. Sizing, deploying, and maintaining virtualised infrastructure for enterprise workloads and homelab environments alike.

VMware vSphereHyper-VProxmox VECitrix HypervisorOracle VirtualBox

Production code in Python, TypeScript, PowerShell, Bash, and Go. Full-stack applications with React/Next.js, Node.js, and SQL. Infrastructure automation with Terraform and Puppet. Linux and Windows Server administration.

PowerShellPythonTypeScript / JavaScriptBashTerraform / HCLPuppetPHPGoSwiftNode.jsReact / Next.jsSQLLinux (Ubuntu/Debian/CentOS)Windows Server (AD, GPO, DNS, DHCP)

Core speciality — 10+ years designing and delivering PACS/ACS for hyperscale data centres and critical infrastructure. Gallagher, CCURE 9000, Genetec, Avigilon, and Milestone VMS. End-to-end commissioning of Axis, Bosch, and Commend hardware.

GallagherCCURE 9000GenetecAvigilonMilestoneHikvisionAxisBoschCommendPACS/ACS design

RIBA Stages 2–5 delivery of ICT and security infrastructure for data centres and commercial developments. CAD/BIM review, design specifications, vendor coordination, commissioning, and handover documentation.

RIBA Stages 2–5CAD/BIM reviewDesign specsCommissioningVendor coordinationConfluence/SharePoint/IT Glue

LLM integration and orchestration for content generation and RAG pipelines (OpenAI, Ollama, Gemini). Self-hosted AI inference with LocalAI on Kubernetes. Workflow automation, IoT mesh networking, and macOS automation.

LLM integration (OpenAI, Ollama, Gemini)AI content generation / RSS automationLocalAI self-hosted inferenceComfyUI / Stable DiffusionmacOS UI automationIoT / mesh networking (Meshtastic)

Full email deliverability stack for 10+ client domains: DMARC, DKIM, SPF, SSL certificate lifecycle management, and spam/malware protection. Multi-TLD DNS management, CDN and QUIC configuration. Web server management across OpenLiteSpeed, Apache, and Nginx with cPanel administration.

DMARCDKIMSPFSSL certificate managementSpam/malware protectionEmail deliverabilityMulti-TLD DNSCDN / QUICOpenLiteSpeedApacheNginxcPanel

VoIP/SIP deployment with 3CX and Teams Calling. Linux system administration (Ubuntu, Debian, CentOS). WordPress/WP-CLI site management, structured cabling, fibre termination, and UPS/power monitoring.

VoIP/SIP (3CX, Teams Calling)PaperCutUPS/power monitoringStructured cabling & fibreLinux adminRaspberry Pi/IoTWordPress / WP-CLIMDX / documentation systems

Experiencia

Nov 2024 – Present

Infrastructure & Security Engineer — Consultant

TechSquad London

  • Advising on secure SD-WAN rollout, cloud migration strategy, and physical security design
  • Building SaaS products and developer tooling with Node.js, Next.js, and Docker
  • Cloudflare Zero Trust deployments and Kubernetes cluster architecture
Oct 2023 – Present

Senior Security Engineer

Total Security Protection Ltd

  • Designed advanced IP-based CCTV systems for enterprise clients
  • Led data centre security infrastructure migration projects
  • Deployed enterprise-level security systems across multiple sites
Aug 2018 – Nov 2024

IT Manager

O-Negativ (3D Design Studio)

  • Managed all IT for a 15-seat design studio — Omada switches/WiFi, Pepwave Max Transit multi-WAN bonding, firewalls, render farm
  • Administered ESET Business Advanced Protection across endpoint security, antivirus, and threat monitoring
  • Sole IT manager owning vendor relationships, procurement, security posture, and end-user support
  • Used ManageEngine for remote desktop support, patch management, and IT asset management
Jul 2017 – Oct 2023

Technical Operations Center — Incident Commander & CCURE 9000 Administrator

Meta EMEA (via M.C. Dean)

  • Managed SEVs (Severity Events) — Meta’s critical incident classification system — from the EMEA TOC
  • Coordinated cross-team wake-up trees, routing to DBA, networking, and power teams during major incidents
  • Years of CCURE 9000 administration at Meta scale across hyperscale data centres
  • Delivered physical security systems (CCURE 9000, Genetec, intercoms) for Meta’s EMEA data centre programme
  • Reference: Gavin Singh, UK Services Manager at Meta (M.C. Dean)
2015 – 2018

Security Systems Engineer

London Stock Exchange Group

  • Physical and electronic security for critical national infrastructure
  • Access control system design, CCTV architecture, and intercom integration
  • Commend, Bosch, Axis deployment across LSE campus
Apr 2014 – May 2016

Senior Tech Support & Training Lead

Gallagher Security

  • Ran training programmes for Gallagher access control systems across the UK market
  • Key account manager for top UK universities, financial district sites, and high-profile London venues
  • Security and CCTV project management lead for new developments and existing site upgrades
  • Lead security advisor providing product presentations to consultants and end clients
2008 – 2015

Network & Security Engineer

Various — New Zealand & UK

  • Cisco switching and routing, VLAN design, OSPF
  • Firewall deployment (pfSense, WatchGuard, DrayTek)
  • Structured cabling, fibre, data centre build-out — moved from NZ to London
  • Transitioned from pure networking to security engineering

Work I’ve done

SPANC Portal wastewater inspection dashboard

SPANC Portal — Municipal SaaS Platform

Production SaaS for French municipalities managing wastewater inspections. Offline-first PWA with React 19, TypeScript, Supabase, FastAPI PDF generation, i18n (FR/EN), and Recharts dashboards. Built solo with AI-assisted development, deployed with CI/CD.

React 19TypeScriptSupabaseFastAPIPWA
View project →
ContentPilot AI WordPress plugin architecture

ContentPilot — AI WordPress Plugin

Advanced WordPress plugin for AI-driven content generation with multi-LLM routing (OpenAI, Claude, OpenRouter), SEO optimisation via RankMath, RSS filtering, scheduled publishing, and fallback handling. Production-deployed.

WordPressOpenAIClaudeRankMathPHP
github.com/scottnzuk/ContentPilot →
Commodore Yachting sailing school website

Commodore Yachting — Hosting & DevOps

Full IT management for a 25+ year RYA sailing school in Gosport Marina. Dockerised WordPress hosting (OpenLiteSpeed + MariaDB), SSL management, SEO optimisation, content strategy, and Tripadvisor/Google review management.

DockerWordPressOpenLiteSpeedSEODevOps
View project →
Natural NZ Pet Food WooCommerce store

Natural NZ Pet Food — WooCommerce Store

Full IT management for a NZ-based natural pet food e-commerce store. WooCommerce/WordPress with Elementor, product catalogue, cart/checkout, customer accounts, shipping configuration, and email marketing integration.

WooCommerceWordPressElementorE-Commerce
View project →
Meta hyperscale data centre Dublin

Meta Dublin — Greenfield Data Centre Build

Key engineering contributor for Meta’s greenfield hyperscale data centre in Clonee, Dublin. Managed ICT and security infrastructure design, vendor coordination, commissioning, and integration with MEP works. All phases delivered on time and within budget.

CCURE 9000GenetecCommendICT InfrastructureData Centre
View project →
Global Switch London data centre campus

Global Switch London — Data Centre Campus

Full system migration and greenfield design for London data centre campus. End-to-end delivery including stakeholder coordination, vendor management, and commissioning. Detailed design specs, CAD/BIM drawings, and technical documentation.

CAD/BIMSecurityICTNetworkData Centre
View project →
Meta EMEA multi-site infrastructure migration

Meta EMEA — Multi-Site Infrastructure Migration

Planned and executed zero-downtime migration of critical infrastructure across 4 new EMEA data centre facilities. Designed phased migration strategy with redundant failover, maintained 100% availability during all live cutovers. Standardised approach adopted as EMEA regional template.

MigrationCCURE 9000GenetecZero DowntimeEMEA
View project →
Meta Reality Labs Cork Ireland office

Meta Cork — Reality Labs Office Fit-Out

Security and ICT infrastructure for Meta’s Reality Labs R&D office in Cork City centre (Capitol Building, Grand Parade). Access control, CCTV, and network design for hardware engineering and semiconductor R&D facility housing 90+ researchers across 30 nationalities.

Access ControlCCTVNetworkR&D LabIreland
View project →
Meta London office Brock Street Kings Cross

Meta London — Office Infrastructure (Brock Street & King’s Cross)

Physical security systems and ICT infrastructure for Meta’s London offices at 10 Brock Street, Regent’s Place and the King’s Cross campus. Access control, CCTV, and intercom deployment across 320,000 sq ft of West End office space.

Access ControlCCTVCommendLondonOffice Fit-Out
View project →
London Stock Exchange Group security infrastructure

London Stock Exchange Group — Critical National Infrastructure

Physical and electronic security for critical national infrastructure at LSEG’s London campus. Access control system design, CCTV architecture, and intercom integration. Commend, Bosch, and Axis deployment across the trading floor and campus facilities.

CNIAccess ControlCCTVCommendBosch
View project →
Tekjump independent IT consultancy The Shard UCL

Tekjump LTD — Independent IT & Systems Consultancy

Founded and operated independent IT consultancy delivering enterprise infrastructure architecture, system integration, and technical advisory. Clients included The Shard, King’s College London, UCL, National Grid, and City Bank. Managed full business operations and project delivery.

ConsultancyEnterprise ArchitectureThe ShardUCLNational Grid
View project →
AI developer tools WordPress plugin Chrome extension

AI Developer Tooling — WordPress Plugin & Chrome Extension

Built and published AI-powered developer tools: an automated WordPress news aggregation plugin with AI-generated summaries (OpenAI), and a curated AI prompt library Chrome extension. Both published and available on GitHub and the Chrome Web Store.

WordPressOpenAIChrome ExtensionJavaScriptPHP
github.com/scottnzuk →

What people say

Scott is a highly skilled individual, a great communicator, a people’s person and someone who delivers. He is an asset and would add value to any company he walks into.

Gavin Singh UK Services Manager at Meta (M.C. Dean)

Scott kept our studio running through some of the most intense production cycles. When you’re a 3D design studio with tight deadlines, you can’t afford IT downtime. He designed our network, managed the render farm, and handled everything from security to end-user support. A rare mix of deep technical knowledge and genuine people skills.

Creative Director O-Negativ (3D Design Studio)

Hablemos

¡Gracias por escribirme! Te responderé lo antes posible.