Expertise

I am a Senior IT Infrastructure Engineer with eight years of production delivery across regulated financial and industrial environments in Europe — including banking infrastructure operating under PCI DSS, PSD2, and GDPR, SEPA Instant Payment systems, Active Directory consolidations at enterprise scale, and OT/IT convergence in critical industrial operations.

My experience is not theoretical. Every capability represented in this portfolio was designed, deployed, and validated in live enterprise environments — under regulatory scrutiny, with real business continuity requirements, and with no tolerance for failure.

Current and recent work spans Eurobank Luxembourg, where I architect and operate infrastructure supporting real-time financial transaction processing, multi-site distributed systems, and compliance-grade security operations across a regulated banking environment.

Prior to banking, I delivered infrastructure transformation across medical device manufacturing, public sector shared services, hybrid cloud adoption for SME environments, and industrial OT/IT integration — building a breadth of regulated and operationally demanding contexts that shapes how I approach every infrastructure problem.

Engineering Perspective

My approach to infrastructure is built on a single premise: reliability, security, and operational sustainability are not features to be added later — they are design constraints that must be present from the first architecture decision.

Resilience is designed in, not bolted on. High-availability architecture, multi-site redundancy, and tested failover strategies are not afterthoughts. They are structural requirements defined at the design stage. Sustaining 99.99% uptime across SEPA Instant Payment infrastructure — where a failure is a regulatory event, not just an outage — requires that every component, dependency, and recovery path is accounted for before a single server is provisioned.

Security is integrated, not retrofitted. Zero Trust principles, network segmentation, PKI, and identity governance are embedded into infrastructure architecture from inception. In regulated banking environments, security controls applied after deployment consistently fail audits and create remediable risk. Embedding WAF controls, audit logging, and access governance into the SEPA payment platform before go-live — rather than after a compliance review — is the only approach that holds under PCI DSS scrutiny.

Automation eliminates operational fragility. Manual operational processes are a reliability risk. PowerShell and PowerCLI-driven automation reduced VM provisioning time by 50% and cut manual operational overhead by 30% in production environments — not by replacing engineering judgment, but by removing the human error surface from repeatable tasks.

Observability is an operational requirement, not a reporting tool. Infrastructure without centralised, real-time visibility is infrastructure you cannot trust. Monitoring and alerting frameworks built around Zabbix, Grafana, and PRTG are not dashboards for management — they are the operational nervous system that enables early incident detection, data-driven capacity planning, and mean time to resolution that stays low under real load.

Complexity is a risk that must be actively managed. Active Directory environments fragmented across three forests and six domains do not just create administrative overhead — they create governance gaps, audit exposure, and security risk. Consolidating 10,000+ directory objects into a unified architecture eliminated that complexity. Long-term infrastructure health depends on making the environment simpler to operate, not just more capable.

Technology Ecosystem

Infrastructure & Cloud

Microsoft Azure • Windows Server • Linux (RHEL) • VMware • Hyper-V • Entra ID

Security & Identity

Active Directory • PKI • WAF • VPN • FortiGate • Zero Trust Security

Automation & Operations

PowerShell • Bash • Terraform • Infrastructure Automation

Monitoring & Reliability

Zabbix • Grafana • PRTG • Nagios • Veeam • DFS Replication

Credentials

Microsoft Certified: Windows Server Hybrid Administrator Associate Microsoft · Issued Sep 2022 · Expires Sep 2026 Verify: learn.microsoft.com/api/credentials/share/en-us/SergeFumey-0561/954DDAB9CB468F6A

Specialization Certificate: Building Cloud Computing Solutions at Scale Duke University via Coursera · Completed Feb 2025 Verify: coursera.org/verify/specialization/VH557ENE25KN Courses: Cloud Computing Foundations · Cloud Virtualization, Containers & APIs · Cloud Data Engineering · Cloud Machine Learning Engineering & MLOps

Specialization Certificate: Information Assurance Analysis Johns Hopkins University via Coursera · Completed Feb 2025 Verify: coursera.org/verify/specialization/CFY8O8XM3K4Y Courses: Cybersecurity Foundations · Advanced Network Security & Analysis · AI for Industrial Control Systems Security

Master's Degree — IT Systems and Network Engineering Management CESI · Oct 2017 – Oct 2019 Thesis: Design and implementation of a resilient, high-availability system and network infrastructure for multi-site enterprise environments.