MitsAIMicheal Thompson
Off

INFRASTRUCTURE / SOFTWARE / AI

Micheal Thompson

Infrastructure & Cloud Engineer | Citrix | Automation

I connect infrastructure and code to understand why systems fail — and build practical ways forward. Explore 10+ years across infrastructure and software development through the investigations, platforms, automation and AI workflows behind my resume.

Gold Coast, QLD, Australia

Download resume (PDF)Word version (DOCX)
View experience
Micheal Thompson wearing a navy polo shirt with the blue and cyan MitsAI logo
Micheal ThompsonMitsAI

01 / PROFESSIONAL EXPERIENCE

Built on practical experience.

Enterprise delivery, code-level investigation and a practical understanding of the systems people rely on.

XoomAI · AI Deployment Engineer · May 2026 – Jul 2026 (Contract)

Delivered six client AI deployments with MCP integrations, shadowing users one-on-one to identify automation opportunities and build workflows around the way each user works.

  • Integrated APIs and Model Context Protocol (MCP) servers for Xero, Google Workspace, Microsoft Graph/Microsoft 365, SprintSuite, XPlan, Monday.com and Zernio.
  • Configured OpenAI workflows with a Kimi fallback and Gemini image processing, including workflow guardrails and safeguards.
  • Integrated Firecrawl for web research and information gathering in financial advisory workflows.

Cloud Crowd · Modern Workplace Engineer · Oct 2023 – Nov 2025 (Contract)

Engagement for Suncorp. Contributed to the migration from on-premises Citrix to Citrix Cloud on Azure in a 20,000-seat environment. Worked within a team of about five engineers plus a project manager that remediated 4,000+ defects across 1,000+ applications.

  • Reproduced a vendor defect with socket-level code, isolating application and network behaviour and providing actionable evidence to vendors and network engineers.
  • Traced Configuration Manager build failures to NTP clock drift and domain authentication. Automated post-reboot drift monitoring, time resynchronisation, DNS/DHCP refresh and diagnostic logging.
  • Built App-V infrastructure and automated cross-region disaster-recovery replication; documented the design and transferred operational knowledge to the managed service provider.
  • Reverse engineered a legacy VBScript launcher and rebuilt its dependencies in PowerShell with graphical interfaces and dynamic endpoint assembly based on developer naming conventions. Packaged and deployed the replacement as a seamless Citrix application for secure access to AWS-hosted resources.
  • Resolved Windows 11 deployment and application packaging defects through task-sequence fixes, repackaging and dynamic user/machine configuration changes.

Intuit Technologies · Enterprise Engineer · Apr 2023 – Oct 2023 (Contract)

Sole engineer on an OS uplift across roughly 500 servers. Resolved Level 3 escalations and improved Citrix performance through profile configuration and User Profile Management changes.

  • Maintained asset and status tracking for the project manager.
  • Deployed Network Detective Pro across 10 customer locations.
  • Contributed to ThreatLocker and Qualys implementations across multiple sites and completed vendor training.

Claratti · Systems Engineer · Oct 2018 – Feb 2023

Designed, administered and troubleshot Citrix and Remote Desktop Services environments. Developed Claratti Workspace authentication and session controls to enforce additional two-factor authentication checks beyond initial login.

  • Built early-stage Azure Virtual Desktop proofs of concept as a lower-cost alternative to Citrix.
  • Developed an Electron/Node.js wrapper around Citrix Workspace for authentication and session controls.
  • Supported complex applications and Level 1–3 escalations, and maintained in-house software.
  • Managed Veeam and MSP360 backups and restoration activities.
  • Maintained technical documentation and supported change management and project delivery.

Freelance · Game Developer · 2014 – 2018

Developed game features, reproduced and resolved player-reported defects, and delivered documented code to agreed deadlines.

    03 / ALL ENGINEERING WORK

    Follow the problem. Find the story.

    From a clock-drift failure to a custom socket client: the investigations, decisions and practical work behind the outcomes.

    12 stories

    01 / INVESTIGATION & AUTOMATION

    Delivered

    The deployment fault that started with time.

    Large financial services organisation

    Tracing Configuration Manager build failures through clock drift and domain communication, then automating recovery after reboot.

    1. Build failures
    2. Clock drift + domain communication
    3. Automated recovery
    Configuration ManagerNTPDomain authenticationDNS / DHCP

    Builds and authentication recovered through an automated workaround, with the underlying timing dependency still requiring remediation.

    Read the story
    02 / SOFTWARE RESILIENCE

    Delivered

    Turning a vendor fault into reproducible evidence.

    Large financial services organisation

    Writing a custom socket/WebSocket client to separate application behaviour from network assumptions and give an escalation something concrete to work with.

    Sockets / WebSocketsDefect reproductionApplication behaviourVendor escalation

    Demonstrated the intended communication in custom code and supplied actionable evidence of a problem in the vendor implementation.

    Read the story
    03 / LEGACY MODERNISATION & DEVELOPMENT

    Delivered

    Rebuilding a legacy launcher for Citrix Cloud.

    Large financial services organisation

    Unpicking an undocumented VBScript launcher and rebuilding its dependencies in PowerShell, with graphical interfaces and dynamic endpoint assembly for AWS access.

    PowerShellVBScriptGraphical interfacesCitrix Cloud

    Rebuilt the launch workflow in PowerShell and delivered it as a packaged, seamless Citrix application for developers accessing AWS-hosted resources.

    Read the story
    04 / COMPATIBILITY & LAUNCH ORCHESTRATION

    Delivered

    Unblocking an application migration through its launch workflow.

    Enterprise application-delivery environment

    Coordinating profile data, an Office release-channel change and application launch to work around a compatibility blocker in Citrix.

    CitrixLaunch wrappersUser profilesOffice release channels

    Enabled the previously blocked legacy application to run as a seamless application within a Citrix session using a launch-wrapper workaround.

    Read the story
    05 / API INTEGRATION & REPORTING

    Delivered

    Keeping operational reporting working through a cloud migration.

    Enterprise Citrix Cloud environment

    Building modules for the Citrix Monitor Service API, using OData queries to support the modernisation of legacy information-extraction scripts.

    Citrix Monitor Service APIODataCitrix CloudReporting modules

    Delivered Citrix Cloud-compatible reporting modules to support the customer's ongoing, autonomous extraction and review of operational information.

    Read the story
    06 / AUTOMATION & DATA PRESENTATION

    Delivered

    Turning Intune information into reports departments could use.

    Enterprise endpoint-management environment

    Extracting information from Intune, presenting it through HTML templates and adding email functionality for departmental distribution.

    Microsoft IntuneScriptingHTML templatesData presentation

    Implemented Intune data extraction, HTML report generation and email-distribution functionality for departmental reporting.

    Read the story
    07 / ENTERPRISE DELIVERY

    Delivered

    Making a 20,000-seat migration work in practice.

    Large financial services organisation

    Application remediation, virtual desktop engineering and operational handover within a large Citrix Cloud and Azure migration.

    Citrix CloudMicrosoft AzureApp-VWindows 11

    Contributed within a team of about five engineers that remediated 4,000+ defects across 1,000+ applications in a 20,000-seat environment.

    Read the story
    08 / RESILIENCE & HANDOVER

    Delivered

    Building recovery into application infrastructure.

    Large financial services organisation

    App-V infrastructure with automated replication across regions, backed by documentation and operational knowledge transfer.

    App-VCross-region replicationDisaster recoveryDocumentation

    Implemented App-V infrastructure and automated cross-region replication, then transferred the design and operating knowledge to the managed service provider.

    Read the story
    09 / PRACTICAL AI

    Delivered

    Connecting AI to the way a business works.

    Business clients · AI consultancy delivery

    Turning client processes into integrated AI workflows, with APIs, MCP servers, fallback configuration and safeguards.

    OpenAIKimiGeminiAPIs / MCP

    Delivered AI deployments for six clients, integrating business systems and refining workflow behaviour directly with clients.

    Read the story
    10 / AUTHENTICATION & SOFTWARE

    Delivered

    Extending authentication into the session.

    Managed services provider

    Developing workspace authentication and session controls that added two-factor checks beyond the initial sign-in.

    Citrix WorkspaceElectronNode.jsTwo-factor authentication

    Implemented additional two-factor authentication checks within the workspace experience beyond initial login.

    Read the story
    11 / INDEPENDENT INFRASTRUCTURE

    Implemented lab

    A lab built to understand the whole system.

    Independent project · Home lab

    Ten network segments, Proxmox virtualisation and shared DNS: a working environment for implementation, investigation and continued learning.

    UniFiVLANsProxmox VEPi-hole

    Implemented segmented home and lab infrastructure with Proxmox VE, two Pi-hole DNS instances and configured DHCP services.

    Read the story
    12 / EXPLORATION & ARCHITECTURE

    Architecture in progress

    Exploring what a browser can verify about privacy.

    Independent project · In development

    An architecture exploration for browser privacy checks focused on DNS and TLS verification, with clear limits on what a result can establish.

    DNSTLSBrowser extension architecturePrivacy verification

    Architecture in development. The project is an exploration of verification and evidence, with implementation and validation still ahead.

    Read the story

    Case studies use descriptive organisation labels. The focus is on the engineering, my contribution and the outcome.

    04 / TECHNICAL CAPABILITIES

    Breadth, with depth where it matters.

    Established infrastructure and development experience, supported by practical lab work and continued learning.

    Infrastructure

    Enterprise platforms and identity

    • Active Directory · Entra ID · Group Policy
    • VMware · Nutanix
    • Veeam · MSP360
    • Proxmox VE — independent lab

    Cloud & end-user computing

    Virtual desktops and application delivery

    • Citrix CVAD/DaaS · WEM · UPM
    • Azure Virtual Desktop · FSLogix · App-V
    • Microsoft Azure · AWS · Microsoft 365
    • Intune · Configuration Manager (SCCM)

    Networking

    Implementation and troubleshooting

    • DNS · DHCP · NTP
    • UniFi — independent lab
    • VLANs · trunk/access port profiles — lab
    • Zone-based firewall policies — lab

    Operating systems

    Across infrastructure and devices

    • Linux: Ubuntu, Debian, Fedora
    • Windows · Windows Server
    • Linux networking, SSH and service logs

    Investigation & security

    Evidence, diagnosis and controls

    • Defect reproduction · root-cause analysis
    • Vendor escalation · socket-level investigation
    • Authentication/session controls · OAuth 2.0
    • ThreatLocker · Qualys implementations

    Development, automation & AI

    Code that connects systems

    • PowerShell · Bash · Python
    • Java · Kotlin · C# · Node.js/JavaScript
    • API/SDK integration · MCP servers
    • AI workflows · guardrails · fallback configuration

    Cybersecurity, application security & privacy. A developing focus grounded in professional defect investigation, authentication and session controls, ThreatLocker and Qualys implementation work, and ongoing lab-based security learning.

    Certifications

    Citrix Certified Expert – Virtualization (CCE-V)

    Citrix Certified Professional – Virtualization (CCP-V)

    Citrix Certified Associate – Virtualization (CCA-V)

    Microsoft Certified: Azure Administrator Associate

    Microsoft Certified: Azure Virtual Desktop Specialty

    AWS Certified Cloud Practitioner

    Education

    Advanced Diploma of Software Development, TAFE Queensland, 2017

    05 / INDEPENDENT INFRASTRUCTURE

    A working lab. A place to go deeper.

    Designed and implemented to support everyday home connectivity and ongoing lab development, with network separation and shared DNS.

    Network and Virtualisation Implementation · Home Lab

    Jan 2026 – Present
    MITS LAB / LOGICAL OVERVIEW

    Explore the infrastructure.

    10 network segments
    UniFi networkGateway · switch · access point
    Network separationVLANs · port profiles · firewall policies
    Lab & shared servicesProxmox VE · Pi-hole DNS

    Select a segment to explore its role

    SELECTED SEGMENT

    CORE-SERVICES

    Shared services

    Shared DNS is operational using two Pi-hole instances. Additional core services are planned.

    Inter-network traffic is controlled by zone-based firewall policies.

    Logical overview of implemented infrastructure. The highlighted line connects your selection to its description; individual access rules are not shown.

    Inside the lab

    UniFi network implementation

    • Cloud Gateway Fiber (UCG-Fiber)
    • USW Pro XG 8 PoE switch
    • U7 Pro XGS access point

    Deployed the network end to end, including VLANs, port profiles and firewall policies.

    Virtualisation & core services

    Implemented Proxmox VE hypervisors with dedicated management, storage, egress and AI network segments. Deployed two Pi-hole instances for shared DNS and configured DHCP services.

    Linux investigation in practice

    Diagnosed DNS resolution, DHCP lease allocation, Linux networking, SSH and NTP behaviour using command-line tools and service logs.

    Implemented outcome. Segmented home and lab infrastructure with Proxmox VE and operational shared DNS. Core Services has DNS operational; additional services are planned.

    Ongoing development

    Extending the lab and deepening security knowledge.

    PLANNING

    UniFi MCP integration

    Planning a Model Context Protocol integration for UniFi network infrastructure.

    ARCHITECTURE

    Browser privacy extension

    Developing architecture for browser privacy checks focused on DNS and TLS verification.

    Explore the thinking
    HANDS-ON LEARNING

    TryHackMe

    Building cybersecurity knowledge through practical security learning.

    06 / LET’S CONNECT

    Let’s talk about what you’re building.

    Looking for an engineer who can connect infrastructure, software and the investigation in between? I’d welcome a conversation.

    Download resume (PDF)Word version (DOCX)
    mitslab@proton.melinkedin.com/in/mthompsontechGitHub: github.mitslab.comPortfolio: mitsai.mitslab.com
    Gold Coast, QLD, Australia