Andrew Kerich
IT Team Leader | IT Infrastructure | Network & Systems Engineer | Cyber Security | IS Audit
Nairobi,Kenya
Summary
Astute IT Infrastructure and Information Systems Engineer with over 20 years of experience in the Internet Service Provider (ISP) and Financial Services sectors. Proven track record in resolving complex technical challenges, optimizing processes, and enhancing customer satisfaction. Recognized for driving operational excellence and effectively bridging the gap between business needs and IT solutions.
Overview
21
21
years of professional experience
Work History
IT Infrastructure Manager
The Sanergy Collaborative | Fresh Life Initiative
Nairobi, Kenya
09.2022 - 03.2026
- SOCLed AWS cloud optimization initiatives, including resource right-sizing, automation, and regional optimization, reducing hosting costs by 30% while maintaining high availability and performance.
- Optimized enterprise Internet services across multiple branches, implementing cost-effective connectivity solutions that improved user experience and reduced operational costs by 50%.
- Architected and deployed a self-hosted Security-as-a-Service ( platform using Wazuh and Grafana, reducing SOCaaS costs by KES 1.5M while enhancing security monitoring capabilities.
- Built and mentored an internal Security Operations Centre (SOC), strengthening vulnerability management, incident response, and overall cybersecurity posture.
- Leveraged AI-driven tools to optimize AWS Cloud and Google Workspace environments, improving system performance and reducing operational costs.
- Implemented enterprise cost optimization strategies, including open-source solutions (Headwind MDM, Grafana, Metabase), achieving KES 600,000+ annual savings while maintaining scalability and service quality.
- Led implementation of key enterprise systems including a cloud-based call centre (3CX on AWS), Odoo Helpdesk, and IT Asset Management, supporting 400+ users and improving service delivery and operational efficiency.
- Optimized IT asset utilization by restoring and reissuing 20% of faulty laptops, reducing procurement costs and improving budget efficiency.
- Directed IT operations, infrastructure, and governance, including IT strategy, security, risk management, policy enforcement, team leadership, and collaboration with development and QA teams to ensure business continuity and alignment with organizational goals.
IT Infrastructure Manager
Metropol Corporation Limited
Nairobi, Kenya
01.2020 - 09.2022
- Implemented infrastructure upgrades and performance tuning across the data centre, improving API response times for financial clients (banks and microfinance) by over 30% and enhancing service reliability.
- Led enterprise IT compliance initiatives, ensuring full regulatory alignment and successful external audits by the Central Bank of Kenya and CRB regulators.
- Transformed data centre infrastructure using VMware, reducing physical server footprint, achieving 99.8% uptime, and lowering costs in power, cooling, and maintenance.
- Deployed advanced network security using Fortinet (WAF, VPN, IPS/IDS, QoS, SD-WAN), securing 300+ users and critical systems while reducing security incidents by 20%.
- Implemented a call centre solution using FreePBX for 50 agents, integrating IVR, call recording, dashboards, and integrations, improving collection efficiency by 20%.
- Spearheaded physical security improvements through CCTV and biometric access control across 3 branch offices (300+ users), reducing security incidents by 60%.
- Led deployment of enterprise monitoring and observability tools including Grafana, Prometheus, ELK Stack, Zabbix, and Datadog, reducing downtime by 15% and improving MTTR.
- Oversaw IT operations, including vendor management, service delivery, security, change management, backups, and reporting, while leading IT projects, budgeting, and team development to ensure scalability, efficiency, and alignment with business objectives.
Network & Systems Engineer
Metropol Corporation Limited
Nairobi, Kenya
01.2017 - 01.2020
- Defined and implemented network management policies and procedures to ensure secure, efficient, and standardized IT operations.
- Deployed and managed LAN, WAN, Internet, and intranet environments, ensuring reliable connectivity and optimal network performance.
- Administered and maintained network security, including firewalls across edge, server, and endpoint layers, ensuring high availability and protection against threats.
- Managed data centre and network infrastructure, including servers, storage, routers, switches, UPS, wireless systems, biometric access, motion detection, and CCTV.
- Ensured availability and performance of core services such as DNS, IP Address Management, and IP telephony systems.
- Monitored network performance metrics (availability, latency, throughput, utilization), proactively identifying and resolving bottlenecks and vulnerabilities.
- Coordinated infrastructure installations, upgrades, and system testing with vendors, ensuring compliance with SLAs and service quality standards.
- Supervised IT Service Desk operations and second-level escalations, while delivering regular performance reports and ensuring timely issue resolution and service continuity.
IT Network & Security Engineer
Jubilee Insurance Company of Kenya Limited
Nairobi, Kenya
11.2011 - 10.2016
- Led and implemented network security solutions, including intrusion detection and prevention systems, vulnerability testing, and continuous monitoring to protect enterprise infrastructure.
- Managed network and data centre environments (LAN/WAN), ensuring high availability, performance, and secure operation of business applications.
- Led major IT projects, including the development of a Data Centre, Cisco IP Telephony, video conferencing systems, and the Actisure Medical Insurance system.
- Configured and maintained network infrastructure and servers (Windows, Linux, Unix, HP, Sun Solaris), including switches, routers, and performance optimization through traffic shaping.
- Designed and enforced IT security policies, access controls, and ISO-aligned standards to ensure secure and controlled system access.
- Led Disaster Recovery (DR) and Business Continuity (BC) planning, implementation, and testing, ensuring system resilience and operational continuity.
- Supported IT governance, including strategic planning, budgeting, vendor management, procurement, and service management to improve operational efficiency and service delivery.
Senior Systems Engineer
iWayAfrica Services Ltd
01.2009 - 05.2011
- Operated within the Network Management Centre (NMC), providing systems administration and support for ISP ICT services.
- Planned, configured, and maintained core infrastructure services including mail, DNS, web, and proxy systems to ensure high availability and performance across 30+ servers
- Installed, configured, and maintained communication networks, including VSAT (over 200+ terminals) and wired network infrastructures, ensuring continuous service availability.
- Monitored and optimized network systems and VSAT hub equipment, ensuring reliability, security, and optimal performance.
- Acted as liaison with satellite providers (e.g., Hughes Network Systems and SES World Skies), coordinating operational status and service delivery.
- Provided second-level technical support, resolving escalated issues and supporting the Customer Support team in maintaining service continuity for over 600+ customers
- Supported system improvements by documenting procedures, evaluating emerging technologies, and contributing to pre-sales engineering and solution design.
Team Leader - IT Support
iWayAfrica Services Ltd
Kenya, Angola, Namibia, Tanzania & South Sudan
05.2006 - 01.2009
- Managed multiple projects, including satellite migration initiatives and regional training programs for subsidiaries and distributors across Africa on content management systems.
- Provided Team leadership, direction, and mentorship to deliver high-quality customer support while enhancing service delivery and organizational reputation.
- Reviewed and improved customer support strategies and processes, aligning with organizational objectives and enhancing customer satisfaction.
- Commissioned and supported VSAT infrastructure, including configuration of satellite modems and VoIP systems, ensuring reliable connectivity.
- Troubleshot and resolved VSAT-related issues, including internet, email, and VoIP services, ensuring optimal system performance.
- Implemented and supported the iWay Remote Internet Gateway (RIIG), a Linux-based system integrating firewall, proxy, and email services.
- Managed domain services, hosting, email, FTP accounts, and MySQL databases, while supporting web hosting operations and client website management.
Network & Systems Engineer
Kenyaweb Ltd
Nairobi, Kenya
11.2004 - 05.2006
- Performed LAN and WAN administration, including configuration and maintenance of core network infrastructure, routing, and switching.
- Installed and managed network monitoring tools (e.g., Cacti, MRTG) to ensure system performance, availability, and proactive issue detection.
- Managed IP address allocation, subnetting, and network planning, while commissioning data links in collaboration with providers for wireless and leased line connectivity.
- Provided technical support to corporate clients (dial-up and fixed-line), diagnosing and resolving complex network, hardware, software, and connectivity issues for over 1000 clients
- Liaised with satellite and service providers (e.g., Teleglobe) to troubleshoot and resolve network link and connectivity challenges.
- Developed automation scripts using PHP, Perl, and Linux Bash to improve system efficiency and streamline network operations.
Education
Bachelor of Science - Computer Science
Africa Nazarene University
Nairobi05.2004
McKinsey.org Forward Program -
McKinsey.org
Online12.2025
Network Security Associate NSE2 -
Fortinet
Online05.2020
Certified Information Systems Auditor (CISA) - undefined
Strathmore University
12.2019
Project Management Training - undefined
Computer Pride
05.2015
Certified Ethical Hacker (C|EH) - undefined
EC Council University
12.2014
ITIL Foundation - undefined
Axelos
01.2013
Novell Certified Linux Administrator - undefined
Novell Corporation
05.2010
Novell Data Centre Technical Specialist - undefined
Linux Professional Institute
05.2010
Cisco Certified Network Associate -
Computer Learning Centre
05.2010
Strategic Leadership By Mike Harper -
Harper Consulting
Kenya10.2008
Skills
Network & Telecoms Engineering
- LAN, WAN, SD-WAN, Enterprise Wi-Fi (Cisco, Ubiquiti/UniFi)
- Network segmentation (VLANs), routing (BGP, EIGRP), switching
- WAN optimization, QoS, and Network Automation (Ansible)
IT Leadership & Service Management
- Team Leadership, Coaching & Performance Management
- Customer Support & Service Delivery Excellence
- IT Service Management & Operations
Security, Risk & Compliance
- IT Security Strategy, Systems Hardening & Patch Management
- Firewalls (Fortinet, Check Point, pfSense), Endpoint Security
- Vulnerability Assessment & Penetration Testing (VAPT)
- Access Control Systems, CCTV Implementation
- IT Audit, Risk Management, DRP & Business Continuity Planning
Infrastructure & Data Center Operations
- Data Center Management (HVAC, UPS, Storage & Backup Systems)
- High Availability, Clustering & Hyper-Converged Infrastructure (Dell EMC VxRail)
- Performance Tuning, Capacity Planning & Resource Optimization
Monitoring & Performance Management
- Network Monitoring & Logging (Elastic Stack, Nagios, Zabbix, Cacti)
- System Performance Analysis, Alerting & Incident Response
Virtualization & Cloud Computing
- Virtualization (VMware, Hyper-V, Oracle VM)
- Cloud Platforms (Microsoft Azure, AWS)
- Hybrid Infrastructure (On-premise & Cloud Integration)
Unified Communications
- IP Telephony (Avaya, Cisco, Asterisk)
- Video Conferencing & Contact Centre Solutions
Systems & Platforms Administration
- Linux/Unix & Windows Server Administration
- Core Services: DNS, Email, Proxy, LDAP, WSUS
- Web & Domain Hosting Management
Systems Integration & Applications
- ERP/CRM (Odoo), Helpdesk Systems (Freshdesk, Spiceworks)
Project & Program Management
- Full Project Lifecycle: Initiation, Planning, Execution, Monitoring & Closure
- Budgeting, Resource Allocation & Stakeholder Management
Websites
Affiliations
ISACA Kenyan Chapter
Professional References
- James Nguyo, General Manager IT, The Sanergy Collaborative, james.nguyo@saner.gy, +254723068523
- Josphat Wanguru, Internal Systems Auditor, Metropol Corporation Ltd, josphat.wanguru@metropol.co.ke, +254721304019
- Julius Orayo, Group Chief Information Officer, Jubilee Insurance Group, Julius.orayo@jubileeinsurance.com, +254731027826
- Eric Munene, IT Systems Administrator, Stanbic Bank Kenya, gikandim2@stanbic.com, +254722258777
Timeline
IT Infrastructure Manager
The Sanergy Collaborative | Fresh Life Initiative
09.2022 - 03.2026
IT Infrastructure Manager
Metropol Corporation Limited
01.2020 - 09.2022
Network & Systems Engineer
Metropol Corporation Limited
01.2017 - 01.2020
IT Network & Security Engineer
Jubilee Insurance Company of Kenya Limited
11.2011 - 10.2016
Senior Systems Engineer
iWayAfrica Services Ltd
01.2009 - 05.2011
Team Leader - IT Support
iWayAfrica Services Ltd
05.2006 - 01.2009
Network & Systems Engineer
Kenyaweb Ltd
11.2004 - 05.2006
Certified Information Systems Auditor (CISA) - undefined
Strathmore University
Project Management Training - undefined
Computer Pride
Certified Ethical Hacker (C|EH) - undefined
EC Council University
ITIL Foundation - undefined
Axelos
Novell Certified Linux Administrator - undefined
Novell Corporation
Novell Data Centre Technical Specialist - undefined
Linux Professional Institute
Bachelor of Science - Computer Science
Africa Nazarene University
McKinsey.org Forward Program -
McKinsey.org
Network Security Associate NSE2 -
Fortinet
Cisco Certified Network Associate -
Computer Learning Centre
Strategic Leadership By Mike Harper -
Harper Consulting