Summary
Overview
Work History
Education
Skills
Websites
Affiliations
Professional References
Timeline
Generic
Andrew Kerich

Andrew Kerich

IT Team Leader | IT Infrastructure | Network & Systems Engineer | Cyber Security | IS Audit
Nairobi,Kenya

Summary

Astute IT Infrastructure and Information Systems Engineer with over 20 years of experience in the Internet Service Provider (ISP) and Financial Services sectors. Proven track record in resolving complex technical challenges, optimizing processes, and enhancing customer satisfaction. Recognized for driving operational excellence and effectively bridging the gap between business needs and IT solutions.

Overview

21
21
years of professional experience

Work History

IT Infrastructure Manager

The Sanergy Collaborative | Fresh Life Initiative
Nairobi, Kenya
09.2022 - 03.2026
  • SOCLed AWS cloud optimization initiatives, including resource right-sizing, automation, and regional optimization, reducing hosting costs by 30% while maintaining high availability and performance.
  • Optimized enterprise Internet services across multiple branches, implementing cost-effective connectivity solutions that improved user experience and reduced operational costs by 50%.
  • Architected and deployed a self-hosted Security-as-a-Service ( platform using Wazuh and Grafana, reducing SOCaaS costs by KES 1.5M while enhancing security monitoring capabilities.
  • Built and mentored an internal Security Operations Centre (SOC), strengthening vulnerability management, incident response, and overall cybersecurity posture.
  • Leveraged AI-driven tools to optimize AWS Cloud and Google Workspace environments, improving system performance and reducing operational costs.
  • Implemented enterprise cost optimization strategies, including open-source solutions (Headwind MDM, Grafana, Metabase), achieving KES 600,000+ annual savings while maintaining scalability and service quality.
  • Led implementation of key enterprise systems including a cloud-based call centre (3CX on AWS), Odoo Helpdesk, and IT Asset Management, supporting 400+ users and improving service delivery and operational efficiency.
  • Optimized IT asset utilization by restoring and reissuing 20% of faulty laptops, reducing procurement costs and improving budget efficiency.
  • Directed IT operations, infrastructure, and governance, including IT strategy, security, risk management, policy enforcement, team leadership, and collaboration with development and QA teams to ensure business continuity and alignment with organizational goals.

IT Infrastructure Manager

Metropol Corporation Limited
Nairobi, Kenya
01.2020 - 09.2022
  • Implemented infrastructure upgrades and performance tuning across the data centre, improving API response times for financial clients (banks and microfinance) by over 30% and enhancing service reliability.
  • Led enterprise IT compliance initiatives, ensuring full regulatory alignment and successful external audits by the Central Bank of Kenya and CRB regulators.
  • Transformed data centre infrastructure using VMware, reducing physical server footprint, achieving 99.8% uptime, and lowering costs in power, cooling, and maintenance.
  • Deployed advanced network security using Fortinet (WAF, VPN, IPS/IDS, QoS, SD-WAN), securing 300+ users and critical systems while reducing security incidents by 20%.
  • Implemented a call centre solution using FreePBX for 50 agents, integrating IVR, call recording, dashboards, and integrations, improving collection efficiency by 20%.
  • Spearheaded physical security improvements through CCTV and biometric access control across 3 branch offices (300+ users), reducing security incidents by 60%.
  • Led deployment of enterprise monitoring and observability tools including Grafana, Prometheus, ELK Stack, Zabbix, and Datadog, reducing downtime by 15% and improving MTTR.
  • Oversaw IT operations, including vendor management, service delivery, security, change management, backups, and reporting, while leading IT projects, budgeting, and team development to ensure scalability, efficiency, and alignment with business objectives.

Network & Systems Engineer

Metropol Corporation Limited
Nairobi, Kenya
01.2017 - 01.2020
  • Defined and implemented network management policies and procedures to ensure secure, efficient, and standardized IT operations.
  • Deployed and managed LAN, WAN, Internet, and intranet environments, ensuring reliable connectivity and optimal network performance.
  • Administered and maintained network security, including firewalls across edge, server, and endpoint layers, ensuring high availability and protection against threats.
  • Managed data centre and network infrastructure, including servers, storage, routers, switches, UPS, wireless systems, biometric access, motion detection, and CCTV.
  • Ensured availability and performance of core services such as DNS, IP Address Management, and IP telephony systems.
  • Monitored network performance metrics (availability, latency, throughput, utilization), proactively identifying and resolving bottlenecks and vulnerabilities.
  • Coordinated infrastructure installations, upgrades, and system testing with vendors, ensuring compliance with SLAs and service quality standards.
  • Supervised IT Service Desk operations and second-level escalations, while delivering regular performance reports and ensuring timely issue resolution and service continuity.

IT Network & Security Engineer

Jubilee Insurance Company of Kenya Limited
Nairobi, Kenya
11.2011 - 10.2016
  • Led and implemented network security solutions, including intrusion detection and prevention systems, vulnerability testing, and continuous monitoring to protect enterprise infrastructure.
  • Managed network and data centre environments (LAN/WAN), ensuring high availability, performance, and secure operation of business applications.
  • Led major IT projects, including the development of a Data Centre, Cisco IP Telephony, video conferencing systems, and the Actisure Medical Insurance system.
  • Configured and maintained network infrastructure and servers (Windows, Linux, Unix, HP, Sun Solaris), including switches, routers, and performance optimization through traffic shaping.
  • Designed and enforced IT security policies, access controls, and ISO-aligned standards to ensure secure and controlled system access.
  • Led Disaster Recovery (DR) and Business Continuity (BC) planning, implementation, and testing, ensuring system resilience and operational continuity.
  • Supported IT governance, including strategic planning, budgeting, vendor management, procurement, and service management to improve operational efficiency and service delivery.

Senior Systems Engineer

iWayAfrica Services Ltd
01.2009 - 05.2011
  • Operated within the Network Management Centre (NMC), providing systems administration and support for ISP ICT services.
  • Planned, configured, and maintained core infrastructure services including mail, DNS, web, and proxy systems to ensure high availability and performance across 30+ servers
  • Installed, configured, and maintained communication networks, including VSAT (over 200+ terminals) and wired network infrastructures, ensuring continuous service availability.
  • Monitored and optimized network systems and VSAT hub equipment, ensuring reliability, security, and optimal performance.
  • Acted as liaison with satellite providers (e.g., Hughes Network Systems and SES World Skies), coordinating operational status and service delivery.
  • Provided second-level technical support, resolving escalated issues and supporting the Customer Support team in maintaining service continuity for over 600+ customers
  • Supported system improvements by documenting procedures, evaluating emerging technologies, and contributing to pre-sales engineering and solution design.

Team Leader - IT Support

iWayAfrica Services Ltd
Kenya, Angola, Namibia, Tanzania & South Sudan
05.2006 - 01.2009
  • Managed multiple projects, including satellite migration initiatives and regional training programs for subsidiaries and distributors across Africa on content management systems.
  • Provided Team leadership, direction, and mentorship to deliver high-quality customer support while enhancing service delivery and organizational reputation.
  • Reviewed and improved customer support strategies and processes, aligning with organizational objectives and enhancing customer satisfaction.
  • Commissioned and supported VSAT infrastructure, including configuration of satellite modems and VoIP systems, ensuring reliable connectivity.
  • Troubleshot and resolved VSAT-related issues, including internet, email, and VoIP services, ensuring optimal system performance.
  • Implemented and supported the iWay Remote Internet Gateway (RIIG), a Linux-based system integrating firewall, proxy, and email services.
  • Managed domain services, hosting, email, FTP accounts, and MySQL databases, while supporting web hosting operations and client website management.

Network & Systems Engineer

Kenyaweb Ltd
Nairobi, Kenya
11.2004 - 05.2006
  • Performed LAN and WAN administration, including configuration and maintenance of core network infrastructure, routing, and switching.
  • Installed and managed network monitoring tools (e.g., Cacti, MRTG) to ensure system performance, availability, and proactive issue detection.
  • Managed IP address allocation, subnetting, and network planning, while commissioning data links in collaboration with providers for wireless and leased line connectivity.
  • Provided technical support to corporate clients (dial-up and fixed-line), diagnosing and resolving complex network, hardware, software, and connectivity issues for over 1000 clients
  • Liaised with satellite and service providers (e.g., Teleglobe) to troubleshoot and resolve network link and connectivity challenges.
  • Developed automation scripts using PHP, Perl, and Linux Bash to improve system efficiency and streamline network operations.

Education

Bachelor of Science - Computer Science

Africa Nazarene University
Nairobi
05.2004

McKinsey.org Forward Program -

McKinsey.org
Online
12.2025

Network Security Associate NSE2 -

Fortinet
Online
05.2020

Certified Information Systems Auditor (CISA) - undefined

Strathmore University
12.2019

Project Management Training - undefined

Computer Pride
05.2015

Certified Ethical Hacker (C|EH) - undefined

EC Council University
12.2014

ITIL Foundation - undefined

Axelos
01.2013

Novell Certified Linux Administrator - undefined

Novell Corporation
05.2010

Novell Data Centre Technical Specialist - undefined

Linux Professional Institute
05.2010

Cisco Certified Network Associate -

Computer Learning Centre
05.2010

Strategic Leadership By Mike Harper -

Harper Consulting
Kenya
10.2008

Skills

Network & Telecoms Engineering

  • LAN, WAN, SD-WAN, Enterprise Wi-Fi (Cisco, Ubiquiti/UniFi)
  • Network segmentation (VLANs), routing (BGP, EIGRP), switching
  • WAN optimization, QoS, and Network Automation (Ansible)

IT Leadership & Service Management

  • Team Leadership, Coaching & Performance Management
  • Customer Support & Service Delivery Excellence
  • IT Service Management & Operations

Security, Risk & Compliance

  • IT Security Strategy, Systems Hardening & Patch Management
  • Firewalls (Fortinet, Check Point, pfSense), Endpoint Security
  • Vulnerability Assessment & Penetration Testing (VAPT)
  • Access Control Systems, CCTV Implementation
  • IT Audit, Risk Management, DRP & Business Continuity Planning

Infrastructure & Data Center Operations

  • Data Center Management (HVAC, UPS, Storage & Backup Systems)
  • High Availability, Clustering & Hyper-Converged Infrastructure (Dell EMC VxRail)
  • Performance Tuning, Capacity Planning & Resource Optimization

Monitoring & Performance Management

  • Network Monitoring & Logging (Elastic Stack, Nagios, Zabbix, Cacti)
  • System Performance Analysis, Alerting & Incident Response

Virtualization & Cloud Computing

  • Virtualization (VMware, Hyper-V, Oracle VM)
  • Cloud Platforms (Microsoft Azure, AWS)
  • Hybrid Infrastructure (On-premise & Cloud Integration)

Unified Communications

  • IP Telephony (Avaya, Cisco, Asterisk)
  • Video Conferencing & Contact Centre Solutions

Systems & Platforms Administration

  • Linux/Unix & Windows Server Administration
  • Core Services: DNS, Email, Proxy, LDAP, WSUS
  • Web & Domain Hosting Management

Systems Integration & Applications

  • ERP/CRM (Odoo), Helpdesk Systems (Freshdesk, Spiceworks)

Project & Program Management

  • Full Project Lifecycle: Initiation, Planning, Execution, Monitoring & Closure
  • Budgeting, Resource Allocation & Stakeholder Management

Affiliations

ISACA Kenyan Chapter

Professional References

  • James Nguyo, General Manager IT, The Sanergy Collaborative, james.nguyo@saner.gy, +254723068523
  • Josphat Wanguru, Internal Systems Auditor, Metropol Corporation Ltd, josphat.wanguru@metropol.co.ke, +254721304019
  • Julius Orayo, Group Chief Information Officer, Jubilee Insurance Group, Julius.orayo@jubileeinsurance.com, +254731027826
  • Eric Munene, IT Systems Administrator, Stanbic Bank Kenya, gikandim2@stanbic.com, +254722258777

Timeline

IT Infrastructure Manager

The Sanergy Collaborative | Fresh Life Initiative
09.2022 - 03.2026

IT Infrastructure Manager

Metropol Corporation Limited
01.2020 - 09.2022

Network & Systems Engineer

Metropol Corporation Limited
01.2017 - 01.2020

IT Network & Security Engineer

Jubilee Insurance Company of Kenya Limited
11.2011 - 10.2016

Senior Systems Engineer

iWayAfrica Services Ltd
01.2009 - 05.2011

Team Leader - IT Support

iWayAfrica Services Ltd
05.2006 - 01.2009

Network & Systems Engineer

Kenyaweb Ltd
11.2004 - 05.2006

Certified Information Systems Auditor (CISA) - undefined

Strathmore University

Project Management Training - undefined

Computer Pride

Certified Ethical Hacker (C|EH) - undefined

EC Council University

ITIL Foundation - undefined

Axelos

Novell Certified Linux Administrator - undefined

Novell Corporation

Novell Data Centre Technical Specialist - undefined

Linux Professional Institute

Bachelor of Science - Computer Science

Africa Nazarene University

McKinsey.org Forward Program -

McKinsey.org

Network Security Associate NSE2 -

Fortinet

Cisco Certified Network Associate -

Computer Learning Centre

Strategic Leadership By Mike Harper -

Harper Consulting
Andrew KerichIT Team Leader | IT Infrastructure | Network & Systems Engineer | Cyber Security | IS Audit