IT Director. Infrastructure Operator. MPharm.

MichaelGuirguis

I run IT across five business divisions and maintain a real operator stack behind it: Microsoft 365, managed endpoints, self-hosted services, home automation, AI tooling, and the boring reliability work that keeps systems useful.

See my work or view resume

Business Divisions: 5
Managed Endpoints: 30+
Infrastructure Domains: 4

IT Director across 5 divisions
3 Proxmox nodes
35+ self-hosted services
MPharm + PEBC candidate

Selected Work

What I've built.

Infrastructure, platforms, and systems — each solving a real problem.

MDM Group IT Operations

Built and now run IT from zero for a construction group spanning five divisions — 30+ managed endpoints, full M365 stack, and a production infrastructure that didn't exist two years ago.

Live

Challenge

Five business divisions operating on disconnected tools with no centralized IT, no device management, and no shared infrastructure. Each division handled tech independently — no visibility, no standards, no accountability.

Solution

Built centralized IT operations from scratch: M365 tenant with Azure AD, Intune MDM across 30+ endpoints, TP-Link Omada networking with VLAN segmentation, self-hosted business apps on Proxmox, and a unified corporate web presence on Framer.

Outcome

Single IT function serving 5 divisions. 30+ endpoints fully managed via Intune. Standardized M365 + SharePoint deployed across all divisions. Zero-trust network segmentation in production. Corporate site live at mdmgroupinc.ca.

Technology: M365
Technology: Azure AD
Technology: Intune
Technology: Omada
Technology: Proxmox
Additional technologies: Framer

Visit Read case study

KrewPact

Full-stack construction workforce platform — offline-capable mobile forms, real-time ERP sync, and 5,300+ automated tests. Built for field crews, not spreadsheets.

In Progress

Challenge

Construction companies track crews, timesheets, compliance, and project costs across disconnected spreadsheets and paper forms. ERPNext covers the back office but has no field-facing UX — so field data never made it into the system cleanly.

Solution

Built a full-stack platform with offline-capable mobile forms via Capacitor, real-time sync to ERPNext via webhooks, role-based dashboards, and automated compliance tracking. 5,300+ Playwright tests cover the full user journey.

Outcome

Production-ready with offline sync, live ERP integration, and a 93/100 blueprint audit score. Active UAT with construction crews in the field.

Technology: Next.js
Technology: Supabase
Technology: ERPNext
Technology: Capacitor
Technology: Playwright

Read case study

Homelab Infrastructure

A practical self-hosted stack split across an MKG server, HomeLab server, Raspberry Pi edge device, and isolated Digital server — with deployment, creative media, storage, and home services kept in the right boundaries.

Live

Challenge

Needed reliable home services, private media, document management, password storage, deployment hosting, AI tooling, creative media generation, and client workflow support without pretending every workload belonged in one neat cluster. The real constraint was boundaries: family services, personal/operator tools, edge devices, creative pipelines, backup lanes, and David's photography infrastructure all needed different trust zones.

Solution

Split the system by role: HomeLab server for Home Assistant, HomeBridge, Frigate, TrueNAS SMB, and DNS backup; MKG server for Coolify, Jellyfin, Immich, Vaultwarden, Paperless, draw.io, AI/runtime, ComfyUI, Pascal, Blender, and operator services; Raspberry Pi for lightweight edge duties; Digital server isolated for David's photography workflows. Nginx Proxy Manager and internal routing expose only selected services.

Outcome

The public model now matches the actual operating model: home automation and family storage stay pinned to local hardware, MKG services and deployments live on the MKG server, creative media has its own MKG-local pipeline, and client-owned infrastructure remains isolated.

Technology: Proxmox
Technology: TrueNAS
Technology: Coolify
Technology: ComfyUI
Technology: Home Assistant
Additional technologies: Frigate, Immich

Read case study

LifeOS + AI Stack

Personal operating system bridging calendar, email, tasks, and knowledge graph — with AI agents that have full project context, not just the last message.

Live

Challenge

Managing tasks, notes, calendar, email triage, and project context across disconnected tools with no unified layer. Context lived in too many places for any single tool — or person — to hold it all at once.

Solution

Built a dashboard API bridging Obsidian vault, Google Calendar, Gmail, and Granola meeting notes. Added Qdrant vector search for knowledge graph queries, n8n automation workflows, and the OpenClaw AI harness for context-aware agent orchestration.

Outcome

Single daily digest combining calendar, email triage, and task priorities. AI agents with full project context via vector search. Morning briefing synthesized in under 30 seconds.

Technology: Node.js
Technology: Qdrant
Technology: n8n
Technology: Obsidian
Technology: OpenClaw

Read case study

Natalie Nicola Art

Artist portfolio and print store where 40+ high-res pieces load in under 2 seconds — and the artist manages every update herself.

Live

Challenge

Artist needed a portfolio that showcased work at high fidelity with an integrated print store, but had no technical background to manage content updates. Every new piece required a developer — which meant it never happened.

Solution

Built a Next.js site with Payload CMS for fully self-serve gallery management, an optimized image pipeline for high-resolution artwork, and integrated print ordering. Designed so the art is the interface — not the other way around.

Outcome

Artist self-manages 40+ gallery images without developer involvement. Sub-2s page loads on high-resolution artwork. Print store integrated and live.

Technology: Next.js
Technology: Payload CMS
Technology: Tailwind CSS
Technology: Vercel

Visit Read case study

The Forge

9-agent AI system that ships real PRs, manages real deploys, and synthesizes everything into a 30-second morning brief — across 24 active projects.

Live

Challenge

Running two businesses, client projects, and personal infrastructure in parallel generated more work than any single person could track — let alone execute. The bottleneck wasn't ideas or resources; it was the coordination overhead of being the integration layer for everything.

Solution

Designed a 9-agent organization on Paperclip (open-source AI control plane) with OpenClaw gateways. Two orchestrators (GPT-5.4 Pro) dispatch to seven specialized ICs: Codex engineers for code, Gemini analysts for research and ops, a creative director for content and brand, and a local Ollama fallback for cost control. Every PR goes through a two-pass quality gate before auto-merge. A deploy watcher handles rollbacks. A daily brief synthesizes 24 projects into one Telegram message.

Outcome

24 projects actively tracked and worked. Agents produce real PRs, real deploys, and real content drafts — peer-reviewed by a second agent before anything merges. $0 monthly API cost via OAuth passthrough. Routine execution is handled; strategic decisions stay with the human.

Technology: Paperclip
Technology: OpenClaw
Technology: GPT-5.4 Pro
Technology: Gemini 3.1 Pro
Technology: Codex
Additional technologies: Ollama, ComfyUI

Read case study

Keliny Law

Took a new law firm from zero IT to fully operational in under 2 weeks — email, document management, endpoints, client intake, and web presence, all cloud-managed.

Live

Challenge

New law firm launching with no IT infrastructure at all. Needed professional email, document management, device setup, client intake workflows, and a public-facing website — built from scratch, on a tight timeline, with no on-premise hardware.

Solution

Provisioned M365 tenant with SharePoint document management, configured business email, set up endpoints with security baselines, built the firm website on Next.js, and established client intake workflows. Fully cloud-hosted — no local server, no physical infrastructure to maintain.

Outcome

Law firm operational in under 2 weeks from first conversation. M365 + SharePoint handling all document management. Professional web presence live. Zero on-premise infrastructure.

Technology: M365
Technology: SharePoint
Technology: Next.js
Technology: Tailwind CSS
Technology: Vercel

Read case study

The Lab

Own the stack, own the outcome.

The current map is built around the real operating boundaries: MKG services and deployments run on the MKG server, home automation and family storage stay on the HomeLab server, the Raspberry Pi handles lightweight edge duties, and DGTL stays isolated for David's photography business.

Architecture Atlas

A truthful map of the operating surface.

The atlas starts sparse, then lets each layer answer one question: how traffic enters, where services live, how creative media moves, what gets backed up, and which systems must stay isolated.

Snapshot 2026-05-26

Overview

Shows the four bounded systems without dense service detail.

Cloudflare / external entry

Public Edge

Selected services cross the public edge before NPM routes them internally.

Cloudflare / tunnel
public edge

mkgbuilds .19

MKG Server

Primary operator host for deployment, media, documents, auth, AI/runtime, and the creative pipeline.

NPM ingress spine
CT200 on mkgbuilds
Coolify
CT120 · 192.168.0.31
Creative pipeline
ComfyUI → Pascal → Blender

MDMhomelab .8

HomeLab Server

Strictly home/family services: home automation, camera workloads, family storage, and DNS backup.

Home automation
Home Assistant / HomeBridge
TrueNAS family NAS
family SMB + backup target

Raspberry Pi .22

Network Pi

Small edge box for monitoring, break-glass services, and low-power resilience.

Edge monitoring
Uptime Kuma / Prometheus / NetAlertX

dgtl-proxmox .5

Digital Server

David's photography-business infrastructure. Managed boundary, not an MKG landing zone.

DGTL boundary
David photography workflows

Public map uses role labels and the verified portfolio ingress path. It intentionally avoids private admin details, secrets, and unverified sync claims.

Primary Servers: 2
Edge Pi: 1
Isolated Client Server: 1
Tracked Services: 35+

Actual infrastructure boundaries

Status: Online
MKG Server
Node label: mkgbuilds · Proxmox compute
Role: Deployment, media, documents, password management, diagrams, AI/runtime, creative pipeline, and MKG storage pools
Boundary: Michael-owned production and personal workloads
Status: Online
HomeLab Server
Node label: MDMhomelab · home edge/storage
Role: Home Assistant, HomeBridge, Frigate, TrueNAS SMB, NetBird, and Pi-hole backup
Boundary: Home and family services pinned to local devices/storage
Status: Online
Network Pi
Node label: Raspberry Pi · edge device
Role: Lightweight network services and local resilience near the edge of the LAN
Boundary: Small, low-power support role
Status: Online
Digital Server
Node label: dgtl-proxmox · isolated
Role: David's photography-business storage and personal workflows that Michael helps operate
Boundary: Not a target for MKG or Michael personal workloads

Representative services

Jellyfin
Category: media
Media library on the MKG server with local ownership of playback and files
Audience: Family & FriendsHost: mkgbuilds
Immich
Category: media
Private photo library on the MKG server, backed by local storage and controlled access
Audience: PersonalHost: mkgbuilds
Paperless NGX
Category: productivity
Document intake, OCR, tagging, and retrieval for household and business paperwork
Audience: PersonalHost: mkgbuilds
draw.io
Category: productivity
Private diagramming surface for architecture, workflows, and client planning
Audience: PersonalHost: mkgbuilds
Coolify
Category: networking
Self-hosted deployment platform on the MKG server, including the current portfolio route
Audience: PublicHost: mkgbuilds
Vaultwarden
Category: security
Bitwarden-compatible password manager for family and MKG operational secrets
Audience: Family & FriendsHost: mkgbuilds
ComfyUI + Pascal + Blender
Category: creative
MKG-local media creation pipeline backed by creative datasets, models, scenes, and renders
Audience: PersonalHost: mkgbuilds
MKG ZFS pools
Category: storage
Separate rpool and zfs-db storage for media, Immich, Coolify data, vault, models, and creative assets
Audience: PersonalHost: mkgbuilds
Home Assistant
Category: productivity
Home automation control plane on the HomeLab server with USB/device passthrough
Audience: Family & FriendsHost: mdmhomelab
HomeBridge
Category: productivity
Apple Home bridge for devices that need a local compatibility layer
Audience: Family & FriendsHost: mdmhomelab
Frigate
Category: security
NVR and camera detection on the HomeLab server with Coral USB pinned locally
Audience: Family & FriendsHost: mdmhomelab
TrueNAS
Category: storage
Family SMB share and storage layer anchored on the HomeLab server
Audience: Family & FriendsHost: mdmhomelab
Nginx Proxy Manager
Category: networking
Ingress spine on the MKG server that routes selected public hostnames to internal services
Audience: PublicHost: mkgbuilds
Network Pi
Category: networking
Small edge device for lightweight network services and local resilience
Audience: PersonalHost: network-pi
DGTL services
Category: productivity
Isolated photography-business services managed for David, not a landing zone for MKG workloads
Audience: PublicHost: dgtl-proxmox

From the Lab

All notes

Background

The short version.

Origin

Born in Cairo, moved to Mississauga at age 10. Learned English from scratch, mid-year, in a new school system. The ability to pick up complex things fast and operate without a manual comes from that.

Basketball

Played competitive basketball for over a decade, including university-level in the UK — 3x Club Colours, 3x Elite Athlete Scheme. The habit of systematic preparation and performing under pressure runs directly into how I run technical projects.

Pharmacy

MPharm from the University of Sunderland. Passed both the PEBC Evaluating Exam and OSCE on the first attempt. Currently completing Canadian licensure (QE Part 1) while running IT operations full-time.

Builder

IT Director at MDM Group across five divisions. Built the infrastructure from bare metal up — bounded Proxmox systems, 35+ self-hosted services, AI automation, and the platforms the business actually runs on.

Credentials

Verified expertise.

Pharmacy licensure, technical certifications, and athletic achievements that back the work.

Master of Pharmacy (MPharm)

University of Sunderland

2023Completed

PEBC Evaluating Exam (EE)

Pharmacy Examining Board of Canada

2024Completed

PEBC OSCE

Pharmacy Examining Board of Canada

2025Completed

PEBC Qualifying Exam Part 1 (MCQ)

Pharmacy Examining Board of Canada

2026In Progress

Canadian Red Cross First Aid & CPR

Canadian Red Cross

2017Completed

Kinesiology

McMaster University

2015-2016Completed

Healthcare & Sciences

MCPHS University (Boston)

2016-2018Completed

Rookie of the Year

University of Sunderland Basketball

2019Completed

3x Club Colours Award

University of Sunderland

2019-2023Completed

3x Elite Athlete Scheme

University of Sunderland

2019-2023Completed

Daily toolkit

Development

TypeScript
React / Next.js
Tailwind CSS
Supabase / PostgreSQL

AI & Automation

Claude Code
n8n Workflows
AI Agents / MCP

Infrastructure

Proxmox / KVM
Docker / LXC
GitHub Actions / CI-CD
Monitoring (Uptime Kuma, Better Stack)
Vercel / Coolify

Enterprise IT

M365 / Azure AD
Networking (Omada, VLANs)
Intune / Device Mgmt

Get in touch.

Open to IT consulting, pharmacy roles, and technical collaborations.

Work with MKG Builds

AI integration, infrastructure, and web development for businesses.

Founded in 2024 · AI · Infrastructure · Web Development

[email protected]LinkedIn GitHub Resume

MichaelGuirguis

What I've built.

MDM Group IT Operations

Challenge

Solution

Outcome

KrewPact

Challenge

Solution

Outcome

Homelab Infrastructure

Challenge

Solution

Outcome

LifeOS + AI Stack

Challenge

Solution

Outcome

Natalie Nicola Art

Challenge

Solution

Outcome

The Forge

Challenge

Solution

Outcome

Keliny Law

Challenge

Solution

Outcome

Own the stack, own the outcome.

A truthful map of the operating surface.

Public Edge

MKG Server

HomeLab Server

Network Pi

Digital Server

Actual infrastructure boundaries

Representative services

From the Lab

Why I Self-Host Everything

The Actual Homelab Boundaries

The short version.

Origin

Basketball

Pharmacy

Builder

Verified expertise.Verifiedexpertise.

Master of Pharmacy (MPharm)

PEBC Evaluating Exam (EE)

PEBC OSCE

PEBC Qualifying Exam Part 1 (MCQ)

Canadian Red Cross First Aid & CPR

Kinesiology

Healthcare & Sciences

Rookie of the Year

3x Club Colours Award

3x Elite Athlete Scheme

Daily toolkit

Development

AI & Automation

Infrastructure

Enterprise IT

Get in touch.Getintouch.

What I've built.

MDM Group IT Operations

Challenge

Solution

Outcome

KrewPact

Challenge

Solution

Outcome

Homelab Infrastructure

Challenge

Solution

Outcome

LifeOS + AI Stack

Challenge

Solution

Verified expertise.

Get in touch.

Verified expertise.

Get in touch.