--- title: "Chris Clemson" description: "Network Design Engineer @ IDS-Indata" url: https://vutuv.de/chris_clemson username: "chris_clemson" type: profile schema_version: 3 generated_at: 2026-09-30T12:30:35Z noai: true --- # Chris Clemson With over 25 years experience of working in a large-scale project environments, I am self-motivated and reliable, with the ability to work well in a team or on my own initiative. A fast learner with an enthusiastic interest in my work, I enjoy challenges. Network Design Engineer @ IDS-Indata - First Name: Chris - Last Name: Clemson - Employment status: Open to offers - Preferred workplace: On-site, Hybrid, Remote - Fediverse: @chris_clemson@vutuv.de - Followers: 1 - Following: 1 - Connections: 1 ## Tags - [apache](https://vutuv.de/tags/apache) (0 endorsements) - [checkpoint](https://vutuv.de/tags/checkpoint) (0 endorsements) - [cisco](https://vutuv.de/tags/cisco) (0 endorsements) - [DockuWiki](https://vutuv.de/tags/dockuwiki) (0 endorsements) - [html](https://vutuv.de/tags/html) (0 endorsements) - [LibreNMS](https://vutuv.de/tags/librenms) (0 endorsements) - [Linux](https://vutuv.de/tags/linux) (0 endorsements) - [netbox](https://vutuv.de/tags/netbox) (0 endorsements) - [networking](https://vutuv.de/tags/networking) (0 endorsements) - [NetXMS](https://vutuv.de/tags/netxms) (0 endorsements) - [nginx](https://vutuv.de/tags/nginx) (0 endorsements) - [PaloAlto](https://vutuv.de/tags/paloalto) (0 endorsements) - [sql](https://vutuv.de/tags/sql) (0 endorsements) - [windows](https://vutuv.de/tags/windows) (0 endorsements) - [windows server](https://vutuv.de/tags/windows_server) (0 endorsements) ## Experience - Network Design Engineer @ IDS-Indata [Freelance / Self-employed] (2025-12 – today): The first project was to help updating physical and logical network diagrams, create Bill Of Materials documents, and prepare change requests for Cisco switch reconfiguration and DNS / DHCP records for a third-party’s firewall replacement project. The current project is to write processes and documentation to upgrade their security posture – creating a new IDS policy, tidying up firewall rules for Cisco Firewalls, as well as defining standards and implementing global firewall rules to cover multiple sites, as well as various other network changes. Site migrations were scheduled and executed to configure IDS and standardize various settings. - Project Engineer @ General Medical Council [Freelance / Self-employed] (2025-01 – 2025-11): For my second GMC contract, I moved to the Projects/DevOps team to help them with specific projects, and help with Infrastructure changes. I was asked to specify, configure and replace "end of support" Cisco switches with 9300X models at various offices around the UK. I helped with the rollout of MS Onedrive, Cisco Secure Client and GlobalProtect (Prisma) clients using MECM, as well as troubleshooting problems and writing support documentation. I also helped colleagues troubleshoot network problems, as well as making changes to Palo Alto firewalls, both on site and in the Prisma infrastructure for their projects. During the switch replacement project, I used the Cisco "CIS Benchmark" standard to harden the configuration of the network switches, and then configured the existing switches elsewhere in the organisation to the same standard. When there were gaps between project work, I also tidied up their Active Directory and other network configurations. - Infrastructure Engineer, Reliability Engineering @ General Medical Council [Freelance / Self-employed] (2023-04 – 2025-01): Due to a recent reorganization within the GMC, they needed a network specialist to help the team with escalations from the Service Desk, as well as help with projects. Work included doing a Palo Alto firewall audit – tidying up rules and objects, troubleshooting firewall problems and blocked traffic, upgrading all the Cisco 38xx, 9300 and 9606r device firmware, upgrading VMware ESXi and vCenter, upgrading Cisco Prime and ISE, writing/updating documentation and SOPs, and was the main contact for various WAN upgrades by third parties. I also wrote some Powershell scripts to help with administration, and tidied up alerting in SolarWinds NPM and added missing data to the IPAM. During this period, hundreds of Change Requests were submitted and approved, and I attended most weekly CAB meetings. I thought that implementing Netbox would help with their documentation, so I did a demonstration which resulted in them asking me to do a PoC for them to trial. - New Hotel Openings @ Marriott Hotels [Freelance / Self-employed] (2022-04 – 2023-01): During the first week I was sent to Exeter to be the local IT support to help with problems that arose as services were being commissioned at a new hotel. After I helped with the AC Hotels project we started before COVID-19 to migrate some hotels in Spain to the Marriott standard, and configuring devices for 2 new hotels in Mallorca and Rome. Next I was sent to Stockholm to wipe devices and migrate data, ready for the hotel to be taken over by a franchise. Lastly, I migrated 2 file and print servers, updated the PowerShell login scripts, and trained a permanent employee on how to do this themselves in future. - Network Support Engineer @ Oadby & Wigston Borough Council [Freelance / Self-employed] (2021-06 – 2022-03): I was the Design Authority for new infrastructure as part of an “in-sourcing” project to migrate the Council away from an under-performing third party. This involved setting up from scratch: VMWare 7 (on HP servers), Cisco 9300 switches, Checkpoint 6200 firewalls, a DMZ, Active Directory & GPOs. I set up NPS & LDAP connections to integrate non-Windows authentication systems. I also documented a complicated and un-documented network and physical building using NetBox and DokuWiki. and set up a network monitoring system using NetXMS and Grafana, creating templates and filing bug-reports and feature requests with the community. I re-purposed several thin-client devices using Ubuntu to set up wallboards for 2 departments. I was the technical “go-between” to make sure the third-party would hand over access to various systems, and make sure they were usable and useful. I was instrumental in coming up with a plan to test and execute a migration of ~30 Windows and Red Hat servers from the third-party to the new on-premise infrastructure over a weekend, which was very stressful but successful and under-budget. I then handed over and trained a permanent Senior Network Engineer to take over when my contract ended. - AC Hotels Migration & New Hotel Openings @ Marriott Hotels [Freelance / Self-employed] (2020-01 – 2020-03): I was dispatched to Valencia for 3 weeks to be the Marriott representative for a new hotel that was opening. I was to be the liaison between various third parties for network configuration, as well as configure desktops, laptops and new servers at the hotel. I also helped to explain the Marriott processes to the IT and Operations Managers for the group. I was also heavily involved in a project to migrate 73 AC Hotels to the Marriott network (similar to the work I did for Starwood in 2018). When an IT Manager left one of the Marriott hotels in London, with no handover, I went on site to document how the network was physically connected, as well as patch and reconfigure the HP Procurve switches to a Marriott standard. I also found and removed redundant hardware and cables from the server rooms. - Multi-Property Systems Manager Cover @ Marriott Hotels [Freelance / Self-employed] (2019-06 – 2020-01): When a Systems Manager for London was taken ill, I was asked if I could cover project work for around 10 London hotels. This included installing and configuring VMWare 6.5, vCenter, creating VMs for future projects, and migrating Windows 2008 file and print servers to Windows 2016. VBScript and PowerShell login scripts were edited, and batch files etc. created to ease migration and speed up admin tasks. I was then involved with a rollout of new EPOS server and till systems for 36 hotels. - Security Operations Centre Analyst @ Deloitte [Freelance / Self-employed] (2018-12 – 2019-06): This involved working in the London and Manchester offices, helping out with BAU tickets, sanity-checking and troubleshooting firewall requests, raising changes for Palo Alto and Checkpoint firewalls, dealing with SSL certificate creation and renewal, administering the Bluecoat proxy policies and keeping assets up to date in Service-Now. - Senior Infrastructure Migration Specialist @ Marriott Hotels [Freelance / Self-employed] (2018-02 – 2018-11): This involved travelling to many UK & European corporate offices and hotels to assist in large scale IT Infrastructure / Network security / IT migration projects after the acquisition of Starwood Hotels & Resorts. It involved engaging with multiple system owners in carrying out AD consolidation, Windows 10 Desktop Upgrades, Server 2016 Upgrades, security assessments as part of a PCI / GDPR compliance workstream, supportive documentation, including security policies and procedures, user accounts, process, and change management. PowerShell scripts were created in order to add functionality for user configuration and to smooth Active Directory migration processes. Various networking devices, desktops and servers were migrated - Cisco, HP ProCurve, Windows 2003, 2008, 2008R2, 2016 servers and Windows 7 & 10 workstations, as well as embedded devices. These were all reconfigured to connect to the Marriott network securely. I was heavily involved in training internal system administrators and external contractors. - Infrastructure Architect for Splendid Hospitality @ Splendid Hospitality [Freelance / Self-employed] (2017-10 – 2018-02): This included planning and migrating servers from their hotels and data centres into Azure and Hyper-V environments. Liaising with third parties, on-site staff and group HQ IT staff was performed in order to plan and implement a successful migration from Hotel Perfect to Hosted Opera PMS and associated 3rd party interfaces. General design advice was given on implementing an entirely new converged network that would be PCI-DSS 3.2 compliant, as well as new hardware and security systems for their 2 head offices and 20 hotels. - IT Consultant @ Hilton Conrad London St. James [Freelance / Self-employed] (2017-07 – 2017-07): Work included configuring their standard desktop image for new hardware, and updating software to be deployed. Solarwinds was installed and configured for monitoring network devices and servers, together with other modules for User Device Tracking, Netflow and event log collection. A Windows 2012 VM image was created to use as a template for future VMs. - Project 2020 LAN/WAN Engineer @ Healthcare at Home [Freelance / Self-employed] (2016-10 – 2017-07): Work included travelling to various UK locations to install WAN and LAN hardware, test connectivity and liaise with ISPs and other 3rd parties to successfully upgrade the network infrastructure. I also helped with configuring and documenting their new datacentre, and scanning for and fixing vulnerabilities on the new equipment. I was also deeply involved with setting up networking equipment for a new 1500-port office, both for internal users and 3rd party systems, and troubleshooting associated problems. - IT Consultant @ Hilton Conrad London St. James [Freelance / Self-employed] (2016-06 – 2016-10): This was to help the IT manager migrate Windows servers to a new domain, remove devices from an old subnet and upgrade the Server OS. Server and workstation hardening was also performed using GPOs, and standard builds of Windows 7 & 10 were created using Microsoft's WAIK, MDT and WDS tools. - Vulnerability Consultant @ SCC [Freelance / Self-employed] (2016-06 – 2016-06): This was a 2-week contract to help scan one of SCC's clients' networks using Outpost24 “Hacker In A Box” software, and troubleshoot network connections. - Technical Specialist (Implementation) @ InterContinental Hotels Group (2007-08 – 2016-04): Over the 8 years I was involved in designing, configuring, troubleshooting, and re-configuring many Cisco routers and ASA firewalls for WAN connections from hotels back to the main IHG network. I liaised with various customers and 3rd parties in order to correctly determine the solution required and the configuration needed. In total we had around 100 site-to-site VPNs, 6 CheckPoint firewalls, 250 WAN routers and around 1000 Cisco switches, which I administered. These required static and BGP routing updates, rule changes and auditing, and a knowledge of MPLS networks as new services were required. I wrote a searchable website for our internal Software Repository in ASP, and created several custom VBScript, PowerShell and batch files to fix problems, monitor internal systems and configure user settings. I was also one of the escalation points for the 3rd line technical support team. During the Exchange 5.5 decommissioning, I wrote a process to create an equivalent to the Global Address List from an Active Directory export which was filtered and imported into OpenLDAP. I also helped in a global roll out of F5 Big-IP devices to provide SSO and fail-over for our extranet. For the last 4 years I was heavily involved in helping 2 corporate offices and 86 hotels gain PCI-DSS v1.2 and v2 compliance, which included helping local IT Managers get their own hotels compliant and offering guidance. This included analysing reports from vulnerability scans, re-mediating issues and producing security documentation. In the last year I changed teams and visited various hotels around the UK and Europe to help migrate them from “Managed” status to “Franchised”, or vice-versa, and re-install servers after security incidents or for upgrades. In 2014 I was heavily involved in testing Windows 7. I travelled to various UK and European sites to install Windows 7 and 2008/2012 with new hardware, and travelled to hotels to help with application, network and server hardware upgrades. As part of our goal of being ITIL compliant, I documented the process for doing various installation tasks which are now being used as standards to follow. In 2013 I spent several weeks helping design, and then configure the hardware and software at a flagship hotel in Davos, Switzerland. This involved being on-site for 2½ weeks to complete the installation. My manager frequently mentioned (and was pleased!) that I was the “go to” person for other colleagues in the same department, including the helpdesk and corporate infrastructure teams. In 2015 I was the project co-ordinator for a Point Of Sale upgrade to further secure our hotels. For the last 4 years I was appointed as one of the fire marshals for the department. - Network Administrator @ Broomfield College (1997-08 – 1999-11): This included the setting-up/administration of around 70 PCs on a Windows NT4/Netware 3.12/AIX 4.x network, with a mixture of Windows 3.xx, 95, 98, NT 4 and OS/2 Workstations. As well as day-to-day administration of the network, when the Manager of Information Systems left, I took over their work. This included: administering the student database system, completing returns to the FEFC (Further Education Funding Council), and producing reports in MS Access and SQL for management. In the last year I became the Year 2000 Project Manager, helped choose and implement a new finance system, and designed and implemented a new phone and structured cabling system for the college. I also created a web site at http://www.broomfield.ac.uk and started an intranet including links into the student database, a plant identification test for students, and started writing a document management system in ASP. From these web pages I designed the new college prospectus. During the last few months I was involved with a European project called “Adapt Microlink 2000”. It was a project to help declining industries (i.e. agriculture) learn new skills (including basic IT) by distance learning. My role included installing new hardware and software on remote sites, and giving presentations to our partners. - Webmaster @ Aquitainergie (1996-02 – 1996-07): As part of our university course, we went to Bordeaux for 1½ years (in total). During the 3rd year, we spent 6 months at a university in Bordeaux studying computing, and 6 months in a placement at Aquitainergie. This was a department of the local council, which specialised in doing feasibility studies and giving grants for renewable energy projects. The web site I designed was at http://www.aquarel.fr/aquitainergie. Unfortunately it didn’t change much since I left, and has now disappeared completely. I also started work on a web site for a partner organisation called FEDARENE (http://www.fedarene.org/), which has grown nicely since. - Technical Support @ Derby University (1994 – 1995): Worked at Derby University in the Personnel Department during the summer holidays, doing reports and SQL-like queries in Revelation, as well as general technical support. ## Education - Licence (IUP) MIAGe avec notion de Maîtrise” (Methodes Informatiques Appliquées à la Gestion), Université Bordeaux I (1995 – 1997): Information Technology & French — We joined our French equivalents in their IT classes, as well as extra French lessons. - A-Levels, Ecclesbourne School, Derbyshire [School Education] (1995 – 1997): Computer Studies, Geography & Chemistry A-Levels - BSc Hons. in European Informatics, Sheffield Hallam University (1994 – 1997): Information Technology & French — This course was a mix of business studies, programming, software engineering, and French. We spent 18 months at Université de Bordeaux 1, learning French, as well as doing similar IT-related subjects. I also did a placement at Aquitainergie, creating their website. ## Certificates & licenses - CheckPoint CCSA: Certificate · CheckPoint · awarded 2016-04 - ITIL Foundation: Certificate · ITIL · awarded 2013-06 - Cisco CCNA: Certificate · Cisco · awarded 2003 ## Languages - English: Native (Preferred contact language) - French: B1 - German: A2 - Korean: A1 - Russian: A1 ## Links - (verified webpage) ## Contact - Personal: ## Messengers - XMPP: [chris.clemson@uc1.gogreenit.net](xmpp:chris.clemson@uc1.gogreenit.net) ## Addresses - Private: DE22 1AL, Derby, United Kingdom