Alex ter Neuzen

• Advisory, design and implementation of hybrid Azure environments for customers, with Azure Local and Azure Virtual Desktop as the main focus.
• Architecture for Azure Local clusters: network and storage design, deployment strategy, update policy and Day 2 operations.
• Analysis and resolution of production performance and availability issues, including SQL workloads on hyperconverged infrastructure under backup and replication load.
• Automation of platform management with PowerShell, Bicep and Terraform, keeping environments reproducible and auditable.
• Sparring partner for IT management on cloud strategy, sovereignty and the trade-off between public cloud, hybrid and on-premises.
• Migrations of Exchange environments, file server environments and tenant to tenant.

• Author of gettothe.cloud on Azure Local, Azure Virtual Desktop, M365 migrations, security and automation.
• Developer and maintainer of open-source PowerShell tooling, published via GitHub and the PowerShell Gallery.
• Speaker and active member of the Microsoft community; Microsoft MVP since 2026.

Secondment assignments at, among others, Arcadis, the Dutch central government, Hans Anders Retail Group, Parnassia Groep and Pimarox.

• Senior Microsoft 365 Migration Specialist (Dec 2022 – Apr 2023): migration of on-premises workplace and mail environments to Microsoft 365.
• Exchange Migration Specialist (Sep 2021 – Dec 2022): Exchange migrations to Exchange Online, including hybrid configurations and identity.
• Senior System Engineer (Jun 2019 – Apr 2023): management and further development of Windows Server, Hyper-V and Active Directory environments at large clients.

• Own IT practice in Zaandam: infrastructure projects, migrations and management for small and medium-sized businesses.

• Migration Specialist at KLM (Oct 2018 – Jun 2019) and technical migration specialist at Westfries Gasthuis (Jul – Sep 2018).
• System Engineer at St. Antonius Hospital Utrecht (Aug 2016 – Jul 2018). Insourcing of the VMware environment.

• Set up hosted VoIP, cloud workplaces and the accompanying security for hosted services; Azure MFA, RES Workspace Manager, Windows Server 2012R2/2016.

• Migrations from SBS 2003 to SBS 2011, rollout of 3CX VoIP systems, Hyper-V and RDS servers, networks and Draytek.

• System administration and migration projects for a variety of clients in the Randstad area, including Swyx telephony servers.

• Seconded to the Academic Medical Center (AMC): rollout of servers and workstations, management of the Novell network and migration to a new IT infrastructure.

• Scans Bicep and Terraform code for outdated Azure Verified Modules, rates each update by risk (LOW to HIGH) and produces a Markdown and JSON report.
• Updates go through approval: local CLI, GitHub PR or Azure DevOps PR, with validation against the real toolchain and per-file rollback. Never merges automatically.

• Inventories Azure Local clusters via Azure Arc and actual Azure state and delivers audit-ready documentation, without manual spreadsheets or tribal knowledge.

• Documents host pools, session hosts, app groups, workspaces, scaling plans and session host configuration profiles based on live Azure data.
• Version 1.2.230 added full scaling plan insights, branded PDF reporting and security improvements (XSS hardening, SRI validation, no eval).

• Architecture and management of two Azure Local clusters with Veeam backup and replication across both sites.
• In-depth analysis of rising disk latency on SQL workloads under replication load, with substantiated solution directions: a modified storage design with external SAN/vSAN, application-level SQL clustering across both clusters, and an alternative backup strategy via Azure Backup.

• Full deployment in ADLess/workgroup mode, including analysis and resolution of six failure points in the ECE deployment engine: network classification, static address conflicts, DNS cluster IP resources and module caching.

• Release pipeline in which a new image in Azure Container Registry automatically triggers a container app update, using immutable SHA tags and a managed identity for AcrPull instead of stored credentials.

• Rollout of Cloud PCs via the Microsoft Graph API and PowerShell, with provisioning policies and group-based assignment from Entra ID.