← All projects
Infrastructure · Networking · Identity · Security

VRArchitecture — Full Infrastructure Build

End-to-End Enterprise IT Infrastructure Deployment

Designed and deployed VRArchitecture’s IT environment from the ground up while the company was still under construction. Starting from basic shared storage, the environment was expanded into a complete operational platform covering networking, centralized identity, secure remote access, software delivery, Revit services, controlled guest access, centralized storage, surveillance and smart systems.

MikroTikWireGuardWindows ServerActive DirectoryDNSGroup PolicyLinuxRevit ServerRevit AcceleratorQNAPHikvision NVR
01 / Project Context

From basic shared storage to a complete operational IT environment.

VRArchitecture was still under construction and had no established enterprise IT environment beyond shared storage. The project required a secure, manageable foundation for users, architectural workloads, remote connectivity, software delivery, visitor access, surveillance and future growth.

15Users
15Domain workstations
23Surveillance cameras
3Network VLANs
2Internet connections
02 / Core Infrastructure

One controlled environment for identity, connectivity and daily operations.

MikroTik was deployed as the core routing and security platform, with segmented employee, guest and surveillance networks, dual-internet failover, WireGuard remote access and a secondary Linux-based VPN layer. Windows Server, Active Directory and DNS centralized identity and workstation administration.

01Dual Internet + Failover
→
02MikroTik Router / Firewall
→
033 VLANs
→
04Windows Server / AD / DNS
→
05QNAP + Revit Services
→
06Domain Workstations
03 / Identity & Endpoint Management

Centralized access, policy and workstation control.

Deployed the Windows domain environment and structured Active Directory groups and Group Policy controls to centralize authentication, workstation management, user access and administrative policy across all employee devices.

  • Windows Server, Active Directory and DNS
  • All employee workstations joined to the domain
  • Group-based access and policy administration
  • Controlled endpoint configuration through Group Policy
Sanitized Active Directory and Group Policy administration view
Directory and policy administration view. Internal names are intentionally redacted.
04 / Internal Software Delivery

Approved software without local administrator privileges.

Developed VRA Software Center, an internal application-delivery platform that lets employees install approved software without granting local administrator rights. The platform centralizes the software catalog, installation status, requests and administrative control.

VRA Software Center dashboard
Software readiness and approved application overview.
VRA Software Center software catalog
Company-approved application catalog and controlled installation workflow.
05 / Controlled Network Access

Employee authentication and administrator-approved guest Wi-Fi.

Built a network-hosted captive portal for employee access and visitor requests. Guests can request temporary Wi-Fi access, while administrators review requests and manage active or expired access through a dedicated internal dashboard.

Sanitized employee and guest network access portal
Employee authentication and visitor access request portal.
Sanitized guest network administration dashboard
Administrator approval and guest-session management dashboard.
06 / Architecture Workloads

Revit collaboration infrastructure

Configured Revit Server and Revit Accelerator to support the company’s architecture workflows within the managed infrastructure environment.

Storage

Centralized QNAP storage

Deployed and configured QNAP storage for centralized company file access and shared operational data.

Physical Security

Surveillance and smart systems

Integrated a Hikvision NVR, 23 surveillance cameras, sensors and connected smart devices on a dedicated surveillance network.

07 / Result

A production-ready infrastructure foundation.

Transformed a basic shared-storage setup into a managed IT environment with centralized identity, domain-controlled endpoints, segmented networking, secure remote access, internet failover, controlled software delivery, Revit services, guest access management, centralized storage and integrated surveillance.

My contribution

Technical ownership across the stack.

  • Designed the infrastructure architecture and rollout plan
  • Configured MikroTik routing, firewall policies, VLANs and failover
  • Implemented WireGuard and the secondary Linux-based VPN layer
  • Deployed Windows Server, Active Directory, DNS and Group Policy
  • Built VRA Software Center and the captive-portal approval workflow
  • Configured Revit Server, Revit Accelerator and QNAP storage
  • Integrated Hikvision surveillance, sensors and smart devices
  • Managed ongoing administration, monitoring and troubleshooting
Continue exploringView all projects →