Johannesburg · Professional tech junkie
I keep people connected and build the tech behind it.
Hi, I'm Thabo, and welcome. I'm a Tier 2 Technical Support Specialist at MWEB and the Digital Solutions Architect behind Touch Domain. I'm happiest working out how things work and helping people get them working again. Have a look around, and feel free to say hello.
VoIPSIP & FreePBX
WebDesign & build
NetworkFibre & routers
HostingDNS & secure email
LiveProduction cloud PBX deployed for Touch Domain
Tier 2Support at MWEB: fibre, LTE, email and VoIP
A+ · N+CompTIA certified, plus CIOS
Sec+CompTIA Security+ in progress, CCNA next
About me
About Thabo
I got into tech by building websites, and I stayed for the networks that carry them.
I started in front-end development. The more pages I built, the more I wondered how does this data actually get here? That question pulled me toward networking.
I learn a network best by building one, breaking it and fixing it myself.
Support work at ISPs gave me plenty of practice. At MWEB I troubleshoot fibre, LTE, email and VoIP for people who need their connection back, often while they are trying to run a business.
At Touch Domain I'm the Digital Solutions Architect. I design, build and run its websites, client portals, hosting, business email and cloud phone system. I'm also studying for CompTIA Security+, and CCNA is next.
Skills & toolkit
What I work with
The technical skills I use at work and practise in study labs, plus how I like to work with people.
Web Design & Development
Routing & Switching
Cloud Networking (study labs)
Network Security
IT Support
Drive & Initiative
I take ownership of my work. If something can be done better, I'll find it and see it through.
Building Rapport
I listen first and take time to understand people, so they feel heard and trust the advice I give.
Collaborative Spirit
I like working towards a shared goal and hearing how other people would solve the problem.
Continuous Learning
I'm curious by nature and usually in the middle of learning something new.
Clear Communication
I explain technical things in plain language and adjust to whoever I'm talking to.
Thriving on Change
I stay calm when priorities shift, and I'm comfortable picking up new tools and ways of working.
Selected work
Production work & study labs
Two systems running at Touch Domain and three study labs. The links cover how each one was set up and tested.
Cloud phone system for Touch Domain
A cloud-hosted phone system for TOUCHDOMAIN (Pty) Ltd: FreePBX 17 on a hardened Debian 12 server, connected to a Switch Telecom SIP trunk on a 053 number. It went live in six days and costs under R500 a month to run.
- Inbound, outbound & internal calling live
- Trunk locked to the carrier in both directions
- Key-only SSH and default-deny firewall
- SIP scanners banned automatically
Touch Domain client platform
Touch Domain's client and admin platform, built in Next.js, TypeScript and PostgreSQL (Supabase). Row-level security keeps each client's data separate. Clients pay by card through PayFast, hosting and domains are set up through the DirectAdmin and HostAfrica APIs, and billing runs on a schedule.
- Role-based access and row-level security
- Payment webhooks verified by signature, merchant and amount
- Hosting and domains provisioned via API
- Automated billing, reminders and renewal notices
Azure network with subnet segmentation
An Azure virtual network with separate front-end and back-end subnets. Network security groups allow HTTP and limit SSH and RDP to one trusted IP.
- Frontend & Backend subnet segmentation
- Two Linux VMs in separate subnets
- NSG rules enforcing least privilege
- Cross-subnet connectivity verified
Multi-site enterprise network
A simulated multi-department network in Cisco Packet Tracer, with a VLAN per department, router-on-a-stick inter-VLAN routing, dynamic routing between head office and a branch, and ACLs that keep guest traffic away from internal servers.
- HR, IT & Guest VLANs on managed switches
- Inter-VLAN routing over 802.1Q trunk
- OSPF/EIGRP between HQ and branch
- Guest VLAN blocked from internal servers
Site-to-site VPN to Azure
A simulated on-premises site connected to Microsoft Azure over a site-to-site IPsec VPN, built to learn how hybrid connections work.
- On-prem DC simulated with pfSense CE
- Azure VPN Gateway (VpnGw1) deployed
- IKEv2 IPsec tunnel via StrongSwan
- On-prem ↔ Azure VM routing established
- End-to-end encryption & failover validated
How I got here
From front-end to the network layer
Where I started, and the certifications along the way.
- Where it started
Front-end development
I built websites first, then wanted to know how the data reached them.
- Foundation
CompTIA A+ certified
Hardware, operating systems, networking basics and IT support, plus a methodical way to troubleshoot.
- Networking clicks
CompTIA Network+ certified
Subnetting, routing protocols, topologies, security fundamentals and troubleshooting frameworks.
- Real-world
Technical support at ISPs
Diagnosing live connectivity and VoIP issues for customers who depend on uptime.
- Business
Touch Domain
Digital Solutions Architect at TOUCHDOMAIN (Pty) Ltd, leading technical design and delivery of web, hosting and communication systems.
- Now
Production systems & Security+
Deployed Touch Domain's cloud phone system. Studying for CompTIA Security+, with CCNA next.
A+
CompTIA A+
Hardware, OS, networking basics & IT support
N+
CompTIA Network+
Routing, subnetting, security & troubleshooting
CIOS
CompTIA IT Operations Specialist
Stackable certification: A+ and Network+
CNA
Cisco Networking Basics
Cisco Networking Academy
SEC+
In progress: CompTIA Security+
Threats, secure architecture, security operations and incident response
NEXT
Next: Cisco CCNA 200-301
Routing, switching, IP services and network security
I document every project, because writing it down is how I check that I really understand it.
Get in touch
Let's work together
Open to NOC, network support and technical support roles in Johannesburg, on-site, hybrid or remote. For web, hosting or VoIP work, reach me here too.
- Emailtmtsweni@tmtsweni.co.za
- LinkedInin/thabomtsweni
- GitHubgithub.com/MJmtsweni
- LocationJohannesburg, South Africa