Emrah Özyurt

Serving as IT Chief and Solution Architect, I led the in-house establishment and strategic development of the entire IT organization at TCI Aircraft Interiors following the company's restructuring. My responsibilities include end-to-end planning and management of IT infrastructure, leading a cross-functional technical team, overseeing critical projects such as data center construction, full-stack network deployments, firewall segmentation, and IoT system integrations. I actively manage vendor relations, budget planning, and SLA-based external service supervision, while ensuring business continuity and security through advanced solutions like VMware, FortiGate, and Commvault. My role combines technical leadership with hands-on architecture and system administration duties.

KEY PROJECTS

- Internalization of IT Services & In-House IT Department Establishment

Established a fully independent internal IT department within TCI, transitioning away from outsourced IT service providers to a self-managed structure aligned with corporate goals.

• Defined IT service scope and built SLA-based oversight mechanisms for externally managed components
• Developed a business-aligned IT strategy and infrastructure transformation roadmap
• Implemented a centralized ticketing system to standardize and track IT support processes
• Deployed an IT asset inventory management system for full hardware/equipment traceability
• Initially supervised outsourced network/system/security services, later transitioned operations in-house
• Led the recruitment and onboarding of internal IT personnel for helpdesk and infrastructure management
• Coordinated integration processes with the group technology provider and clarified cross-organizational roles

- Server Network Micro-Segmentation Implementation

Enhanced security and simplified management by implementing micro-segmentation based on Zero Trust principles.

• Grouped servers by function and assigned them to isolated VLANs
• Enforced strict inter-segment communication rules with port/service-level access controls
• Reduced lateral movement risks and improved incident response time
• Standardized configurations through full documentation for audit and continuity

- Post-Merger IT/IoT Infrastructure Consolidation (TCI, TSI, CORNEA)

Led the unification and standardization of IT and IoT infrastructures following the merger of TCI, TSI, and CORNEA under the TCI Aircraft Interiors brand.

• Audited and mapped server, network, and IoT environments from all three organizations
• Consolidated IP plans, domain structures, VLAN segmentation, and security policies into a centralized architecture
• Designed and executed integration scenarios for VMware and FortiGate platforms to maintain data integrity
• Centralized fragmented IoT systems into a unified, manageable network
• Planned and executed live migrations with minimal disruption to production systems
• Oversaw full project lifecycle including risk analysis, test plans, and rollback procedures

- New Campus Network & Security Infrastructure Deployment

Designed and implemented the full-stack IT infrastructure for TCI’s new campus facility from scratch.

• Deployed fiber backbone and Cisco switching with LACP (EtherChannel) and Stackwise
• Configured 802.1X Network Access Control (NAC) for port-based secure device authentication
• Established segmented VLAN architecture for management, production, guest, and IoT networks
• Implemented Layer 3 routing, NAT, and firewall policies on FortiGate
• Integrated IP-based CCTV and access control systems for physical security
• Linked attendance tracking with the badge-based access system (PDKS)
• Ensured power redundancy through regional UPS systems and generator integration
• Oversaw structured cabling, patch panel planning, and data center integration

- TCI On-Premises Data Center Deployment

Built a next-generation on-premises data center from scratch to meet growing performance and capacity demands, replacing leased infrastructure from the group technology provider.

• Designed and implemented server room layout, structured cabling, redundant power systems (UPS & generator), precision cooling, and fire suppression
• Integrated facial recognition-based access control with 24/7 monitored IP CCTV system
• Deployed VMware ESXi platform to host corporate applications
• Built a Commvault-based backup solution on Huawei storage hardware with daily automated backups and remote replication
• Established centralized log collection and incident monitoring with FortiAnalyzer for proactive security posture

As a Senior IT Consultant at Turkish Technic, I was responsible for the planning and management of IT infrastructure services across the company’s subsidiaries. Each subsidiary's technology requirements were analyzed in detail, and tailored, redundant, and secure infrastructure architectures were designed and implemented accordingly. Core infrastructure services such as Active Directory, DNS, Group Policy, and SCCM were centrally managed, while software license tracking and IT asset inventory processes were also maintained. Additionally, I supported the operational continuity of the R&D department’s CAL/CAM/PLM systems. The role focused on delivering added value to business units through service continuity, architectural flexibility, and security-driven solutions.

As an IT Specialist at Gürsel Turizm, I was responsible for the management and modernization of the company’s core IT infrastructure. My duties included overseeing network systems, virtualization platforms, web services (IIS/Apache), POP3-based mail systems (Icewarp), IT procurement, and inventory control. I successfully led several critical infrastructure transformation projects including full virtualization of the server environment, WAN integration of regional offices via MPLS/VPN, and Active Directory modernization from Server 2003 to 2012 R2. These projects significantly improved operational efficiency, system security, and business continuity across the organization.

KEY PROJECTS

- Virtualization Infrastructure Deployment & Server Consolidation
The entire physical (bare-metal) server environment was migrated to a centralized, scalable, and manageable VMware virtualization platform. This transformation significantly improved resource utilization and reduced hardware dependency. A backup system was also implemented to ensure data integrity and business continuity.

• Deployed VMware ESXi and vCenter for centralized virtualization management
• Migrated critical physical servers to virtual environment with zero data loss
• Designed and implemented a backup infrastructure using Veeam Backup on IBM storage; daily automatic backup jobs configured

- Regional Office Integration via MPLS/VPN
To ensure secure and stable communication between regional offices and headquarters, a wide area network (WAN) integration project was executed using leased lines over MPLS/VPN.

• Created IP addressing schemes and routing scenarios for each site
• Coordinated with ISP for provisioning and activation of leased lines per location
• Configured routing and security policies on Cyberoam firewall
• Enabled centralized and secure connectivity across all branch locations

- Active Directory Migration Project
The legacy identity management infrastructure running on Windows Server 2003 was migrated to a modern Windows Server 2012 R2 platform.

• Installed a new domain controller and prepared the domain environment for transition
• Migrated user/computer objects, group policies, and directory services with full integrity
• Successfully transferred FSMO roles and completed DNS replication
• All operations were simulated in a test environment to ensure zero downtime during production migration