Mukesh Sharma

Profile

Automation architect with 18 years across Windows and Linux infrastructure, Kubernetes, Azure and AWS, including nearly 11 as an enterprise solution architect at HCL Technologies and Calance. Founded Xentek in 2018: a 15-person team delivering white-label managed services and automation for MSPs, today as subcontractor to two US MSPs (references available on request). Builds every workflow with the failure handling and documentation that a partner's technicians can run on their own.

Highlights

130+automations in productionUser lifecycle, licensing, security alerting and PSA ops; about 5 hours saved per technician each week

AKS · EKSproduction KubernetesPlus self-managed clusters; deployed with Helm and GitOps, monitored with Prometheus and Grafana

$9K/mobilling leakage caughtThree-way reconciliation of Pax8 invoices, tenant license assignments and PSA agreements

<2 wksRewst to n8n re-platformFull automation estate moved; platform running cost cut roughly in half

10 minuser provisioning, down from 2 daysTicket-driven onboarding, not counting the human approval step

165Microsoft 365 tenantsPlus 4,500 endpoints, 250 FortiGates and FortiSwitches and 1,500 FortiAPs for healthcare, professional services and industrial clients

99.99%availability SLA metSRE lead for a global travel platform: traced outages to SQL load, moved reads onto replicas

SOC 2Type 2 attestedPartners can bring Xentek into client tenants without weakening their own compliance posture

Public work

MSP Integrations and Automationsgithub.com/xentek-ca/MSP-Integrations-and-Automations

An open catalog of production automation patterns across PSA, RMM, Microsoft 365, security, licensing and Azure. Each pattern has a 13-field card covering trigger, flow, outcome and known gotchas, and can be built in Rewst, n8n, Power Automate or code.

NinjaOneLoggergithub.com/xentek-ca/NinjaOneLogger

An open-source client that ships structured NDJSON telemetry out of NinjaOne scripts through short-lived, write-only upload URLs, so no webhook secret ever sits on an endpoint.

Line-of-business automation survey (August 2026)research.xentek.ca

Traces repetitive work in the 10 most-used desktop applications across managed client environments to vendor-documented integration points. It identifies 50 automation opportunities, 45 rated high impact, and 7 small builds to start with.

Core expertise

MSP automation design: retry-safe workflows in n8n and Rewst that write failures back to the PSA ticket instead of leaving work half-done.

Kubernetes and containers: production clusters on AKS, EKS and self-managed Kubernetes, deployed with Helm and GitOps; Docker image builds and registries.

PSA and RMM integration: ConnectWise PSA intake, company mapping, deduplication, agreements and status flows; NinjaOne organizations, policies and scripting.

Microsoft 365 and identity: user lifecycle through Graph, Entra ID and Intune; Conditional Access and anti-spoofing hardening; GDAP, NCE and Partner Center for multi-tenant licensing.

Migrations and continuity: cross-tenant and hybrid Microsoft 365 moves, Citrix to Azure Virtual Desktop, firewall cutovers to FortiGate, Datto BCDR.

Security operations: Huntress and SentinelOne alert enrichment, deduplication and routing into the PSA.

Azure and platform engineering: landing zones, AVD and cost optimization; self-hosted n8n on Azure Container Apps behind FortiGate, with SSO/SAML, geo-fenced access and centralized logging.

Linux, DevOps and SRE: RHEL-family and Ubuntu/Debian administration; infrastructure as code in Terraform, Bicep/ARM, CloudFormation/CDK and Ansible; CI/CD in GitHub Actions, Azure DevOps, GitLab CI and Jenkins; Prometheus and Grafana observability.

AI infrastructure: retrieval-augmented generation and semantic search on Azure AI Search and Azure OpenAI; LLM-assisted parsing and classification inside automation pipelines; contact-center voice agents on Amazon Connect and ElevenLabs.

Experience

Founder & Principal Consultant

Xentek · Halifax, NS

Nov 2018 – Present

Built a 15-person team delivering white-label managed services and automation for MSPs; currently subcontractor to two US MSPs.
Architected and operate an integrated MSP platform spanning Microsoft 365, Entra ID, Azure, ConnectWise PSA, NinjaOne, SentinelOne, Huntress, Rewst and Datto BCDR.
Led migrations including Citrix to Azure Virtual Desktop, Exchange hybrid decommissioning, cross-tenant Microsoft 365 moves and OPNsense-to-FortiGate firewall cutovers.
Designed and deployed production AI infrastructure: retrieval-augmented generation and semantic search on Azure AI Search and Azure OpenAI.
Ran Rewst in production from January 2025, then re-platformed to self-hosted n8n on Azure Container Apps behind FortiGate, with SSO/SAML, geo-fenced developer access and logging to Azure Log Analytics.
Led Xentek's SOC 2 Type 2 attestation.

SRE Lead

Global travel platform (name withheld under NDA)

Jan 2022 – May 2023

Led a five-person, globally distributed SRE team for a high-traffic travel platform.
Traced recurring outages to heavy SQL load, identified the queries driving it, and built read replicas to distribute read traffic.
Improved overall uptime and helped the platform meet its 99.99% availability SLA.

Senior Solution Architect, Enterprise Managed Services and IT Transformation

Calance · Orange County, CA

Apr 2015 – Oct 2018

Led the cloud program end to end, covering IaaS, PaaS and application architecture, for enterprise clients in automotive, banking, healthcare and retail.
Planned and executed public and private cloud migrations with zero operational disruption, owning transition plans, KPIs, SLAs and uptime targets.
Set reference architectures and standards for reliability, scalability, security and performance, with disaster recovery and high availability built in by default.
Moved client product lines off legacy client-server systems onto a modern application platform.
Presented architecture and application-lifecycle roadmaps to CIOs, CTOs and CFOs to secure budget and resourcing.

Solution Architect

Calance · Greater Delhi Area

Jul 2013 – Mar 2015

Designed and maintained automation and configuration management across production R&D infrastructure.
Owned security requirements, annual budgets and the high-availability and disaster-recovery plan for AWS projects.
Delivered customer implementations end to end and integrated third-party products into client environments.

Consultant, Product Management and Technical Excellence Groups

HCL Technologies, Infrastructure Services · Noida, India

Dec 2007 – Jun 2013

Partnered with sales on datacenter transformation, migration and managed-service opportunities, from customer discovery to final solution design.
Scoped sizing, effort and timelines with delivery and project managers for new and existing enterprise clients.
Designed infrastructure solutions in the architecture group, matched to customer needs to grow revenue.

Selected builds

User onboarding and offboarding: a PSA ticket provisions the Entra user, license, groups, RMM organization and policy, then posts a checklist back to the ticket, cutting provisioning from 2 days to 10 minutes, not counting the human approval step. Graph throttling, expired GDAP tokens and RMM auth errors land on the ticket with the raw error, never as a half-provisioned user.

Three-way license reconciliation: compares the Pax8 invoice, what is assigned in each tenant and what the PSA bills. It catches NCE mid-term changes, lapsed GDAP and stale agreement quantities before invoicing goes out.

Security alert enrichment: Huntress and SentinelOne alerts are enriched with sign-in data, deduplicated and routed to the right PSA company, so a technician gets one ticket with the context to act.

Ticket triage engine: classifies, prioritizes and routes ConnectWise tickets to the right queue, then escalates on SLA rules.

Platforms and tools

Automation

n8n (self-hosted on Azure Container Apps)RewstPower AutomatePowerShellPythonREST and GraphQL APIsWebhooksJSON and NDJSONOAuth 2.0 and SAML SSOMicrosoft GraphRetry-safe workflow patternsPSA ticket write-backNinjaOne scriptingNinjaOneLogger

PSA and RMM

ConnectWise PSAAutotask PSAHaloPSASyncroKaseya BMSSuperOpsNinjaOne

Microsoft

Microsoft 365Exchange Online and hybridGraph APIEntra IDIntuneAzureAVDPartner Center (GDAP, NCE)

Azure OpenAIAzure AI SearchAnthropic ClaudeAmazon ConnectElevenLabs

Security and continuity

HuntressSentinelOneFortiGateDatto BCDR

Licensing, documentation and tenants

Pax8LiongardCIPP

Observability

PrometheusGrafanaAzure Log Analytics

Containers and orchestration

Kubernetes (AKS, EKS, self-managed)HelmGitOpsDocker

Infrastructure as code

TerraformBicep and ARMAWS CloudFormation and CDKAnsible

CI/CD

GitHub ActionsAzure DevOpsGitLab CIJenkins

Linux

RHEL familyUbuntu and Debian

Data and streaming

Apache KafkaETL pipelines