Professional Projects
Enterprise delivery across infrastructure, governance, automation, and software asset management
This portfolio highlights 20+ projects delivered across Heineken Beverages, BCX/Distell, church finance operations, and personal initiatives. Projects are presented in a single dynamic list, ordered from oldest to newest, and include objective, responsibilities, outcomes, evidence, and tools used.
What major IT projects has Thembekani Khumalo delivered?
Thembekani Khumalo has delivered major IT projects across device governance, endpoint compliance, software asset management, rollout support, automation, and operational reporting. The portfolio includes enterprise delivery work from Heineken Beverages and BCX/Distell, as well as selected independent systems projects built to solve real operational problems.
How are these projects presented?
Projects are shown in a single chronological list from oldest to newest so that career progression, delivery scope, and increasing responsibility are easy to follow across time.
How should this project portfolio be read?
Each project is structured around objective, role, scope, responsibilities, outcomes, evidence, and tools used. This makes the page read like verified delivery experience rather than a simple list of project names.
Heineken Beverages South Africa | 2025 - 2026
Project Objective
Establish a centralised and auditable governance model for enterprise scanner devices to improve visibility, lifecycle management, and compliance across all sites.
Role & Ownership
Program Owner
Scope & Scale
Enterprise-wide across multiple operational sites with 800+ scanner devices.
Key Responsibilities
- Led end-to-end development of the scanner governance framework for a controlled and auditable lifecycle model.
- Authored and presented the Architecture Review Board submission and design decision documentation.
- Designed and executed an MDM proof of concept for centralised device management.
- Coordinated Bidvest and Strato vendors around service delivery and contractual responsibilities.
- Established reporting frameworks for device status, lifecycle stage, and compliance posture.
Outcomes & Results
- Governance framework approved and adopted across impacted sites.
- ARB submission accepted and design decisions ratified.
- Improved scanner visibility and audit readiness across the estate.
- MDM proof of concept validated for enterprise rollout.
Evidence & Artefacts
- ARB submission documentation
- Asset lifecycle analysis tracker
- Governance framework SOP
- MDM proof-of-concept validation report
Tools & Technologies
Microsoft Azure Microsoft Intune Microsoft Excel PowerPoint Jira ServiceNowHeineken Beverages South Africa | 2025
Project Objective
Execute an enterprise-wide device replacement programme to restore lifecycle compliance, audit readiness, and operational continuity.
Role & Ownership
Program Owner - Device Replacement
Scope & Scale
300+ devices replaced across 67 sites.
Key Responsibilities
- Managed the full replacement rollout across 67 sites, including logistics and scheduling.
- Owned CAB change execution for the rollout window.
- Monitored progress across 300+ devices using a live replacement tracker.
- Coordinated asset recovery and decommissioning of replaced devices.
- Delivered weekly progress reporting and resolved closure gaps.
Outcomes & Results
- 300+ devices replaced within the programme window with full CAB compliance.
- Asset recovery and decommissioning completed across all 67 sites.
- Device lifecycle compliance restored and audit readiness confirmed.
Evidence & Artefacts
- Replacement programme tracker
- CAB change records
- Asset recovery and decommissioning log
- Programme closure report
Tools & Technologies
ServiceNow Microsoft Excel Microsoft Intune Microsoft TeamsHeineken Beverages South Africa | 2025 - Ongoing
Project Objective
Implement monthly remediation of Log4j vulnerabilities across endpoint environments to reduce organisational security exposure.
Role & Ownership
Execution Lead - Vulnerability Remediation
Scope & Scale
Enterprise endpoint environment covering all impacted devices across operational sites.
Key Responsibilities
- Analysed monthly vulnerability reports to identify impacted devices and exposure levels.
- Coordinated remediation activities with security teams and site engineers.
- Maintained a live tracker for status, priority, and closure timelines.
- Reported remediation progress and risk status to stakeholders on a regular cadence.
- Validated fixes using updated vulnerability reports and closure evidence.
Outcomes & Results
- All identified Log4j vulnerabilities remediated and confirmed closed each cycle.
- Security exposure reduced within agreed programme timelines every month.
- Stakeholder reporting maintained with a full audit trail.
Evidence & Artefacts
- Vulnerability impact analysis workbook
- Remediation tracker with closure confirmation
- Stakeholder status reports
- Validated post-remediation security report
Tools & Technologies
Microsoft Azure BeyondTrust Microsoft Excel Microsoft TeamsHeineken Beverages South Africa | 2026
Project Objective
Support vendor and contract decisions through structured analysis and cost modelling to secure compliant and cost-effective procurement outcomes.
Role & Ownership
Contract Analysis Lead - Vendor Decision Support
Scope & Scale
Multi-version MSA review across an approximately 800-device licensing estate with Bidvest and Strato.
Key Responsibilities
- Conducted multi-version contract analysis across V1, Rev 5, Rev 6, and Rev 7.
- Developed a commercial decision matrix comparing pricing, quantities, and service scope.
- Validated full-service coverage including lifecycle, MDM, and support services.
- Identified licensing and cost risks and supported vendor negotiations with data-backed analysis.
- Coordinated Bidvest and Strato while enforcing the approved 500-device baseline.
Outcomes & Results
- Delivered savings of R14,600 per month, equivalent to R175,200 annually.
- Prevented a further R24,141 per month cost increase.
- Optimised the final contract to R40,235 per month with an additional R410 monthly reduction.
- Enabled enterprise-level, data-driven vendor decision-making.
Evidence & Artefacts
- Contract review summary document
- License-volume analysis workbook
- Vendor engagement correspondence
- Risk register entries
Tools & Technologies
Microsoft Excel Microsoft Outlook Contract AnalysisHeineken Beverages South Africa | 2025 - Ongoing
Project Objective
Improve data accuracy and integrity across asset systems to support audit compliance and reliable reporting.
Role & Ownership
Execution Lead - Data Reconciliation
Scope & Scale
Enterprise-wide reconciliation across the Intune device estate and ServiceNow CMDB.
Key Responsibilities
- Cross-referenced Intune and ServiceNow data to identify inconsistencies.
- Resolved duplicate and inactive device records across systems.
- Defined and documented cleanup processes for ongoing governance.
- Developed validation workflows to prevent future data degradation.
- Enhanced audit reporting quality through improved data integrity.
Outcomes & Results
- Duplicate and inactive records eliminated across enterprise asset systems.
- Data accuracy materially improved to support audit readiness.
- Validation workflows embedded as standard practice for ongoing governance.
Evidence & Artefacts
- Data reconciliation tracker
- Cleanup process SOP
- Validation workflow documentation
- Audit reporting quality assessment
Tools & Technologies
Microsoft Excel Microsoft Intune ServiceNow [CMDB]Heineken Beverages International | 2024
Project Objective
Enable onboarding and connectivity for a non-SAP country environment, ensuring compliant application integration and stable network access.
Role & Ownership
Technical Contributor - Rollout Support & Documentation
Scope & Scale
KWAL onboarding in Kenya as a cross-border rollout for a non-SAP environment.
Key Responsibilities
- Analysed network constraints and routing requirements for the KWAL environment.
- Supported application integration design for non-SAP connectivity.
- Coordinated troubleshooting sessions across regional and central teams.
- Documented final solutions and configuration decisions for knowledge transfer.
- Provided rollout recommendations for a stable post-go-live environment.
Outcomes & Results
- KWAL environment successfully onboarded with stable connectivity.
- Non-SAP integration completed within the rollout timeline.
- Solutions and configuration decisions documented for ongoing support.
Evidence & Artefacts
- Network analysis documentation
- Rollout recommendation report
- Troubleshooting session records
- Final solution and configuration document
Tools & Technologies
Network Diagnostics Microsoft Teams Microsoft ExcelHeineken Beverages South Africa | 2023 - 2024
Project Objective
Optimise Microsoft 365 licensing, reduce cost, and strengthen software asset management governance and compliance evidence.
Role & Ownership
SAM Analysis & Remediation Lead
Scope & Scale
Enterprise software compliance across Microsoft 365, Adobe, and third-party apps with Flexera visibility and OpCo plus global coordination.
Key Responsibilities
- Owned SAM remediation governance using a structured playbook and master tracker.
- Coordinated with global SAM and Insight teams to close Flexera visibility gaps.
- Drove the local entitlements process to correct the software license position.
- Led remediation for unlicensed and non-standard software through Jira-governed actions.
- Supported Microsoft True-Up and cross-charge alignment by validating quantities and allocations.
Outcomes & Results
- Delivered approximately GBP 28,000 per month in Microsoft 365 cost savings, around GBP 347,000 annually.
- Improved the Flexera license compliance position by identifying and uploading missing entitlements.
- Reduced audit and compliance risk through remediation of unlicensed and non-standard software.
- Strengthened governance with a repeatable playbook and roadmap approach.
Evidence & Artefacts
- SAM remediation playbook and master tracker workbook
- SAM analysis decks with entitlement upload actions
- Flexera entitlement upload process materials
- Meeting notes with remediation actions and decisions
Tools & Technologies
Flexera One HeiSAM Microsoft 365 Admin Centre ServiceNow Jira Microsoft Excel Power BIHeineken Beverages South Africa (Libertas IT Store) | April 2026
Project Objective
Design and deliver a single-page web application for hardware bookings, fulfilment, stock receiving, asset registration, and inventory tracking.
Role & Ownership
Technical Lead - System Architect & Developer
Scope & Scale
Libertas, Hive, Tygervalley, and Wadeville IT stores with engineers, site coordinators, ServiceNow references, and the full hardware estate.
Key Responsibilities
- Designed and built a multi-tab SPA for dashboard, bookings, fulfilment, stock receiving, asset registration, and inventory.
- Implemented live inventory tracking with low-stock threshold alerts and drill-down panels.
- Built an inline fulfilment workflow capturing asset tag, serial number, and condition at point of issue.
- Integrated ServiceNow reference formats and real Heineken engineer and site data.
- Delivered CSV export, confirmation dialogs, toast notifications, and a 7-day booking-history dashboard.
- Applied AI-assisted development workflows using Claude, ChatGPT, and VS Code to accelerate design, implementation, and validation.
Outcomes & Results
- Full asset store management system delivered and operational across Libertas IT Store sites.
- Manual stock tracking eliminated through automatic inventory deductions on issue.
- Low-stock alerts help prevent stockouts, while CSV export supports monthly reporting.
Evidence & Artefacts
- Web application source files
- Booking and fulfilment workflow documentation
- Site and engineer data integration records
- Dashboard and inventory drill-down screenshots
Tools & Technologies
HTML CSS JavaScript ServiceNow Microsoft Excel localStorage Claude ChatGPT VS CodeHeineken Beverages South Africa (Libertas IT Store) | April 2026
Project Objective
Build a four-sheet Excel procurement workbook with VBA automation to manage item master data, monthly orders, tracking, and a live dashboard.
Role & Ownership
Technical Lead - Developer & Procurement Analyst
Scope & Scale
Libertas IT Store procurement lifecycle with a 20+ item gap analysis covering request through receipt.
Key Responsibilities
- Designed a four-sheet workbook for item master, monthly order request, order tracker, and dashboard.
- Built and delivered the modOrderAutomation VBA module for print-ready order form generation.
- Implemented auto-archiving of received orders to the tracker on status change.
- Conducted a 20-item stock gap analysis and incorporated the findings into the item master.
- Delivered the VBA as reusable .bas code with setup instructions.
- Applied AI-assisted development workflows using Claude, ChatGPT, and VS Code to accelerate design, implementation, and validation.
Outcomes & Results
- Procurement lifecycle automated from request to receipt.
- Order form generation reduced from a manual process to a single status change.
- 20-item gap analysis exposed and addressed stock shortfall risk.
Evidence & Artefacts
- IT_Asset_Order_Control.xlsm workbook
- modOrderAutomation.bas VBA module
- Gap analysis report
- Order form print template
Tools & Technologies
Microsoft Excel VBA Excel Dashboard Claude ChatGPT VS CodeThe First 12 Apostolic Church of Jesus Christ | 2025 - April 2026
Project Objective
Architect and deliver an automated Google Apps Script pipeline that analyses weekly branch finance files, generates PDF audit reports, and distributes summaries via WhatsApp and email.
Role & Ownership
Program Owner - System Architect & Developer
Scope & Scale
10+ church branches across the Western Cape with weekly automated execution across Drive, Slides, Gmail, and WhatsApp workflows.
Key Responsibilities
- Designed and built an 18-task pipeline with a master scheduler and shared utility modules.
- Implemented WhatsApp branch summaries and per-branch PDF generation through Google Slides templates.
- Built a four-slide report template with 40+ dynamic placeholders for branch finance reporting.
- Resolved critical Apps Script and Google Drive API issues, including temporal dead zone bugs and permission errors.
- Implemented Sunday-only execution control and runtime safeguards for automated versus manual runs.
- Applied AI-assisted development workflows using Claude, ChatGPT, and VS Code to accelerate design, implementation, and validation.
Outcomes & Results
- Automated finance review for 10+ branches from a manual process to scheduled weekly execution.
- Generated and emailed per-branch PDF audit reports automatically every Sunday.
- Distributed WhatsApp summaries to finance leadership with AT-RISK branch flags.
- Eliminated the manual weekly finance review process for the Western Cape finance office.
Evidence & Artefacts
- 18-module Google Apps Script project
- Google Slides report template
- Sample PDF branch audit reports
- WhatsApp summary format and schedule log
- GCP project configuration
Tools & Technologies
Google Apps Script Google Slides API Google Drive API Gmail API Google Sheets Microsoft Excel Claude ChatGPT VS CodeHeineken Beverages | June 2024 "“ October 2024
Project Objective
Conduct comprehensive audit of IT Za1 OpCo assets across 87 sites.
Key Responsibilities
- Develop and optimize Excel-based tracking reports
- Coordinate team movements and audit processes
- Verify data accuracy and consistency
- Generate detailed progress reports for stakeholders
Tools & Technologies
Excel VBA Azure-Microsoft Intune sharepointHeineken Beverages | January 2024 "“ March 2024
Project Objective
Migrate from Redzone to Global Green Zone network.
Key Responsibilities
- Migrate from Redzone to Global Green Zone network
- Configure laboratory environment for application testing
- Deploy and configure testing workstations
- Manage application testing with business group owners
- Create SOPs for support team
Tools & Technologies
Jira Excel Azure-Microsoft Intune TeamsHeineken Beverages | January 2024 "“ March 2024
Project Objective
Facilitate seamless onboarding for OpCos.
Key Responsibilities
- Facilitate seamless onboarding for OpCos
- Conduct user training and support sessions
- Configure mobile devices and ensure policy compliance
- Manage user ticket resolution
- Ensure successful data migration across platforms
Tools & Technologies
Azure-Microsoft Intune Excel loop Microsoft TeamsHeineken Beverages | December 2023 "“ February 2024
Project Objective
Recreate and enhance Consolidated Assets Register.
Key Responsibilities
- Recreate and enhance Consolidated Assets Register
- Conduct thorough assessment using data analysis
- Identify and rectify device discrepancies
- Implement live tracking functionalities
- Consolidate reports for streamlined asset management
Tools & Technologies
Excel VBA Jira Azure-Microsoft IntuneDistell/Heineken Beverages | September 2023
Project Objective
Onboard Heineken Beverages users to CIL Platform for Reporting.
Key Responsibilities
- Onboard Heineken Beverages users to CIL Platform for Reporting
- Configure CIL systems for optimal functionality
- Provide technical support and guidance
- Ensure users can submit data for managerial decision-making
Tools & Technologies
Remote Desktop Reporting Systems ExcelPersonal Project | 2023
Project Objective
Developed a digital financial management system for church.
Key Responsibilities
- Developed a digital financial management system for church
- Implemented secure user authentication
- Created intuitive financial tracking and reporting features
- Website URL: www.first12apostolicchurch.org
Technologies Used
Excel googlesheets looker studio chatGPTHeineken Beverages | January 2023 "“ March 2023
Project Objective
Establish laboratory environment for network simulation.
Key Responsibilities
- Setup network infrastructure mimicking Heineken environment
- Test various network scenarios
- Compile comprehensive testing reports
Tools & Technologies
Jira Teams Excel Service-now [SNOW]Digital Platforms & Systems Developer | 2023 - Present
Project Objective
Lead the design, development, and continuous enhancement of digital platforms, business-connect systems, and operational tools that support community development, entrepreneurship, communication, programme visibility, and service delivery initiatives across the foundation ecosystem.
Key Responsibilities
- Designed, developed, and deployed multiple responsive web platforms supporting community programmes, business networking, digital visibility, and stakeholder engagement initiatives.
- Built and maintained the Business Connect ecosystem, enabling businesses, entrepreneurs, and community members to connect, showcase services, and improve digital presence.
- Developed scalable front-end interfaces using Bootstrap, ensuring optimized performance and usability across desktop and mobile devices.
- Managed ongoing platform enhancements, feature rollouts, troubleshooting, and content updates aligned with evolving programme and operational requirements.
- Implemented structured development workflows including GitHub version control, deployment management, and cloud-based hosting integrations.
- Supported digital transformation initiatives by creating systems that improved communication, accessibility, operational efficiency, and programme visibility.
- Collaborated with stakeholders to gather requirements, improve user experience, and align digital solutions with organizational objectives.
- Integrated modern tools and AI-assisted workflows to streamline content management, development productivity, and platform scalability.
- Maintained website reliability, performance optimization, and continuous improvements across foundation digital assets.
- Primary website URL: www.itholelomzansi.com
Key Contributions
- Successfully launched and maintained the foundation's primary digital platforms and supporting programme systems.
- Enhanced community and business engagement through accessible digital networking and visibility tools.
- Improved operational efficiency through centralized web-based systems and structured digital workflows.
Technologies & Tools
OpenAI GitHub Cloudflare Visual Studio Code Bootstrap HTML5 CSS3 JavaScript Responsive Web Design Version Control & Deployment WorkflowsDistell | 2022 "“ 2023
Project Objective
Provide technical support for IT infrastructure.
Key Responsibilities
- Provide technical support for IT infrastructure
- Resolve user tickets and issues
- Collaborate with team members to resolve complex issues
- Ensure system uptime and optimal performance
Tools & Technologies
Manage central Engine [MEDC] Remote Desktop Bria 5Distell | 2022 "“ 2023
Project Objective
Testing all Approved Application moving over to new environment for compliance [142].
Key Responsibilities
- Established and configured a laboratory environment for application testing
- Deployed and configured workstations for testing procedures
- Managed application testing in collaboration with respective owners from each business group
- Provided progress updates via the Agile Jira board
- Conducted meetings to ensure alignment and address concerns
- Compiled comprehensive testing reports
- Identified and resolved technical issues
- Created SOPs for the support team for each application
- Identified 10 pilot users across different departments to test all systems
- Monitored, provided feedback, and troubleshot all arising issues
Tools & Technologies
Manage central Engine [MEDC] Sharepoint Service-now [SNOW] ExcelDistell |First Tech | 2022
Project Objective
Upgrading user devices within set period of their life span.
Key Responsibilities
- Replace user devices (PCs & Laptops)
- Schedule and coordinate appointments with users
- Conduct pre-checks for software and hardware architecture migration
- Ensure operating system compatibility with hardware at the bit level
- Provide remote support using Manage Engine
- Implement Windows 11 base build and Microsoft Office 2013/O365
- Build new PCs/laptops according to user specifications
- Upload all user data to OneDrive
- Ship new devices to designated sites
- Update completed device sheets and report to the line manager
- Provide post-installation support for arising user issues
- Build and configure TRADE XPRESS devices
- Coordinate with other teams (Sec Systems, Networks, Security, Enclosure)
- Liaise with the Unified Endpoint Management Systems Engineer for installation-related issues
- Troubleshoot and resolve any errors encountered
- Share knowledge with teammates
- Develop a support knowledge base document
- Create and record a risk management document for the project & complete all forms
Tools & Technologies
Cyber Security Software Training Materials Employee EngagementHeineken Beverages | April 2021 "“ August 2021
Project Objective
Migrating Distel from on Prem to Cloud .
Key Responsibilities
- Address user tickets regarding hardware, software, and networking
- Walk customers through installing applications
- Provide support to users before, during, and after migration in South Africa, Africa, and abroad
- Conduct software and hardware architecture migration pre-checks using SimpleHelp to connect to users
- Ensure the operating system is compatible with the hardware at the bit level
- Upgrade Windows OS from lower versions to higher versions (e.g., Windows 7 to Windows 10)
- Upgrade Microsoft Office from older versions to Office 365 (e.g., Office 2010/2013 to Office 365)
- Conduct user orientations on Outlook Web Access
- Provide support for the Field Sales team's tablet users
- Offer remote support using Quick Support to connect to tablets and phones
- Ensure tablets have sufficient space to run installation scripts
- Refresh Outlook profiles so users can send and receive emails
- Assist users in cleaning up oversized email boxes
- Manage Symantec Server Software Management Agent
- Handle script management and installation
- Activate failed scripts
- Edit registry settings to ensure clean and optimal installation and application performance
- Share knowledge with teammates
- Develop a support knowledge base document
- Provide VIP/Executive support
- Document solutions for anomalies with Office 365/Office 2013 production software
- Document the migration procedure for African users