About Thembekani Khumalo
Systems Engineer · Trainer · Community Leader · Based in Cape Town, South Africa
Thembekani Khumalo is a Systems Engineer based in Cape Town, South Africa, with more than five years of hands-on experience in enterprise IT infrastructure, Unified Endpoint Management (UEM), and Microsoft Azure. He currently holds an L3 Systems Engineer role at Heineken Beverages, headquartered in Stellenbosch, where he specialises in Unified Endpoint Management and manages device compliance across the company's global operations.
His primary focus is the South African operation, where he works on specialised IT programmes spanning endpoint management, asset governance, vendor and contract analysis, software asset management, and endpoint security, while also providing advanced escalation support to desktop engineering teams. Beyond South Africa, he supports other OpCos through LSR (Lean, Share, and Reapply), including the United Kingdom, Brazil, Germany, Denmark, India, Zambia, Namibia, Kenya, and multiple other African territories.
Who is Thembekani Khumalo?
Beyond his engineering career, Thembekani is the founding Director of the Itholelomzansi Foundation "” a non-profit he established in January 2015 to drive youth empowerment, skills development, and community upliftment in underserved South African communities. He also serves as Finance Administrator for the First 12 Apostolic Church of Jesus Christ, where he leads weekly finance governance across 10+ branches and 6 district accounts in the Western Cape, overseeing branch reviews, treasury reconciliation, member-contribution tracking, and at-risk branch escalation, supported by an automated reporting pipeline he architected and maintains. He brings over seven years in hospitality and accreditation as a MICT SETA facilitator and assessor, delivering NQF-level training programmes across Business Analysis, Cybersecurity, and Advertising.
This breadth of experience, spanning enterprise IT, automation engineering, community development, education, and hospitality, gives Thembekani a uniquely human-centred approach to technology: he understands not only how systems work, but how people use them.
What does Thembekani Khumalo specialise in?
Thembekani specialises in Unified Endpoint Management (UEM), Microsoft Azure, and enterprise IT infrastructure. His core technical expertise includes managing device compliance in Microsoft Intune and Microsoft Entra ID, coordinating endpoint security, performing patch and vulnerability management, and providing advanced escalation support to desktop engineering teams. He works fluently across Jira, ServiceNow, and Power BI, and brings strong capability in Software Asset Management (SAM) and vendor and contract analysis. He builds custom automation and reporting solutions using AI, in Google Apps Script, VBA, and JavaScript, bridging enterprise systems with operational workflows.
Cloud & UEM
Microsoft Azure, Intune, Azure AD, Office 365, device compliance at global scale.
Security & Compliance
Endpoint security, patch compliance, antivirus governance, MFA, FortiClient VPN.
Leadership & Training
Accredited facilitation, team leadership, community development, strategic planning.
AI-Assisted Delivery
AI-supported solution design, coding assistance, validation, and documentation across real automation and software delivery work.
Career Credentials & Key Achievements
Over the course of his career, Thembekani has delivered measurable impact across every role he has held. His key professional achievements include: View all projects and career history.
- Successfully managed IT device compliance for Heineken Beverages' global operations (95%+ Tanda compliance standard maintained).
- Led the replacement and refurbishment of over 1,000 devices across multiple South African sites (RRIPL project, Distell/BCX).
- Achieved a 95% same-day ticket resolution rate with 90% customer satisfaction at African Areté/BCX.
- Led the Green Zone Network Migration at Heineken Beverages "” migrating infrastructure from Redzone to Global Green Zone standard.
- Delivered ~£28,000/month (~£347,000/year) in Microsoft 365 cost savings at Heineken Beverages through SAM-led licence optimisation, removing expired licences and downgrading E5 accounts to E3 across the global estate.
- Delivered R14,600/month (R175,200/year, ~17.6%) savings on the Bidvest MSA contract review while preventing a R24,141/month cost increase (37.5%), through structured multi-version contract analysis and vendor negotiation support.
- Owned the Enterprise Scanner Governance & Visibility Initiative at Heineken Beverages, securing Architecture Review Board (ARB) approval and adoption across all sites for an estate of 800+ scanner devices.
- Led the RRIPL device replacement programme, replacing 300+ devices across 67 Heineken Beverages sites with full CAB change-management compliance and zero major business disruption.
- Led monthly Log4j vulnerability remediation across the Heineken Beverages enterprise endpoint estate, reducing security exposure within every global security report cycle and maintaining a full audit trail.
- Drove the Asset Data Integrity & Reconciliation Initiative, cross-referencing Intune and ServiceNow CMDB records to restore data accuracy and audit readiness across the full enterprise asset estate.
- Contributed to the KWAL Non-SAP Country Rollout (Heineken Beverages International, Kenya), supporting cross-border network integration and delivering rollout recommendations for stable post-go-live operations.
- Coordinated with UK-based global SAM and Insight teams on Microsoft 365 licence governance, contributing to global cost-saving and compliance reporting cycles.
- Architected and delivered the IT Asset Store Manager "” a multi-tab single-page web application managing bookings, fulfilment, stock receiving, asset registration, and live inventory with low-stock alerts across the Libertas, Hive, Tygervalley, and Wadeville IT Stores.
- Built the Procurement Control Workbook with VBA automation, automating the full procurement lifecycle from request to receipt and identifying a 20-item stock gap incorporated into the Libertas IT Store Item Master.
- Architected and maintains an 18-task Google Apps Script finance audit pipeline for the First 12 Apostolic Church of Jesus Christ, serving 10+ branches and 6 district accounts with weekly per-branch PDF reports, WhatsApp summaries, and AT-RISK branch escalation.
- Delivered accredited NQF-level training programmes through MICT SETA in Business Analysis, Cybersecurity, and Advertising, with high learner pass and accreditation rates.
- Founded and directed Itholelomzansi Foundation since 2015, directly impacting 75+ youth through empowerment programmes.
Professional Timeline
| Period | Role | Organisation |
|---|---|---|
| Mar 2024 "“ Present | Systems Engineer | UEM (L3) | Heineken Beverages |
| Aug 2022 "“ Mar 2023 | Desktop Engineer (L2) | BCX / Distell |
| Apr 2022 "“ Aug 2022 | Project Team Lead | BCX / Distell (RRIPL) |
| Oct 2021 "“ Mar 2022 | Customer Engineer (L2) | African Areté / BCX / Distell |
| Apr 2021 | Desktop Engineer (L2) | First Technologies / Distell |
| Sep 2018 "“ Jan 2021 | Facilitator & Assessor | KMS / USAPHO LOLUHLE / MICT SETA |
| Jan 2015 "“ Present | Director (Founder) | Itholelomzansi Foundation |
How can you work with Thembekani Khumalo?
Thembekani is open to opportunities in systems engineering, unified endpoint management, IT consultancy, and technology training. He brings a unique combination of deep technical expertise and strong interpersonal skills developed through years of customer-facing and community work.
To connect with Thembekani for career opportunities, technical collaboration, or community partnerships, visit the Contact page or connect directly on LinkedIn.
Why does Thembekani Khumalo stand out as a Systems Engineer?
Thembekani Khumalo stands out as a Systems Engineer because he combines rigorous technical expertise in Microsoft Azure and Unified Endpoint Management with rare leadership experience "” managing global IT compliance at Heineken Beverages while simultaneously directing a community non-profit organisation. This dual skillset makes him equally effective in technical escalations and cross-functional stakeholder communication.
Itholelomzansi Foundation
The Itholelomzansi Foundation is a non-profit organisation founded by Thembekani Khumalo in January 2015. Based in Cape Town, South Africa, the Foundation focuses on youth empowerment, arts and culture, skills development, and community upliftment. Its work spans free theatre classes at local schools, gender-based violence awareness campaigns, film and storytelling projects, and entrepreneurship support for young people from underserved communities.
Since its founding, the Foundation has directly impacted the lives of more than 75 young people, built a strong digital presence, and expanded its programmes to multiple schools and community venues. Thembekani manages the Foundation's strategy, operations, digital platforms, and fundraising alongside his full-time IT career.