Work Experience

Operate a production-grade Linux and security operations homelab. 3-node Proxmox VE cluster with Ceph distributed storage and CephFS, hosting hardened service VMs under live-migration high availability, capacity-planned failover, and strict node-affinity rules for critical workloads. Trust-based VLAN segmentation on OPNsense with default-deny inter-VLAN policy; WAN-facing services isolated in a dedicated DMZ behind a CrowdSec-protected reverse proxy. Wazuh SIEM deployed across every service VM for centralized log collection, file-integrity monitoring, rootkit detection, and incident response. Backups follow the 3-2-1 rule across Proxmox Backup Server snapshots and ZFS dataset snapshots, with one encrypted offsite cloud copy. Full infrastructure lifecycle automated with OpenTofu and Ansible through a custom operator CLI, backed by a private Git server with integrated CI.

Performed Linux administration on production servers hosting client-facing sites: availability and log monitoring, automated backups, security patching, and incident response to restore service when issues occurred. Built and maintained CI/CD pipelines for automated testing and zero-downtime deployment to production; provided ongoing maintenance and direct client support across the lifetime of each engagement. Stack: Vue.js, Nuxt.js, Tailwind CSS on the frontend; Linux VPS, Nginx, systemd, GitHub Actions on the deployment layer.

Completed secondary education with a focus on computer science and telecommunications. Gained a solid foundation in programming principles, networking, and web technologies through both theoretical and practical coursework.