01
Users and branches
Offices, remote teams and secure VPN access
IPsec VPN · Tailscale
Warsaw, Poland · since 2012
IT infrastructure management and DevOps
I build and run server environments that do not fall over at the first traffic peak: private cloud, configuration automation, and security treated as a layer rather than an add-on.
B2B engagements, under contract, with an agreed response time.
Scope of operations
- cluster nodes
- 3 × Proxmox VE
- storage
- Ceph, 3× replication
- backups
- PBS, monthly restore test
- monitoring
- Zabbix + Grafana
- remote access
- IPsec / zero-trust
An example scope for a single production environment. This is not live monitoring data.
What it runs on
- Proxmox VE
- Ceph
- Ansible
- Terraform
- GitLab CI
- HAProxy
- Zabbix
- Grafana
- Fortigate
- Percona XtraDB
- Azure
Services
Three areas where I can help
From designing the infrastructure, through securing it, to running it day to day with an agreed response time.
Architecture
From secure access to recoverable backups
A layered model connects networking, compute, data and cloud, while automation and observability span the entire environment.
SHAD / IT architecture modelFlow direction
- 02
Edge and protection
Firewall, VPN, WAF and traffic balancing
Fortigate · WAF · HAProxy
- 03
Segmentation and routing
Controlled traffic between zones and services
BGP · NetBox · Cisco
- 04
Cluster and services
Highly available virtual machines, containers and apps
Proxmox VE · Docker
- 05
Data and recovery
Distributed storage, backups and restore testing
Ceph · PBS · MinIO
- 06
Cloud and hybrid
Public and on-premise resources connected by design
Azure · AWS · Google Cloud
Automation and delivery
Ansible · Terraform · GitLab CIRepeatable configuration, infrastructure as code and deployment pipelines.
Monitoring and logging
Zabbix · Grafana · GraylogMetrics, alerts and central logging across every layer.
Technology
The stack I work with
Tools chosen for a specific problem. Nothing here is used because it happens to be fashionable.
High-availability Proxmox clusters, distributed storage and containers. Your own cloud instead of someone else’s invoice.
- Proxmox VE· HA clusters
- Proxmox Backup Server
- Ceph
- KVM
- QEMU
- Docker
- MinIO· S3-compatible storage
How I work
Four steps, always in this order
No audit means no design, no design means no rollout. This order saves money by the third step.
Step 01
Audit and analysis
An inventory of what is actually running and a risk list ordered by business impact. Without this step everything that follows is guesswork.
Step 02
Architecture design
The target shape of the environment, with cost, schedule and a rollback plan. Decisions are made before the rollout, not during it.
Step 03
Implementation
Staged delivery, with configuration described in Ansible and Terraform. Every step is repeatable and reversible.
Step 04
Operations and monitoring
Monitoring with thresholds tuned to real traffic, updates, restore testing and a report on the state of the environment.
Certifications
Verified competencies
Hands-on exams and training that genuinely changed how I design environments.
Certified System Administrator (LFCS)
Linux Foundation
A hands-on Linux system administration exam. Tasks are performed live on a running system, with no multiple-choice questions.
Read the postComputer Network Security
Niebezpiecznik
Training in penetration testing and network attack techniques. The attacker’s perspective is the basis for sane defence.
Read the postCCNA Routing & Switching
Cisco
Network design and operations: routing, switching, VLANs and troubleshooting. The foundation for working with BGP and multi-site networks.
Read the post
References
Companies that have trusted shad
References from the space, emerging technologies, insurance and insurtech sectors.
Airbus Defence and Space
Space industry
AI Clearing
Emerging technologies
WAGAS
Insurance and insurtech
Experience in other industries
- Global e-commerce
- Industry and manufacturing
- Public sector
- Hosting services
Blog
Latest posts
Technical notes from practice: configurations, lessons from rollouts and certifications.
4 min read
A GlusterFS cluster as the foundation of a private cloud
Deploying GlusterFS behind a 40 TB+ redundant storage cluster on four nodes: volume types, trade-offs, and how it compares to Ceph and BeeGFS.
1 min read
A cloud computing panel: servers and storage in the cloud
A custom panel for managing cloud servers: automated instance provisioning, online payments, invoicing, 2FA and provider API integration.
1 min read
Linux Foundation Certified System Administrator (LFCS)
What the LFCS certification is, how its hands-on exam works, and the full scope of material covered by the LFS201 course.
Contact
Describe the problem and get a specific answer
The fastest way to get to the point is to outline your current environment and what needs to change in your first message.
················