Skip to content
PL

Skills

What I actually do day to day

The full technology matrix, project experience and certifications. No vague claims about “familiarity with operating systems”.

57 technologies in the matrix

Technology matrix

  • Virtualization & private cloud7

    High-availability Proxmox clusters, distributed storage and containers. Your own cloud instead of someone else’s invoice.

    • Proxmox VE· HA clusters
    • Proxmox Backup Server
    • Ceph
    • KVM
    • QEMU
    • Docker
    • MinIO· S3-compatible storage

  • Automation & IaC4

    Infrastructure described as code: repeatable rollouts, reviewable change history, no hand-built servers.

    • Ansible
    • AWX
    • Terraform
    • Bash

  • CI/CD4

    Pipelines that build, test and deploy, from commit to production with no manual steps.

    • GitLab CI
    • GitHub Actions
    • Jenkins
    • Git

  • Networking10

    Addressing design, routing and load balancing. A network you can grow without a rewrite.

    • HAProxy
    • Nginx
    • BGP
    • DNS
    • Cisco
    • Juniper
    • IPFire
    • LACP / bonding
    • NetBox· documentation and IPAM
    • Cloudflare

  • Security11

    Segmentation, access control and vulnerability management, from the firewall to an ISO 27001 rollout.

    • Fortigate
    • WAF
    • IPsec VPN
    • Tailscale· zero-trust access
    • OpenVPN
    • Greenbone· vulnerability scanning
    • AlienVault
    • ISO 27001
    • Active Directory
    • ClamAV
    • Squid

  • Monitoring & logging6

    Knowing about an outage before users report it: metrics, alert thresholds and central logging.

    • Zabbix
    • Grafana
    • New Relic
    • Percona Monitoring & Management
    • Rsyslog
    • Graylog

  • Databases & queues3

    Replication, clustering and query tuning. A data layer that survives production traffic.

    • Percona XtraDB Cluster
    • MySQL
    • RabbitMQ

  • Public cloud & hybrid4

    Migrations and hybrid environments: some workloads with a provider, some on-premise. This is by design, not by accident.

    • Azure· VMs, Entra ID, VNets, policies
    • AWS
    • Google Cloud
    • Oracle Cloud

  • Systems & services8

    The everyday working layer: Linux systems and the services the rest of the infrastructure stands on.

    • Ubuntu
    • Debian
    • Postfix
    • Samba
    • NFS
    • CUPS
    • Rocket.Chat
    • PHP / Magento

Project experience

  1. E-commerce cluster operations

    A global sales platform serving roughly 4 million users a month.

    • Operating Magento clusters together with a Percona XtraDB Cluster database layer.
    • Load balancing and traffic termination on HAProxy, performance tuning for sales peaks.
    • Database performance monitoring in Percona Monitoring & Management and query tuning.
    • Magento
    • Percona XtraDB Cluster
    • HAProxy
    • MySQL
    • PMM

  2. Building a security function and ISO 27001 rollout

    Team lead role for information security across the organisation.

    • Building the team and its processes from scratch: incident reporting, access reviews, vulnerability management.
    • Implementing ISO 27001 requirements across both technical and procedural layers.
    • Central logging and recurring vulnerability scanning as a permanent part of operations.
    • ISO 27001
    • Greenbone
    • Graylog
    • AlienVault
    • Active Directory

  3. On-premise to Azure migration

    Moving server environments to public cloud within an agreed maintenance window.

    • Describing the target environment in Terraform: virtual networks, machines and policies.
    • Identity integration with Azure AD and a clean-up of permissions.
    • A rollback plan prepared before the migration, not after the first problem.
    • Azure
    • Terraform
    • Azure AD
    • Ansible

  4. Hybrid multi-cloud environment

    Workloads distributed across Azure, AWS, Google Cloud, Oracle Cloud and an on-premise server room.

    • Matching each workload’s placement to its cost profile and legal requirements.
    • Consistent Ansible automation regardless of the provider.
    • Unified monitoring of every environment in Zabbix and Grafana.
    • Azure
    • AWS
    • Google Cloud
    • Oracle Cloud
    • Ansible
    • Zabbix

  5. Running an in-house data centre

    Roughly 35 physical servers and 50 virtual machines, over 40 TB of redundant storage.

    • High-availability Proxmox VE clusters with Ceph-backed storage.
    • Backups in Proxmox Backup Server, including restore testing.
    • Hardware layer operations: power, networking, component replacement, capacity planning.
    • Proxmox VE
    • Ceph
    • Proxmox Backup Server
    • KVM

Certifications

  • Certified System Administrator (LFCS)

    Linux Foundation

    A hands-on Linux system administration exam. Tasks are performed live on a running system, with no multiple-choice questions.

    Read the post

  • Computer Network Security

    Niebezpiecznik

    Training in penetration testing and network attack techniques. The attacker’s perspective is the basis for sane defence.

    Read the post

  • CCNA Routing & Switching

    Cisco

    Network design and operations: routing, switching, VLANs and troubleshooting. The foundation for working with BGP and multi-site networks.

    Read the post

Areas of specialisation

  • Linux administration at 100+ server scale
  • Configuration automation with Ansible and AWX
  • Deployment pipelines in GitLab CI
  • Network design and routing, including BGP
  • Central logging and vulnerability scanning
  • Working under pressure during outages and recovery

Contact

Describe the problem and get a specific answer

The fastest way to get to the point is to outline your current environment and what needs to change in your first message.

················