Connecting your offices and your people

Selected work demonstrating this service.

• Managed 30 Ubuntu Linux VPS instances

  Managed 30 Ubuntu Linux VPS instances, implementing disaster recovery strategies and ensuring optimal network configurations.

• Managed 8 WireGuard and IPsec VPN connections

  Managed and troubleshot 8 WireGuard VPN and IPsec VPN connections, ensuring secure communication across Google Cloud and Linux systems.

• Administered network infrastructure

  Administered network infrastructure for over 1,000 servers, ensuring optimal system deployment, security, and troubleshooting.

• Configured and deployed 1,000 Wi‑Fi routers

  Configured and deployed 1,000 Wi‑Fi routers, improving network accessibility and performance for clients.

• Administered 100 Bare Bone servers

  Administered 100 Bare Bone servers, physical networks, and IP telephony systems, ensuring robust infrastructure for company growth.

• Provisioned Azure infrastructure as code

  Provisioned Azure infrastructure as code with Bicep — Container Apps, PostgreSQL Flexible Server, Front Door/WAF and networking — across the development, staging and production environments.

• Kept IPTV streaming signals running non‑stop

  Ensured uninterrupted delivery of IPTV streaming signals between suppliers and clients, monitoring and maintaining the streaming network and IP telephony around the clock.

• Three locks on the door, none of them locked

  Found and closed three SSH brute‑force protections that had never worked: a ban jail watching port 22 while the daemon listened on 1986, a rate limit shadowed by a broader rule above it, and a ban action whose binary never resolved, so no ban had ever applied.

• Verified firewall rules by position

  Verified firewall rules by position rather than presence, reading the numbered rule list and the live packet‑filter chain, because a rule that exists is not a rule any packet reaches.

• Reconciled a 20‑record DNS zone as code

  Reconciled a 20‑record DNS zone declaratively against the Cloudflare API with separate audit and BIND‑export entry points, and turned the CDN proxy back off on privacy grounds after building it.

• Provisioned a second server from code

  Automated the provisioning of a second server on a second cloud provider, creating the firewall before the machine so it is born behind one, with both providers' firewalls written directly against their REST APIs to avoid a third‑party collection.